Threats tagged 'ghsa-3g3m-8pqj-4238'

A vulnerability exists in Oracle Agile PLM version 9.3.6 within the SDK component that allows a low privileged attacker with network access via HTTP to compromise the product. The vulnerability can lead to unauthorized access to critical data or complete access to all data accessible by Oracle Agile PLM. The CVSS 3.1 base score is 7.7, indicating a high severity with significant confidentiality impact. Oracle has released a Critical Security Patch Update in September 2026 addressing this and many other vulnerabilities.