CVE-2017-10093

MEDIUM

Oracle Agile PLM <9.3.6 - Info Disclosure

Title source: llm

Description

Vulnerability in the Oracle Agile PLM component of Oracle Supply Chain Products Suite (subcomponent: Security). Supported versions that are affected are 9.3.5 and 9.3.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Agile PLM. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Agile PLM accessible data. CVSS 3.0 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).

References (3)

[Patch, Vendor Advisory] http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/bid/99692

[Third Party Advisory, VDB Entry] http://www.securitytracker.com/id/1038947

Scores

CVSS v3 5.3

EPSS 0.0042

EPSS Percentile 61.4%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Details

CWE

CWE-200

Status published

Products (4)

oracle/agile_product_lifecycle_management

Oracle Corporation/Agile PLM Framework < 9.3.5

Oracle Corporation/Agile PLM Framework < 9.3.6

Published Aug 08, 2017

Tracked Since Feb 18, 2026