SOC status:Duty analyst on shift

UK Cyber Defence
VulnerabilityModified

CVE-2016-5527

Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 and 9.3.5 allows remote attackers to affect confidentiality via unknown vectors, a different vulnerability than CVE-2016-5524.

MEDIUM 5.9EPSS 1.63%

Does this matter?

Lower severity and a low EPSS score (1.63%). Track it; it rarely justifies an emergency change on its own.

Description

Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 and 9.3.5 allows remote attackers to affect confidentiality via unknown vectors, a different vulnerability than CVE-2016-5524.

CVSS 3.0
5.9 MEDIUMCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
EPSS
1.63% probability · 75th percentile
CISA KEV
Not listed
Weakness
CWE-284
Affected
oracle/agile product lifecycle management
Source
secalert_us@oracle.com

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.