Vulnerability in Oracle Agile Product Lifecycle Management for Process Affecting Oracle Supply Chain Products

CVE-2018-2572

Summary

An exploitable access control vulnerability exists in the Oracle Agile Product Lifecycle Management for Process component of Oracle Supply Chain Products Suite. This vulnerability can be exploited by an unauthenticated attacker who has network access via HTTP, allowing them to compromise the product. Successful exploitation may require human interaction from a different user. Key risks include unauthorized modifications, insertions, or deletions of accessible data as well as unauthorized read access to certain sensitive information within Oracle Agile Product Lifecycle Management.

References