Oracle Agile PLM vulnerabilities

Vulnerability in Oracle Agile PLM (component: User and User Group) in version 9.3.6. An unauthenticated attacker with network access via HTTP can easily compromise the system. Successful attack leads to unauthorized access to critical data or complete access to all Oracle Agile PLM data.

Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 and 9.3.5 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Apache Tomcat.

Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 and 9.3.5 allows remote authenticated users to affect confidentiality, integrity, and availability via vectors related to AutoVue Java Applet.

Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 and 9.3.5 allows remote authenticated users to affect confidentiality, integrity, and availability via vectors related to RMIServlet.

Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 and 9.3.5 allows remote authenticated users to affect confidentiality, integrity, and availability via vectors related to ExportServlet.

Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 and 9.3.5 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to SDK.

Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 and 9.3.5 allows remote authenticated users to affect confidentiality, integrity, and availability via vectors related to PC / BOM, MCAD, and Design.

Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 and 9.3.5 allows remote authenticated users to affect integrity and availability via vectors related to File Folders / Attachment.

Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 and 9.3.5 allows remote authenticated users to affect integrity and availability via vectors related to File Folders / Attachment.

Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 and 9.3.5 allows remote authenticated users to affect integrity and availability via vectors related to PGC / Import.

An unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 and 9.3.5 allows remote attackers to affect confidentiality via vectors related to SDK.

Vulnerability in the Oracle Agile PLM product (component: Event Java PX) affecting version 9.3.6. A high privileged attacker with network access via T3 or IIOP can easily exploit this vulnerability, and attacks may significantly impact additional products (scope change).

Vulnerability in Oracle Agile PLM (Security component) affects version 9.3.6. An unauthenticated attacker with network access via HTTP can take over Oracle Agile PLM. CVSS score is 9.8.

Vulnerability in Oracle Agile PLM (Security component) allows an unauthenticated attacker via HTTP to unauthorizedly create, delete, or modify critical data and gain full access to all data.

Vulnerability in Oracle Agile PLM (component: Security). Affected version is 9.3.6. Easily exploitable by unauthenticated attacker with network access via HTTP, potentially leading to takeover of Oracle Agile PLM. CVSS 9.8.

Vulnerability in the Oracle Agile PLM product that allows an unauthenticated attacker with network access to remotely take over the system. Version 9.3.6 is particularly vulnerable.

Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 and 9.3.5 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to EM Integration.

Vulnerability in Oracle Agile PLM (component: Application Server) affecting version 9.3.6. An easily exploitable flaw allows an unauthenticated attacker with network access via HTTP to gain unauthorized access to data and cause a partial denial of service.

Vulnerability in Oracle Agile PLM (component: Folders, Files & Attachments) affecting version 9.3.6. An easily exploitable flaw allows a low privileged attacker with network access via HTTP to gain unauthorized access to data and to update, insert or delete it, but it requires human interaction and may significantly impact additional products (scope change).

Vulnerability in Oracle Agile PLM (component: SDK) version 9.3.6 allows a low-privileged attacker with network access via HTTP to gain unauthorized access to critical data or all Oracle Agile PLM accessible data. The attack may also impact additional products (scope change).

Vulnerability in Oracle Agile PLM (component: Application Server) version 9.3.6 allows a low-privileged attacker with network access via HTTP to gain unauthorized access to critical data or all Oracle Agile PLM accessible data. The attack may also impact additional products (scope change).

Vulnerability in Oracle Agile PLM (component: Folders, Files & Attachments) version 9.3.6, difficult to exploit, allows a low-privileged attacker with network access via HTTP to take over Oracle Agile PLM. Impacts confidentiality, integrity, and availability.

Vulnerability in Oracle Agile PLM (Web Client component) version 9.3.6. An unauthenticated attacker with network access via HTTP, requiring user interaction, can gain unauthorized update/insert/delete and read access to data. The attack may impact additional products (scope change).

Vulnerability in Oracle Agile PLM (Application Server component) version 9.3.6. An unauthenticated attacker with physical access to the communication segment can gain unauthorized access to critical data and modify or delete it.

Vulnerability in Oracle Agile PLM (component: Security) affects version 9.3.6. A low-privileged attacker with local access to the infrastructure can take over the product. Attacks may impact additional products (scope change). CVSS 8.8.

Vulnerability in Oracle Agile PLM (component: Security) version 9.3.6. An unauthenticated attacker via HTTP can compromise the system, but requires user interaction. Successful attack results in takeover of Oracle Agile PLM.

Vulnerability in Oracle Agile PLM (component: Export) version 9.3.6. A low-privileged attacker via HTTP can compromise the system, leading to takeover.

Vulnerability in Oracle Agile PLM (component: Security) version 9.3.6. An unauthenticated attacker via HTTP can gain unauthorized access to critical data or all accessible data, impacting confidentiality.

Vulnerability in Oracle Agile PLM (component: PGC / Excel Plugin) version 9.3.6. A low-privileged attacker via HTTP can modify, delete, or create data and cause system hangs or frequent crashes (DoS).

Vulnerability in Oracle Agile PLM (component: Gantt Chart) version 9.3.6. A low-privileged attacker with local access can compromise the system, but exploitation is difficult.

Vulnerability in Oracle Agile PLM (component: Application Server) version 9.3.6. A low-privileged attacker via HTTP can compromise the system, leading to takeover.

Vulnerability in Oracle Agile PLM (component: Security) version 9.3.6. Difficult to exploit, allows an unauthenticated attacker via HTTP to gain unauthorized access and modify critical data.

Vulnerability in Oracle Agile PLM (Security component) version 9.3.6. Difficult to exploit, allows an unauthenticated attacker with network access via HTTP to take over the system.

Vulnerability in Oracle Agile PLM (Security component) version 9.3.6. A low-privileged attacker with local access can easily exploit this vulnerability, potentially leading to unauthorized access to critical data or full access to all Oracle Agile PLM data. The attack may impact other products.

Vulnerability in Oracle Agile PLM (component: Security) version 9.3.6. Allows a low-privileged attacker with network access via HTTP to take over the system.

Vulnerability in Oracle Agile PLM (component: User and User Group) version 9.3.6. Allows a low-privileged attacker with network access via HTTP to take over the system.

Vulnerability in Oracle Agile PLM (component: Folders, Files & Attachments) version 9.3.6. Easily exploitable by an unauthenticated attacker with network access via HTTP, requiring user interaction. Successful attack can result in unauthorized access to critical data or complete access to all Agile PLM data. CVSS 6.5 (Confidentiality).

Vulnerability in Oracle Agile PLM (component: WebClient) version 9.3.6. A low-privileged attacker with network access via HTTP, requiring user interaction, can cause unauthorized update, insert, or delete of some data and unauthorized read of a subset. May impact additional products (scope change). CVSS 5.4.

Vulnerability in Oracle Agile PLM (component: Attachments) version 9.3.6. A low-privileged attacker with network access via HTTP can compromise the system, leading to unauthorized access to critical data or all accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality impact).

Vulnerability in the Oracle Agile PLM component of Oracle Supply Chain Products Suite (subcomponent: Web Client). Affected versions are 9.3.5 and 9.3.6. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Agile PLM. Successful attacks require human interaction and may significantly impact additional products, resulting in unauthorized access to critical data or complete access to all Oracle Agile PLM accessible data. CVSS 3.0 Base Score 6.8 (Confidentiality impacts).