Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Export). The supported version that is affected is 9.3.6. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Agile PLM. Successful attacks of this vulnerability can result in takeover of Oracle Agile PLM. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).
History

Fri, 29 Nov 2024 14:45:00 +0000

Type Values Removed Values Added
First Time appeared Oracle
Oracle agile Product Lifecycle Management
Weaknesses NVD-CWE-noinfo
CPEs cpe:2.3:a:oracle:agile_product_lifecycle_management:9.3.6:*:*:*:*:*:*:*
Vendors & Products Oracle
Oracle agile Product Lifecycle Management

cve-icon MITRE

Status: PUBLISHED

Assigner: oracle

Published: 2024-02-17T01:50:16.976Z

Updated: 2024-08-06T16:12:07.887Z

Reserved: 2023-12-07T22:28:10.627Z

Link: CVE-2024-20953

cve-icon Vulnrichment

Updated: 2024-08-01T22:06:37.367Z

cve-icon NVD

Status : Analyzed

Published: 2024-02-17T02:15:49.520

Modified: 2024-11-29T14:07:16.767

Link: CVE-2024-20953

cve-icon Redhat

No data.