CVE-2017-10093

Vulnerability in the Oracle Agile PLM component of Oracle Supply Chain Products Suite (subcomponent: Security). Supported versions that are affected are 9.3.5 and 9.3.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Agile PLM. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Agile PLM accessible data. CVSS 3.0 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).

Score

CVSS 3.0 5.3 Medium

Status

Modified - secalert_us@oracle.com

Published

2017-08-08

Last modified

2024-10-04

Weaknesses

CWE-200

Affected products

• Agile Product Lifecycle Management (Oracle)
• Agile Plm Framework (Oracle Corporation)

References

• http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html
• http://www.securityfocus.com/bid/99692
• http://www.securitytracker.com/id/1038947