CVE-2016-3468

Unspecified vulnerability in the Oracle Agile Engineering Data Management component in Oracle Supply Chain Products Suite 6.1.3.0 and 6.2.0.0 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to webfileservices.

Vulnerability in Oracle Agile Engineering Data Management (Install component) allows an unauthenticated attacker via HTTP to unauthorizedly create, delete, or modify critical data and read a subset of data. It may also cause a hang or frequent crash (DOS).

Vulnerability in Oracle Agile Engineering Data Management (component Install) affecting version 6.2.1. An easily exploitable attack by an unauthenticated attacker with access to the physical communication segment requires user interaction and can lead to unauthorized creation, deletion or modification and access to critical data.

Vulnerability in Oracle Agile Engineering Data Management (component: Engineering Communication Interface) affects version 6.2.1. An unauthenticated attacker with network access via HTTP can gain unauthorized read access to a subset of data accessible in the application. CVSS 3.1 Base Score 5.3 (confidentiality impact).

Vulnerability in Oracle Agile Engineering Data Management (component Engineering Communication Interface) affecting version 6.2.1. A difficult-to-exploit network attack via HTTP by a low-privileged user can lead to unauthorized modification and access to critical data and partial DoS, with potential impact on other products.

Vulnerability in Oracle Agile Engineering Data Management (component: Engineering Communication Interface) affects version 6.2.1. A difficult-to-exploit attack by an unauthenticated attacker with access to the physical communication segment attached to the hardware running the application can lead to unauthorized access to critical data or complete access to all data accessible in the application. CVSS 3.1 Base Score 5.3 (confidentiality impact).

Vulnerability in the Oracle Agile Engineering Data Management product (component: Engineering Communication Interface) affecting version 6.2.1. A difficult to exploit vulnerability requires logon to the infrastructure and allows a low privileged attacker to gain unauthorized update, insert or delete access to some data as well as unauthorized read access to a subset of data.

Vulnerability in Oracle Agile Engineering Data Management (component Engineering Communication Interface) affecting version 6.2.1. A difficult-to-exploit attack by a low-privileged user with logon to the infrastructure allows takeover of the system.

Vulnerability in the Oracle Agile Engineering Data Management product (component: Engineering Communication Interface) affecting version 6.2.1. A difficult to exploit vulnerability allows a low privileged attacker with network access via HTTP to gain unauthorized update, insert or delete access to some data.

Vulnerability in Oracle Agile Engineering Data Management (component: Engineering Communication Interface) affects version 6.2.1. A low-privileged authenticated attacker with network access via HTTP can gain unauthorized read access to a subset of data accessible in the application. CVSS 3.1 Base Score 4.3 (confidentiality impact).