Oracle Agile Product Lifecycle Management vulnerabilities
151 known vulnerabilities affecting oracle/agile_product_lifecycle_management.
Total CVEs
151
CISA KEV
6
actively exploited
Public exploits
9
Exploited in wild
8
Severity breakdown
CRITICAL12HIGH74MEDIUM61LOW4
Vulnerabilities
Page 8 of 8
CVE-2017-10094P4MEDIUMCVSS 5.4v9.3.5v9.3.62017-08-08
CVE-2017-10094 [MEDIUM] CWE-269 CVE-2017-10094: Vulnerability in the Oracle Agile PLM component of Oracle Supply Chain Products Suite (subcomponent:
Vulnerability in the Oracle Agile PLM component of Oracle Supply Chain Products Suite (subcomponent: Security). Supported versions that are affected are 9.3.5 and 9.3.6. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Agile PLM. Successful attacks require human interaction from a pers
nvd
CVE-2021-36373P4MEDIUMCVSS 5.5v9.3.62021-07-14
CVE-2021-36373 [MEDIUM] CWE-130 CVE-2021-36373: When reading a specially crafted TAR archive an Apache Ant build can be made to allocate large amoun
When reading a specially crafted TAR archive an Apache Ant build can be made to allocate large amounts of memory that finally leads to an out of memory error, even for small inputs. This can be used to disrupt builds using Apache Ant. Apache Ant prior to 1.9.16 and 1.10.11 were affected.
nvd
CVE-2016-3517P4MEDIUMCVSS 4.3v9.3.4v9.3.52016-07-21
CVE-2016-3517 [MEDIUM] CVE-2016-3517: Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.
Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 and 9.3.5 allows remote attackers to affect integrity via vectors related to PC / Get Shortcut.
nvd
CVE-2016-3507P4MEDIUMCVSS 4.3v9.3.4v9.3.52016-07-21
CVE-2016-3507 [MEDIUM] CVE-2016-3507: Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.
Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 and 9.3.5 allows remote attackers to affect integrity via vectors related to WebClient / Admin.
nvd
CVE-2016-5513P4MEDIUMCVSS 4.3v9.3.4v9.3.52016-10-25
CVE-2016-5513 [MEDIUM] CWE-200 CVE-2016-5513: Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.
Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 and 9.3.5 allows remote authenticated users to affect confidentiality via vectors related to File Manager.
nvd
CVE-2016-5522P4MEDIUMCVSS 4.3v9.3.4v9.3.52016-10-25
CVE-2016-5522 [MEDIUM] CWE-200 CVE-2016-5522: Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.
Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 and 9.3.5 allows remote authenticated users to affect confidentiality via unknown vectors.
nvd
CVE-2017-10299P4MEDIUMCVSS 4.3v9.3.5v9.3.62017-10-19
CVE-2017-10299 [MEDIUM] CWE-200 CVE-2017-10299: Vulnerability in the Oracle Agile PLM component of Oracle Supply Chain Products Suite (subcomponent:
Vulnerability in the Oracle Agile PLM component of Oracle Supply Chain Products Suite (subcomponent: Security). Supported versions that are affected are 9.3.5 and 9.3.6. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Agile PLM. Successful attacks of this vulnerability can result in u
nvd
CVE-2016-3531P4LOWCVSS 3.5v9.3.4v9.3.52016-07-21
CVE-2016-3531 [LOW] CVE-2016-3531: Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.
Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 and 9.3.5 allows remote authenticated users to affect confidentiality via vectors related to PC / Notification.
nvd
CVE-2016-5473P4LOWCVSS 3.1v9.3.4v9.3.52016-07-21
CVE-2016-5473 [LOW] CVE-2016-5473: Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.
Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 and 9.3.5 allows remote authenticated users to affect confidentiality via vectors related to File Folders / Attachment, a different vulnerability than CVE-2016-3537.
nvd
CVE-2017-10308P4LOWCVSS 3.5v9.3.5v9.3.62017-10-19
CVE-2017-10308 [LOW] CVE-2017-10308: Vulnerability in the Oracle Agile PLM component of Oracle Supply Chain Products Suite (subcomponent:
Vulnerability in the Oracle Agile PLM component of Oracle Supply Chain Products Suite (subcomponent: Performance). Supported versions that are affected are 9.3.5 and 9.3.6. Easily exploitable vulnerability allows physical access to compromise Oracle Agile PLM. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access t
nvd
CVE-2017-10088P4LOWCVSS 3.4v9.3.5v9.3.62017-08-08
CVE-2017-10088 [LOW] CVE-2017-10088: Vulnerability in the Oracle Agile PLM component of Oracle Supply Chain Products Suite (subcomponent:
Vulnerability in the Oracle Agile PLM component of Oracle Supply Chain Products Suite (subcomponent: Security). Supported versions that are affected are 9.3.5 and 9.3.6. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Agile PLM executes to compromise Oracle Agile PLM. Successful attacks of this vul
nvd
← Previous8 / 8