Vulnerabilidades do Oracle Agile PLM Framework
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam Oracle Agile PLM Framework: 2 registro(s), com versões afetadas e correções.
CVE-2024-21287
Alta · 7.5
KEV Alta · 56 CWE-863 18/11/2024
Oracle Agile Product Lifecycle Management (PLM) Incorrect Authorization Vulnerability
Vulnerability in the Oracle Agile PLM Framework product of Oracle Supply Chain (component: Software Development Kit, Process Extension). The supported version that is affected is 9.3.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Agile PLM Framework. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Agile PLM Framework accessible data. CVSS 3.1 Base Score 7.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N).
CVE-2024-20953
Alta · 8.8
KEV Alta · 55 CWE-502 16/02/2024
Oracle Agile Product Lifecycle Management (PLM) Deserialization Vulnerability
Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Export). The supported version that is affected is 9.3.6. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Agile PLM. Successful attacks of this vulnerability can result in takeover of Oracle Agile PLM. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).