CVE-2017-10299

CWE-200 — Information Exposure3 documents3 sources
Severity
4.3MEDIUM
EPSS
0.2%
top 56.57%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Oracle Corporation Agile PLM FrameworkOracle Agile Product Lifecycle Management
Timeline
PublishedOct 19
Latest updateMay 17

Description

Vulnerability in the Oracle Agile PLM component of Oracle Supply Chain Products Suite (subcomponent: Security). Supported versions that are affected are 9.3.5 and 9.3.6. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Agile PLM. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Agile PLM accessible data. CVSS 3.0 Base Score 4.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV…

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:NExploitability: 2.8 | Impact: 1.4

Affected Packages2 packages

▶CVEListV5oracle_corporation/agile_plm_framework9.3.5, 9.3.6+1

Patches

Patch: www.oracle.com ↗Patch: www.oracle.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-g5hp-cqmw-rc35: Vulnerability in the Oracle Agile PLM component of Oracle Supply Chain Products Suite (subcomponent: Security)↗2022-05-17
▶
CVEList
CVE-2017-10299: Vulnerability in the Oracle Agile PLM component of Oracle Supply Chain Products Suite (subcomponent: Security)↗2017-10-19
▶