Design/Logic Flaw

2017-10-1917:29:00

PRIOn knowledge base

www.prio-n.com

2.7 Low

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

21.6%

JSON

Vulnerability in the Oracle Agile PLM component of Oracle Supply Chain Products Suite (subcomponent: Security). Supported versions that are affected are 9.3.5 and 9.3.6. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Agile PLM. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Agile PLM accessible data. CVSS 3.0 Base Score 4.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N).

CPENameOperatorVersion
agile_product_lifecycle_management_frameworkeq9.3.6
agile_product_lifecycle_management_frameworkeq9.3.5

CPE	Name	Operator	Version
	agile_product_lifecycle_management_framework	eq	9.3.6
	agile_product_lifecycle_management_framework	eq	9.3.5

References

www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html

www.securityfocus.com/bid/101387