Lucene search
+L

623 matches found

NVD
NVD
added 2024/02/17 2:15 a.m.46 views

CVE-2024-20953

Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain component: Export. The supported version that is affected is 9.3.6. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Agile PLM. Successful attacks of this...

8.8CVSS8.5AI score0.03934EPSS
SaveExploits0References3
Prion
Prion
added 2024/02/17 2:15 a.m.25 views

Design/Logic Flaw

Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain component: Export. The supported version that is affected is 9.3.6. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Agile PLM. Successful attacks of this...

6.5CVSS7.2AI score0.03934EPSS
SaveExploits0References1
Prion
Prion
added 2024/02/17 2:15 a.m.23 views

Design/Logic Flaw

Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain component: Installation. Supported versions that are affected are Prior to 6.2.4.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

7.5CVSS6.7AI score0.00439EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2024/02/17 12:00 a.m.10 views

CVE-2024-20953

Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain component: Export. The supported version that is affected is 9.3.6. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Agile PLM. Successful attacks of this...

8.8CVSS7.2AI score0.03934EPSS
SaveIn wildExploits0References2
BDU FSTEC
BDU FSTEC
added 2024/01/30 12:00 a.m.15 views

The vulnerability of the Export component of the Oracle Agile PLM application, which allows a hacker to trigger a service failure.

The vulnerability of the Export component in the Oracle Agile PLM application is related to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

9CVSS7.8AI score0.03934EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/01/30 12:00 a.m.13 views

The vulnerability of the Installation component of the Oracle Agile Product Lifecycle Management for Processes application allows a perpetrator to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the Installation component of the Oracle Agile Product Lifecycle Management for Process application is related to insufficient validation of input data. Exploiting this vulnerability could allow attackers to compromise the confidentiality, integrity, and accessibility of the...

7.5CVSS7.2AI score0.00439EPSS
SaveExploits0References3Affected Software1
NCSC
NCSC
added 2024/01/18 12:00 a.m.47 views

Vulnerabilities fixed in Oracle Supply Chain products

Oracle has fixed vulnerabilities in several Supply Chain products. A malicious party could exploit the vulnerabilities to perform attacks that could result in the following categories of damage: Cross-Site Scripting XSS Denial-of-Service DoS. Access to sensitive data The vulnerabilities have been...

8.8CVSS6.7AI score0.99999EPSS
SaveExploits22
Positive Technologies
Positive Technologies
added 2024/01/16 12:00 a.m.11 views

PT-2024-1336 · Oracle · Oracle Agile Product Lifecycle Management For Process

Name of the Vulnerable Software and Affected Versions: Oracle Agile Product Lifecycle Management for Process versions prior to 6.2.4.2 Description: The issue is related to insufficient input validation in the Installation component of the Oracle Agile Product Lifecycle Management for Process...

7.5CVSS7.5AI score0.00439EPSS
SaveExploits0References10
Positive Technologies
Positive Technologies
added 2024/01/16 12:00 a.m.19 views

PT-2024-1347

Name of the Vulnerable Software and Affected Versions Oracle Agile PLM version 9.3.6 Description The issue is related to the deserialization of untrusted data in the Export component of Oracle Agile PLM, which can be exploited by a remote attacker to execute arbitrary code. This vulnerability is...

9CVSS7.6AI score0.03934EPSS
SaveExploits0References29
Positive Technologies
Positive Technologies
added 2023/12/07 12:00 a.m.9 views

PT-2023-9051 · Oracle · Oracle Agile Product Lifecycle Management For Process

Name of the Vulnerable Software and Affected Versions: Oracle Agile Product Lifecycle Management for Process version 6.2.4.2 Description: The issue is related to insufficient input validation in the Product Quality Management component. This allows a low-privileged attacker with network access vi...

8.5CVSS7.3AI score0.00596EPSS
SaveExploits0References6
NCSC
NCSC
added 2023/10/19 12:00 a.m.6 views

Vulnerability fixed in Oracle Supply Chain

Oracle has fixed a vulnerability in Agile PLM. A malicious party could exploit the vulnerability to gain sensitive information or full access to all data accessible to Oracle Agile PLM accessible data. Oracle has fixed the vulnerability in the following product: - Oracle Agile PLM...

7.5CVSS7.2AI score0.01116EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2023/08/02 12:00 a.m.18 views

The vulnerability of the WebClient component of the Oracle Agile PLM application, which allows a hacker to gain access to and modify data.

The vulnerability of the WebClient component of the Oracle Agile PLM application is related to errors in processing input data. Exploiting this vulnerability may allow an attacker to gain read, modify, add, or delete access to data...

5.5CVSS6.6AI score0.00355EPSS
SaveExploits0References4Affected Software1
NCSC
NCSC
added 2023/07/19 12:00 a.m.15 views

Vulnerabilities fixed in Oracle Supply Chain

Vulnerabilities have been fixed in Oracle Supply Chain products. A malicious party can exploit the vulnerabilities to launch attacks execute attacks that can result in the following categories of damage: Denial-of-Service DoS. Manipulation of data. Remote code execution User rights Access to...

9.8CVSS8.3AI score0.48788EPSS
SaveExploits6
NVD
NVD
added 2023/07/18 9:15 p.m.32 views

CVE-2023-22039

Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain component: WebClient. The supported version that is affected is 9.3.6. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Agile PLM. Successful attacks require human...

5.4CVSS0.00355EPSS
SaveExploits0References1
OSV
OSV
added 2023/07/18 9:15 p.m.10 views

CVE-2023-22039

Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain component: WebClient. The supported version that is affected is 9.3.6. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Agile PLM. Successful attacks require human...

5.4CVSS7.3AI score0.00355EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2023/07/18 12:00 a.m.10 views

PT-2023-4032 · Oracle · Oracle Agile Plm

Name of the Vulnerable Software and Affected Versions: Oracle Agile PLM version 9.3.6 Description: The issue is related to errors in processing input data in the WebClient component of Oracle Agile PLM. This can allow a remote attacker to gain read, modify, add, or delete access to data. Successf...

5.5CVSS5.6AI score0.00355EPSS
SaveExploits0References6
SUSE CVE
SUSE CVE
added 2023/02/15 5:46 a.m.13 views

SUSE CVE-2012-3140

Unspecified vulnerability in the Oracle Agile PLM For Process component in Oracle Supply Chain Products Suite 6.0.0.6.3 and 6.1.0.1.14 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Supply Chain Relationship Management...

5.5CVSS6.5AI score0.01009EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2023/02/15 5:46 a.m.9 views

SUSE CVE-2012-3154

Unspecified vulnerability in the Oracle Agile PLM Framework component in Oracle Supply Chain Products Suite 9.3.1.0 allows remote authenticated users to affect confidentiality, related to ATTACH...

4CVSS6.5AI score0.01136EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2023/02/15 5:46 a.m.5 views

SUSE CVE-2012-3161

Unspecified vulnerability in the Oracle Agile PLM Framework component in Oracle Supply Chain Products Suite 9.3.1.1 allows remote attackers to affect integrity via unknown vectors related to Web Client CS...

4.3CVSS6.7AI score0.01248EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2023/02/15 5:46 a.m.10 views

SUSE CVE-2012-3200

Unspecified vulnerability in the Oracle Agile PLM Framework component in Oracle Supply Chain Products Suite 9.3.1.1 allows remote authenticated users to affect confidentiality, related to ROLESPRV...

4CVSS6.5AI score0.01136EPSS
SaveExploits0References3
Rows per page
Query Builder