CVE-2016-3470

High

Published: 21/07/2016(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

Unspecified vulnerability in the Oracle Transportation Management component in Oracle Supply Chain Products Suite 6.4.1 allows remote authenticated users to affect confidentiality and integrity via vectors related to Install.

Risk Assessment

This vulnerability may lead to breaches of data confidentiality and integrity within the system, which can have serious implications for the organization.

Recommendation

It is recommended to update to the latest version of the software and to monitor access to the system to detect potential abuses.

Other vulnerabilities in Oracle Transportation Management

See all

CVE-2015-2663High
Unspecified vulnerability in the Oracle Transportation Management component in Oracle Supply Chain Products Suite 6.1, 6.2, and 6.3.0 through 6.3.7 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Business Process Automation.
CVE-2026-60584High
Vulnerability in Oracle Transportation Management (component: CSV Management). Affected version is 6.5.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise the system. Successful attack can result in unauthorized access to critical data, modification, and partial denial of service.
CVE-2026-60583High
Vulnerability in Oracle Transportation Management (Install component) version 6.5.3. Low-privileged attacker via HTTP can take over the system.
CVE-2026-60434Medium
Vulnerability in Oracle Transportation Management (version 6.5.3) in the Authentication component. A low-privileged attacker via HTTP can gain unauthorized read access to data.
CVE-2026-60433Medium
Vulnerability in Oracle Transportation Management (part of Oracle Supply Chain) version 6.5.3. Allows an authenticated attacker with high privileges and network access via HTTP to unauthorizedly create, delete, or modify critical data and access it.

Original NVD description (English source)