CVE-2017-10093

Vulnerability in the Oracle Agile PLM component of Oracle Supply Chain Products Suite (subcomponent: Security). Supported versions that are affected are 9.3.5 and 9.3.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Agile PLM. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Agile PLM accessible data. CVSS 3.0 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:oracle:agile_product_lifecycle_management_framework:9.3.5:*:*:*:*:*:*:*
cpe:2.3:a:oracle:agile_product_lifecycle_management_framework:9.3.6:*:*:*:*:*:*:*

History

21 Nov 2024, 03:05

Type Values Removed Values Added
References () http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html - Patch, Vendor Advisory () http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html - Patch, Vendor Advisory
References () http://www.securityfocus.com/bid/99692 - Third Party Advisory, VDB Entry () http://www.securityfocus.com/bid/99692 - Third Party Advisory, VDB Entry
References () http://www.securitytracker.com/id/1038947 - Third Party Advisory, VDB Entry () http://www.securitytracker.com/id/1038947 - Third Party Advisory, VDB Entry

Information

Published : 2017-08-08 15:29

Updated : 2024-11-21 03:05


NVD link : CVE-2017-10093

Mitre link : CVE-2017-10093

CVE.ORG link : CVE-2017-10093


JSON object : View

Products Affected

oracle

  • agile_product_lifecycle_management_framework
CWE
CWE-200

Exposure of Sensitive Information to an Unauthorized Actor