CVE-2017-10088 — Corporation Agile PLM Framework vulnerability

4 documents4 sources

Severity

3.4LOWNVD

EPSS

0.1%

top 80.52%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Oracle Corporation Agile PLM Framework Oracle Agile Product Lifecycle Management

Timeline

PublishedAug 8

Latest updateMay 13

Description

Vulnerability in the Oracle Agile PLM component of Oracle Supply Chain Products Suite (subcomponent: Security). Supported versions that are affected are 9.3.5 and 9.3.6. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Agile PLM executes to compromise Oracle Agile PLM. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Agile PLM accessible data as well as unauthorized …

CVSS vector

CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:NExploitability: 0.8 | Impact: 2.5

Affected Packages2 packages

▶CVEListV5oracle_corporation/agile_plm_framework9.3.5, 9.3.6+1

▶NVDoracle/agile_product_lifecycle_management9.3.5, 9.3.6+1

Patches

Patch: www.oracle.com ↗Patch: www.oracle.com ↗

🔴Vulnerability Details

GHSA

GHSA-pg3x-mj35-x6cr: Vulnerability in the Oracle Agile PLM component of Oracle Supply Chain Products Suite (subcomponent: Security)↗2022-05-13

▶

CVEList

CVE-2017-10088: Vulnerability in the Oracle Agile PLM component of Oracle Supply Chain Products Suite (subcomponent: Security)↗2017-08-08

▶

💥Exploits & PoCs

Nuclei

XiongMai uc-httpd 1.0.0 - Buffer Overflow

▶