CVE-2016-3527
CriticalSummary
Unspecified vulnerability in the Oracle Demand Planning component in Oracle Supply Chain Products Suite 12.1 and 12.2 allows remote attackers to affect confidentiality and integrity via vectors related to ODPDA Servlet.
Risk Assessment
Attackers may exploit this vulnerability to compromise the confidentiality and integrity of data, potentially leading to serious consequences for the organization.
Recommendation
It is recommended to update to the latest version of Oracle software to mitigate the risks associated with this vulnerability.
Other vulnerabilities in Oracle Demand Planning
See all- CVE-2026-70846Critical
Vulnerability in Oracle Demand Planning (Oracle Supply Chain), component Internal Operations. Affected versions are 12.1 and 12.2. A low privileged attacker can remotely access and modify data via HTTP, with impact on other products.
- CVE-2026-70852High
Vulnerability in Oracle Demand Planning product of Oracle Supply Chain (component: Internal Operations). Affects versions 12.1 and 12.2. An unauthenticated attacker with network access via HTTP can easily compromise the system. Successful attacks may result in unauthorized access to critical data or complete access to all Oracle Demand Planning data, as well as unauthorized update, insert, or delete access to some data.
Original NVD description (English source)
Unspecified vulnerability in the Oracle Demand Planning component in Oracle Supply Chain Products Suite 12.1 and 12.2 allows remote attackers to affect confidentiality and integrity via vectors related to ODPDA Servlet.