Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2024-20953

Опубликовано: 17 фев. 2024
Источник: nvd
CVSS3: 8.8
EPSS Средний

Описание

Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Export). The supported version that is affected is 9.3.6. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Agile PLM. Successful attacks of this vulnerability can result in takeover of Oracle Agile PLM. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:oracle:agile_product_lifecycle_management:9.3.6:*:*:*:*:*:*:*

EPSS

Процентиль: 99%
0.69038
Средний

8.8 High

CVSS3

Дефекты

NVD-CWE-noinfo
CWE-502

Связанные уязвимости

CVSS3: 8.8
github
почти 2 года назад

Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Export). The supported version that is affected is 9.3.6. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Agile PLM. Successful attacks of this vulnerability can result in takeover of Oracle Agile PLM. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).

CVSS3: 8.8
fstec
около 2 лет назад

Уязвимость компонента Export приложения Oracle Agile PLM, позволяющая нарушителю вызвать отказ в обслуживании

EPSS

Процентиль: 99%
0.69038
Средний

8.8 High

CVSS3

Дефекты

NVD-CWE-noinfo
CWE-502