Threats tagged 'ghsa-rcr2-vqmj-hv7m'

A vulnerability in Oracle Agile PLM 9.3.6 allows a low privileged attacker with network access via HTTP to compromise the application server component. Successful exploitation can lead to unauthorized access to critical data or complete access to all data accessible through Oracle Agile PLM. The vulnerability has a CVSS 3.1 base score of 7.7, indicating high severity with significant confidentiality impact. Oracle has released security patches addressing this and many other vulnerabilities in their September 2026 Critical Security Patch Update.