Lucene search
+L

1352 matches found

CNNVD
CNNVD
added 2025/01/21 12:00 a.m.13 views

Oracle Supply Chain Products Suite 安全漏洞

Oracle Supply Chain Products Suite is a suite of supply chain solutions from Oracle Corporation USA. The product provides value chain planning, value chain execution, and product lifecycle management. A security vulnerability exists in Oracle Agile PLM Framework version 9.3.6 for Oracle Supply...

6.5CVSS9AI score0.00433EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/01/21 12:00 a.m.12 views

PT-2025-4281 · Oracle · Oracle Agile Plm Framework

Name of the Vulnerable Software and Affected Versions: Oracle Agile PLM Framework version 9.3.6 Description: The issue allows a low-privileged attacker with network access via HTTP to compromise the Oracle Agile PLM Framework, potentially resulting in unauthorized access to critical data or...

6.8CVSS8.8AI score0.00433EPSS
SaveExploits0References6
CNNVD
CNNVD
added 2025/01/21 12:00 a.m.12 views

Oracle Supply Chain Products Suite 安全漏洞

Oracle Supply Chain Products Suite is a suite of supply chain solutions from Oracle Corporation USA. It provides value chain planning, value chain execution, product lifecycle management, etc. Agile PLM Product Lifecycle Management is one of the product lifecycle management components. A security...

7.5CVSS9AI score0.00497EPSS
SaveExploits0References2
Oracle
Oracle
added 2025/01/21 12:00 a.m.196 views

Oracle Critical Patch Update Advisory - January 2025

A Critical Patch Update is a collection of patches for multiple security vulnerabilities. These patches address vulnerabilities in Oracle code and in third party components included in Oracle products. These patches are usually cumulative, but each advisory describes only the security patches add...

10CVSS8.2AI score0.99999EPSS
SaveExploits179Affected Software96
The Hacker News
The Hacker News
added 2024/12/16 11:00 a.m.12 views

Data Governance in DevOps: Ensuring Compliance in the AI Era

With the evolution of modern software development, CI/CD pipeline governance has emerged as a critical factor in maintaining both agility and compliance. As we enter the age of artificial intelligence AI, the importance of robust pipeline governance has only intensified. With that said, we'll...

7.2AI score
SaveExploits0
CNNVD
CNNVD
added 2024/12/05 12:00 a.m.9 views

Dashi Tongzhou AgileBPM 安全漏洞

Dashi Tongzhou AgileBPM is a fully open process solution from Dashi Tongzhou China. A security vulnerability exists in Dashi Tongzhou AgileBPM version 1.0.0, which stems from improper access control...

8.8CVSS6.5AI score0.00572EPSS
SaveExploits1References4
BDU FSTEC
BDU FSTEC
added 2024/11/26 12:00 a.m.11 views

The vulnerability of the Oracle Agile PLM application, related to insufficient validation of input data, allows a hacker to disclose protected information.

The vulnerability of the Oracle Agile PLM application is related to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to disclose protected information...

7.8CVSS7.8AI score0.01723EPSS
SaveExploits0References4Affected Software1
CISA KEV Catalog
CISA KEV Catalog
added 2024/11/21 12:00 a.m.29 views

Oracle Agile Product Lifecycle Management (PLM) Incorrect Authorization Vulnerability

Oracle Agile Product Lifecycle Management PLM contains an incorrect authorization vulnerability in the Process Extension component of the Software Development Kit. Successful exploitation of this vulnerability may result in unauthenticated file disclosure...

7.5CVSS6.8AI score0.01723EPSS
SaveIn wildExploits0
The Hacker News
The Hacker News
added 2024/11/20 4:24 a.m.28 views

Oracle Warns of Agile PLM Vulnerability Currently Under Active Exploitation

Oracle is warning that a high-severity security flaw impacting the Agile Product Lifecycle Management PLM Framework has been exploited in the wild. The vulnerability, tracked as CVE-2024-21287 CVSS score: 7.5, could be exploited sans authentication to leak sensitive information. "This vulnerabili...

7.5CVSS6.7AI score0.01723EPSS
SaveExploits0
NCSC
NCSC
added 2024/11/19 9:41 a.m.11 views

Vulnerability fixed in Oracle Agile PLM Framework

Oracle has fixed a vulnerability in version 9.3.6 of the Agile PLM Framework. The vulnerability allows unauthenticated attackers with network access to gain access to sensitive data. Oracle has released an out-of-band update to fix the vulnerability. See attached references for more information...

7.5CVSS9.3AI score0.01723EPSS
SaveExploits0References1
NVD
NVD
added 2024/11/18 10:15 p.m.29 views

CVE-2024-21287

Vulnerability in the Oracle Agile PLM Framework product of Oracle Supply Chain component: Software Development Kit, Process Extension. The supported version that is affected is 9.3.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracl...

7.5CVSS0.01723EPSS
SaveExploits0References2
OSV
OSV
added 2024/11/18 10:15 p.m.10 views

CVE-2024-21287

Vulnerability in the Oracle Agile PLM Framework product of Oracle Supply Chain component: Software Development Kit, Process Extension. The supported version that is affected is 9.3.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracl...

7.5CVSS7.3AI score0.01723EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2024/11/18 12:00 a.m.83 views

CVE-2024-21287

Vulnerability in the Oracle Agile PLM Framework product of Oracle Supply Chain component: Software Development Kit, Process Extension. The supported version that is affected is 9.3.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracl...

7.5CVSS6.8AI score0.01723EPSS
SaveIn wildExploits0References2
Positive Technologies
Positive Technologies
added 2024/11/18 12:00 a.m.11 views

PT-2024-8694

Name of the Vulnerable Software and Affected Versions Oracle Agile PLM Framework version 9.3.6 Description The issue is related to an unauthenticated file disclosure flaw in the Oracle Agile PLM Framework, allowing an attacker to access files without authentication. This vulnerability can result ...

7.8CVSS7.3AI score0.01723EPSS
SaveExploits0References54
VulnCheck KEV
VulnCheck KEV
added 2024/11/18 12:00 a.m.5 views

VulnCheck KEV: CVE-2024-21287

Oracle Agile Product Lifecycle Management PLM contains an incorrect authorization vulnerability in the Process Extension component of the Software Development Kit. Successful exploitation of this vulnerability may result in unauthenticated file disclosure...

7.5CVSS7.3AI score0.01723EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/11/18 12:00 a.m.6 views

Oracle Agile PLM Framework 安全漏洞

Oracle Agile PLM Framework is a framework product from Oracle Corporation. A security vulnerability exists in Oracle Agile PLM Framework version 9.3.6 that originates from allowing an attacker to gain unauthorized access to critical data via HTTP over the network...

7.5CVSS8.8AI score0.01723EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2024/11/07 12:00 a.m.15 views

The vulnerability of the Agile Boards component of the software tool for project and task management, JetBrains YouTrack, allows attackers to perform cross-site scripting attacks.

The vulnerability of the Agile Boards component of the JetBrains YouTrack project management and task management software is related to the lack of protective measures for the website structure. Exploiting this vulnerability could allow attackers to perform cross-site scripting attacks...

5.5CVSS5.2AI score0.003EPSS
SaveExploits0References2Affected Software1
OSV
OSV
added 2024/11/04 6:15 p.m.11 views

CVE-2024-51329

A Host header injection vulnerability in Agile-Board 1.0 allows attackers to obtain the password reset token via user interaction with a crafted password reset link...

8.8CVSS5.8AI score0.00564EPSS
SaveExploits1References2
NVD
NVD
added 2024/11/04 6:15 p.m.53 views

CVE-2024-51329

A Host header injection vulnerability in Agile-Board 1.0 allows attackers to obtain the password reset token via user interaction with a crafted password reset link...

8.8CVSS0.00564EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
added 2024/11/04 12:00 a.m.12 views

CVE-2024-51329

A Host header injection vulnerability in Agile-Board 1.0 allows attackers to obtain the password reset token via user interaction with a crafted password reset link...

7.4AI score0.00564EPSS
SaveExploits1References2
Rows per page
Query Builder