oracle agile plm 9.3.3 vulnerabilities and exploits

When serving resources from a network location using the NTFS file system, Apache Tomcat versions 10.0.0-M1 to 10.0.0-M9, 9.0.0.M1 to 9.0.39, 8.5.0 to 8.5.59 and 7.0.0 to 7.0.106 were susceptible to JSP source code disclosure in some configurations. The root cause was the unexpec...

Apache Tomcat Apache Tomcat 9.0.0 Apache Tomcat 10.0.0 Debian Debian Linux 9.0 Oracle Agile Plm 9.3.3 Oracle Agile Plm 9.3.6

7.5

CVSSv2

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Web Services). Supported versions that are affected are 10.3.6.0.0 and 12.1.3.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to com...

Oracle Agile Plm 9.3.3 Oracle Agile Plm 9.3.4 Oracle Agile Plm 9.3.5 Oracle Communications Converged Application Server 5.1 Oracle Communications Converged Application Server 7.0 Oracle Communications Converged Application Server 7.1 Oracle Peoplesoft Enterprise Peopletools 8.56 Oracle Peoplesoft Enterprise Peopletools 8.57 Oracle Peoplesoft Enterprise Peopletools 8.58 Oracle Storagetek Tape Analytics Sw Tool 2.3 Oracle Tape Library Acsls 8.5 Oracle Tape Virtual Storage Manager Gui 6.2

2 EDB exploits19 Github repositories4 Articles

5.8

CVSSv2

The refactoring present in Apache Tomcat 9.0.28 to 9.0.30, 8.5.48 to 8.5.50 and 7.0.98 to 7.0.99 introduced a regression. The result of the regression was that invalid Transfer-Encoding headers were incorrectly processed leading to a possibility of HTTP Request Smuggling if Tomca...

Apache Tomcat Apache Tomee 7.0.7 Opensuse Leap 15.1 Netapp Data Availability Services -Netapp Oncommand System Manager Debian Debian Linux 9.0 Debian Debian Linux 10.0 Oracle Agile Engineering Data Management 6.2.1.0 Oracle Agile Plm 9.3.3 Oracle Agile Plm 9.3.5 Oracle Agile Plm 9.3.6 Oracle Communications Instant Messaging Server 10.0.1.4.0

CVSSv2

An h2c direct connection to Apache Tomcat 10.0.0-M1 to 10.0.0-M6, 9.0.0.M5 to 9.0.36 and 8.5.1 to 8.5.56 did not release the HTTP/1.1 processor after the upgrade to HTTP/2. If a sufficient number of such requests were made, an OutOfMemoryException could occur leading to a denial ...

Apache Tomcat Apache Tomcat 9.0.0 Apache Tomcat 10.0.0 Debian Debian Linux 9.0 Debian Debian Linux 10.0 Netapp Oncommand System Manager Opensuse Leap 15.1 Opensuse Leap 15.2 Canonical Ubuntu Linux 20.04 Oracle Agile Engineering Data Management 6.2.1.0 Oracle Agile Plm 9.3.3 Oracle Agile Plm 9.3.5

3.6

CVSSv2

Vulnerability in the Oracle Agile PLM component of Oracle Supply Chain Products Suite (subcomponent: Folders, Files & Attachments). Supported versions that are affected are 9.3.3, 9.3.4, 9.3.5 and 9.3.6. Difficult to exploit vulnerability allows low privileged attacker with n...

Oracle Agile Product Lifecycle Management 9.3.3 Oracle Agile Product Lifecycle Management 9.3.4 Oracle Agile Product Lifecycle Management 9.3.5 Oracle Agile Product Lifecycle Management 9.3.6

5.8

CVSSv2

Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Security). Supported versions that are affected are 9.3.3, 9.3.5 and 9.3.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Agile PL...

Oracle Agile Product Lifecycle Management Framework 9.3.3 Oracle Agile Product Lifecycle Management Framework 9.3.5 Oracle Agile Product Lifecycle Management Framework 9.3.6

3.6

CVSSv2

Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.1.1, 9.3.1.2, 9.3.2, and 9.3.3 allows remote authenticated users to affect confidentiality and integrity via vectors related to Security, a different vulnerability than CVE-2016-...

Oracle Agile Product Lifecycle Management Framework 9.3.1.1 Oracle Agile Product Lifecycle Management Framework 9.3.1.2 Oracle Agile Product Lifecycle Management Framework 9.3.2 Oracle Agile Product Lifecycle Management Framework 9.3.3

3.6

CVSSv2

The payload length in a WebSocket frame was not correctly validated in Apache Tomcat 10.0.0-M1 to 10.0.0-M6, 9.0.0.M1 to 9.0.36, 8.5.0 to 8.5.56 and 7.0.27 to 7.0.104. Invalid payload lengths could trigger an infinite loop. Multiple requests with invalid payload lengths could lea...

Apache Tomcat Apache Tomcat 9.0.0 Apache Tomcat 10.0.0 Debian Debian Linux 9.0 Debian Debian Linux 10.0 Netapp Oncommand System Manager Opensuse Leap 15.1 Opensuse Leap 15.2 Canonical Ubuntu Linux 16.04 Canonical Ubuntu Linux 20.04 Mcafee Epolicy Orchestrator 5.9.0 Mcafee Epolicy Orchestrator 5.9.1

2 Github repositories

CVSSv2

When responding to new h2c connection requests, Apache Tomcat versions 10.0.0-M1 to 10.0.0, 9.0.0.M1 to 9.0.41 and 8.5.0 to 8.5.61 could duplicate request headers and a limited amount of request body from one request to another meaning user A and user B could both see the results...

Apache Tomcat Apache Tomcat 9.0.0 Apache Tomcat 10.0.0 Debian Debian Linux 9.0 Debian Debian Linux 10.0 Oracle Agile Plm 9.3.3 Oracle Agile Plm 9.3.6 Oracle Communications Cloud Native Core Policy 1.14.0 Oracle Communications Cloud Native Core Security Edge Protection Proxy 1.6.0 Oracle Communications Instant Messaging Server 10.0.1.5.0 Oracle Database 12.2.0.1 Oracle Database 19c

Get Started

1 2 3 4 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

oracle agile plm 9.3.3 vulnerabilities and exploits

CVE-2021-24122

CVE-2019-2725

CVE-2019-17569

CVE-2020-13934

CVE-2019-2817

CVE-2020-2920

CVE-2016-3420

CVE-2016-3431

CVE-2020-13935

CVE-2021-25122

Vulmon Search

About

Products

Connect