peter bassill · operator
$ cve CVE-2016-3556 JSON

CVE-2016-3556

9.8
CRITICAL · CVSS 3.0 · EPSS 4.2% (pctl 91)

In your normal cycle

Critical by CVSS (9.8), but no sign of active exploitation.

Description

Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 and 9.3.5 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to EM Integration.

Scoring

CVSS9.8 (CRITICAL, v3.0)
VectorCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS4.2% — more likely to be exploited than 91% of all CVEs
On CISA KEVno
Public exploitnone known
Published2016-07-21
Last modified2026-06-17

Affected (1)

VendorProduct
oracleagile product lifecycle management

References

→ the Explorer  ·  watch your stack  ·  NVD