Oracle Agile PLM vulnerabilities

Vulnerability in Oracle Agile PLM (component: Attachments) version 9.3.6. A low-privileged attacker with network access via HTTP can compromise the system, leading to unauthorized access to critical data or all accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality impact).

Vulnerability in the Oracle Agile PLM component of Oracle Supply Chain Products Suite (subcomponent: Web Client). Affected versions are 9.3.5 and 9.3.6. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Agile PLM. Successful attacks require human interaction and may significantly impact additional products, resulting in unauthorized access to critical data or complete access to all Oracle Agile PLM accessible data. CVSS 3.0 Base Score 6.8 (Confidentiality impacts).