VYPR
← All advisories
Low severity3.4NVD Advisory· Published Aug 8, 2017· Updated Jun 17, 2026

CVE-2017-10088

CVE-2017-10088

Description

Vulnerability in the Oracle Agile PLM component of Oracle Supply Chain Products Suite (subcomponent: Security). Supported versions that are affected are 9.3.5 and 9.3.6. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Agile PLM executes to compromise Oracle Agile PLM. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Agile PLM accessible data as well as unauthorized read access to a subset of Oracle Agile PLM accessible data. CVSS 3.0 Base Score 3.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N).

Affected products

4
  • Oracle Corporation/Agile Product Lifecycle Management2 versions
    cpe:2.3:a:oracle:agile_product_lifecycle_management:9.3.5:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:oracle:agile_product_lifecycle_management:9.3.5:*:*:*:*:*:*:*
    • cpe:2.3:a:oracle:agile_product_lifecycle_management:9.3.6:*:*:*:*:*:*:*
  • Oracle Corporation/Agile Plmllm-fuzzy2 versions
    9.3.5, 9.3.6+ 1 more
    • (no CPE)range: 9.3.5, 9.3.6
    • (no CPE)range: 9.3.5

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.