Agile Product Lifecycle Management@9.3.6 Security Vulnerabilities and Issues — Agile Product Lifecycle Management@9.3.6 CVE List

Lucene search

OracleAgile Product Lifecycle Management9.3.6

21 matches found

CVE•added 2020/02/24 10:15 p.m.•1368 views

CVE-2020-1935

In Apache Tomcat 9.0.0.M1 to 9.0.30, 8.5.0 to 8.5.50 and 7.0.0 to 7.0.99 the HTTP header parsing code used an approach to end-of-line parsing that allowed some invalid HTTP headers to be parsed as valid. This led to a possibility of HTTP Request Smuggling if Tomcat was located behind a reverse prox...

5.8CVSS7.4AI score0.00618EPSS

CVE•added 2021/11/17 8:15 p.m.•198 views

CVE-2021-41165

CKEditor4 is an open source WYSIWYG HTML editor. In affected version a vulnerability has been discovered in the core HTML processing module and may affect all plugins used by CKEditor 4. The vulnerability allowed to inject malformed comments HTML bypassing content sanitization, which could result i...

8.2CVSS6.2AI score0.00123EPSS

CVE•added 2024/02/17 2:15 a.m.•189 views

CVE-2024-20953

Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Export). The supported version that is affected is 9.3.6. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Agile PLM. Successful attacks of this vulnerab...

8.8CVSS8.3AI score0.76481EPSS

CVE•added 2024/11/18 10:15 p.m.•168 views

CVE-2024-21287

Vulnerability in the Oracle Agile PLM Framework product of Oracle Supply Chain (component: Software Development Kit, Process Extension). The supported version that is affected is 9.3.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracl...

7.5CVSS6.9AI score0.73963EPSS

CVE•added 2018/05/11 8:29 p.m.•104 views

CVE-2018-1257

Spring Framework, versions 5.0.x prior to 5.0.6, versions 4.3.x prior to 4.3.17, and older unsupported versions allows applications to expose STOMP over WebSocket endpoints with a simple, in-memory STOMP broker through the spring-messaging module. A malicious user (or attacker) can craft a message ...

6.5CVSS7AI score0.0179EPSS

CVE•added 2018/01/18 2:29 a.m.•54 views

CVE-2018-2609

Vulnerability in the Oracle Agile PLM component of Oracle Supply Chain Products Suite (subcomponent: Security). Supported versions that are affected are 9.3.5 and 9.3.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Agile PLM. Suc...

6.1CVSS5.5AI score0.00524EPSS

CVE•added 2025/01/21 9:15 p.m.•53 views

CVE-2025-21556

Vulnerability in the Oracle Agile PLM Framework product of Oracle Supply Chain (component: Agile Integration Services). The supported version that is affected is 9.3.6. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Agile PLM Framew...

9.9CVSS8.8AI score0.00201EPSS

CVE•added 2017/08/08 3:29 p.m.•52 views

CVE-2017-10093

5.3CVSS4.3AI score0.00416EPSS

CVE•added 2017/10/19 5:29 p.m.•50 views

CVE-2017-10299

Vulnerability in the Oracle Agile PLM component of Oracle Supply Chain Products Suite (subcomponent: Security). Supported versions that are affected are 9.3.5 and 9.3.6. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Agile PLM. Succ...

4.3CVSS3.4AI score0.0021EPSS

CVE•added 2017/08/08 3:29 p.m.•48 views

CVE-2017-10082

6.1CVSS5.5AI score0.00463EPSS

CVE•added 2017/08/08 3:29 p.m.•47 views

CVE-2017-10080

6.1CVSS5.5AI score0.00463EPSS

CVE•added 2017/08/08 3:29 p.m.•47 views

CVE-2017-10092

6.1CVSS5.5AI score0.00463EPSS

CVE•added 2017/10/19 5:29 p.m.•47 views

CVE-2017-10308

Vulnerability in the Oracle Agile PLM component of Oracle Supply Chain Products Suite (subcomponent: Performance). Supported versions that are affected are 9.3.5 and 9.3.6. Easily exploitable vulnerability allows physical access to compromise Oracle Agile PLM. Successful attacks of this vulnerabili...

3.6CVSS3.3AI score0.00064EPSS

CVE•added 2017/08/08 3:29 p.m.•45 views

CVE-2017-10094

Vulnerability in the Oracle Agile PLM component of Oracle Supply Chain Products Suite (subcomponent: Security). Supported versions that are affected are 9.3.5 and 9.3.6. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Agile PLM. Succ...

5.4CVSS4.9AI score0.00183EPSS

CVE•added 2025/01/21 9:15 p.m.•45 views

CVE-2025-21564

8.1CVSS7.5AI score0.00111EPSS

CVE•added 2017/08/08 3:29 p.m.•44 views

CVE-2017-10052

Vulnerability in the Oracle Agile PLM component of Oracle Supply Chain Products Suite (subcomponent: PCMServlet). Supported versions that are affected are 9.3.5 and 9.3.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Agile PLM. S...

6.1CVSS5.5AI score0.00463EPSS

CVE•added 2017/08/08 3:29 p.m.•44 views

CVE-2017-10088

Vulnerability in the Oracle Agile PLM component of Oracle Supply Chain Products Suite (subcomponent: Security). Supported versions that are affected are 9.3.5 and 9.3.6. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Agile PLM executes...

3.6CVSS3.2AI score0.00063EPSS

CVE•added 2025/01/21 9:15 p.m.•41 views

CVE-2025-21565

Vulnerability in the Oracle Agile PLM Framework product of Oracle Supply Chain (component: Install). The supported version that is affected is 9.3.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Agile PLM Framework. Successful at...

7.5CVSS6.9AI score0.00082EPSS

CVE•added 2019/07/23 11:15 p.m.•40 views

CVE-2019-2817

Vulnerability in the Oracle Agile PLM component of Oracle Supply Chain Products Suite (subcomponent: Folders, Files & Attachments). Supported versions that are affected are 9.3.3, 9.3.4, 9.3.5 and 9.3.6. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP ...

5.4CVSS5AI score0.00782EPSS

CVE•added 2020/04/15 2:15 p.m.•40 views

CVE-2020-2920

Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Security). Supported versions that are affected are 9.3.3, 9.3.5 and 9.3.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Agile PLM. Successful attac...

6.1CVSS5.6AI score0.00935EPSS

CVE•added 2025/01/21 9:15 p.m.•39 views

CVE-2025-21560

Vulnerability in the Oracle Agile PLM Framework product of Oracle Supply Chain (component: SDK-Software Development Kit). The supported version that is affected is 9.3.6. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Agile PLM Fram...

6.5CVSS5.9AI score0.00057EPSS