Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

oracle agile plm 9.3.3 vulnerabilities and exploits

(subscribe to this query)
5.9
CVSSv3
CVE-2021-24122
When serving resources from a network location using the NTFS file system, Apache Tomcat versions 10.0.0-M1 to 10.0.0-M9, 9.0.0.M1 to 9.0.39, 8.5.0 to 8.5.59 and 7.0.0 to 7.0.106 were susceptible to JSP source code disclosure in some configurations. The root cause was the unexpec...
Apache Tomcat 9.0.0Apache Tomcat 10.0.0Apache TomcatDebian Debian Linux 9.0Oracle Agile Plm 9.3.3Oracle Agile Plm 9.3.6
5.4
CVSSv3
CVE-2019-2817
Vulnerability in the Oracle Agile PLM component of Oracle Supply Chain Products Suite (subcomponent: Folders, Files & Attachments). Supported versions that are affected are 9.3.3, 9.3.4, 9.3.5 and 9.3.6. Difficult to exploit vulnerability allows low privileged attacker with n...
Oracle Agile Product Lifecycle Management 9.3.6Oracle Agile Product Lifecycle Management 9.3.3Oracle Agile Product Lifecycle Management 9.3.4Oracle Agile Product Lifecycle Management 9.3.5
6.1
CVSSv3
CVE-2020-2920
Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Security). Supported versions that are affected are 9.3.3, 9.3.5 and 9.3.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Agile PL...
Oracle Agile Product Lifecycle Management Framework 9.3.3Oracle Agile Product Lifecycle Management Framework 9.3.5Oracle Agile Product Lifecycle Management Framework 9.3.6
9.8
CVSSv3
CVE-2019-2725
Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Web Services). Supported versions that are affected are 10.3.6.0.0 and 12.1.3.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to com...
Oracle Weblogic Server 12.1.3.0.0Oracle Peoplesoft Enterprise Peopletools 8.56Oracle Weblogic Server 10.3.6.0.0Oracle Peoplesoft Enterprise Peopletools 8.57Oracle Agile Plm 9.3.3Oracle Agile Plm 9.3.4Oracle Agile Plm 9.3.5Oracle Vm VirtualboxOracle Communications Converged Application Server 5.1Oracle Communications Converged Application Server 7.0Oracle Communications Converged Application Server 7.1Oracle Peoplesoft Enterprise Peopletools 8.58Oracle Storagetek Tape Analytics Sw Tool 2.3Oracle Tape Library Acsls 8.5Oracle Tape Virtual Storage Manager Gui 6.2Oracle Vm Virtualbox 5.2.36
4.8
CVSSv3
CVE-2019-17569
The refactoring present in Apache Tomcat 9.0.28 to 9.0.30, 8.5.48 to 8.5.50 and 7.0.98 to 7.0.99 introduced a regression. The result of the regression was that invalid Transfer-Encoding headers were incorrectly processed leading to a possibility of HTTP Request Smuggling if Tomca...
Apache TomcatApache Tomee 7.0.7Opensuse Leap 15.1Netapp Oncommand System ManagerNetapp Data Availability Services -Debian Debian Linux 9.0Debian Debian Linux 10.0Oracle Transportation Management 6.3.7Oracle Hospitality Guest Access 4.2.0Oracle Hospitality Guest Access 4.2.1Oracle Agile Plm 9.3.3Oracle Agile Plm 9.3.5Oracle Agile Plm 9.3.6Oracle Instantis EnterprisetrackOracle Mysql Enterprise MonitorOracle Health Sciences Empirica Signal 7.3.3Oracle Communications Instant Messaging Server 10.0.1.4.0Oracle Workload Manager 18cOracle Workload Manager 19cOracle Workload Manager 12.2.0.1Oracle Agile Engineering Data Management 6.2.1.0Oracle Health Sciences Empirica Inspections 1.0.1.2
6.4
CVSSv3
CVE-2016-3420
Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.1.1, 9.3.1.2, 9.3.2, and 9.3.3 allows remote authenticated users to affect confidentiality and integrity via vectors related to Security, a different vulnerability than CVE-2016-...
Oracle Agile Product Lifecycle Management Framework 9.3.2Oracle Agile Product Lifecycle Management Framework 9.3.1.2Oracle Agile Product Lifecycle Management Framework 9.3.3Oracle Agile Product Lifecycle Management Framework 9.3.1.1
6.4
CVSSv3
CVE-2016-3431
Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.1.1, 9.3.1.2, 9.3.2, and 9.3.3 allows remote authenticated users to affect confidentiality and integrity via vectors related to Security, a different vulnerability than CVE-2016-...
Oracle Agile Product Lifecycle Management Framework 9.3.1.2Oracle Agile Product Lifecycle Management Framework 9.3.1.1Oracle Agile Product Lifecycle Management Framework 9.3.3Oracle Agile Product Lifecycle Management Framework 9.3.2
7.5
CVSSv3
CVE-2020-13934
An h2c direct connection to Apache Tomcat 10.0.0-M1 to 10.0.0-M6, 9.0.0.M5 to 9.0.36 and 8.5.1 to 8.5.56 did not release the HTTP/1.1 processor after the upgrade to HTTP/2. If a sufficient number of such requests were made, an OutOfMemoryException could occur leading to a denial ...
Apache Tomcat 9.0.0Apache Tomcat 10.0.0Apache TomcatDebian Debian Linux 9.0Debian Debian Linux 10.0Netapp Oncommand System ManagerOpensuse Leap 15.1Opensuse Leap 15.2Canonical Ubuntu Linux 20.04Oracle Managed File Transfer 12.2.1.3.0Oracle Instantis Enterprisetrack 17.1Oracle Instantis Enterprisetrack 17.2Oracle Instantis Enterprisetrack 17.3Oracle Agile Plm 9.3.3Oracle Agile Plm 9.3.5Oracle Agile Plm 9.3.6Oracle Workload Manager 18cOracle Workload Manager 19cOracle Workload Manager 12.2.0.1Oracle Agile Engineering Data Management 6.2.1.0Oracle Siebel Ui FrameworkOracle Mysql Enterprise Monitor
7.5
CVSSv3
CVE-2020-13935
The payload length in a WebSocket frame was not correctly validated in Apache Tomcat 10.0.0-M1 to 10.0.0-M6, 9.0.0.M1 to 9.0.36, 8.5.0 to 8.5.56 and 7.0.27 to 7.0.104. Invalid payload lengths could trigger an infinite loop. Multiple requests with invalid payload lengths could lea...
Apache Tomcat 9.0.0Apache Tomcat 10.0.0Apache TomcatDebian Debian Linux 9.0Debian Debian Linux 10.0Netapp Oncommand System ManagerOpensuse Leap 15.1Opensuse Leap 15.2Canonical Ubuntu Linux 20.04Canonical Ubuntu Linux 16.04Mcafee Epolicy Orchestrator 5.9.0Mcafee Epolicy Orchestrator 5.9.1Mcafee Epolicy Orchestrator 5.10.0Oracle Managed File Transfer 12.2.1.3.0Oracle Instantis Enterprisetrack 17.1Oracle Instantis Enterprisetrack 17.2Oracle Instantis Enterprisetrack 17.3Oracle Agile Plm 9.3.3Oracle Agile Plm 9.3.5Oracle Agile Plm 9.3.6Oracle Workload Manager 18cOracle Workload Manager 19c
5.5
CVSSv3
CVE-2020-17521
Apache Groovy provides extension methods to aid with creating temporary directories. Prior to this fix, Groovy's implementation of those extension methods was using a now superseded Java JDK method call that is potentially not secure on some operating systems in some context...
Apache Groovy 4.0.0Apache GroovyNetapp Snapcenter -Oracle Primavera Unifier 16.2Oracle Primavera Unifier 16.1Oracle Ilearning 6.2Oracle Business Process Management Suite 12.2.1.3.0Oracle Primavera Unifier 18.8Oracle Primavera UnifierOracle Agile Plm 9.3.3Oracle Agile Plm 9.3.6Oracle Primavera Unifier 19.12Oracle Retail Bulk Data Integration 15.0.3.0Oracle Retail Bulk Data Integration 16.0.3.0Oracle Communications Services Gatekeeper 7.0Oracle Retail Merchandising System 16.0.3Oracle Communications Evolved Communications Application Server 7.1Oracle Agile Engineering Data Management 6.2.1.0Oracle Primavera Unifier 20.12Oracle Business Process Management Suite 12.2.1.4.0Oracle Communications Services Gatekeeper 6.0Oracle Communications Services Gatekeeper 6.1
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injectionfirmwareCVE-2006-4304CVE-2024-32878CVE-2024-31502XSSCVE-2024-3059CVE-2024-33692CVE-2024-3400
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook