CVE-2016-5504
Summary
| CVE | CVE-2016-5504 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2016-10-25 14:29:00 UTC |
| Updated | 2023-02-01 17:51:00 UTC |
| Description | Unspecified vulnerability in the Oracle Agile Product Lifecycle Management for Process component in Oracle Supply Chain Products Suite 6.1.0.4, 6.1.1.6, and 6.2.0.0 allows local users to affect confidentiality via vectors related to Supplier Portal. |
Risk And Classification
Problem Types: CWE-200
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Oracle | Agile Product Lifecycle Management For Process | 6.1.0.4 | All | All | All |
| Application | Oracle | Agile Product Lifecycle Management For Process | 6.1.1.6 | All | All | All |
| Application | Oracle | Agile Product Lifecycle Management For Process | 6.2.0.0 | All | All | All |
| Application | Oracle | Agile Product Supplier Collaboration For Process | 6.1.0.4 | All | All | All |
| Application | Oracle | Agile Product Supplier Collaboration For Process | 6.1.1.6 | All | All | All |
| Application | Oracle | Agile Product Supplier Collaboration For Process | 6.2.0.0 | All | All | All |
| Application | Oracle | Agile Product Supplier Collaboration For Process | 6.1.0.4 | All | All | All |
| Application | Oracle | Agile Product Supplier Collaboration For Process | 6.1.1.6 | All | All | All |
| Application | Oracle | Agile Product Supplier Collaboration For Process | 6.2.0.0 | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| Oracle Supply Chain Products Suite CVE-2016-5504 Local Security Vulnerability | BID | www.securityfocus.com | |
| Oracle Critical Patch Update - October 2016 | CONFIRM | www.oracle.com | Patch, Vendor Advisory |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.