Security Flaw in Oracle Agile PLM Allows Network Access Exploitation
CVE-2020-2920
What is CVE-2020-2920?
An exploitable security vulnerability exists in Oracle Agile PLM that enables unauthorized access to sensitive data via HTTP. This flaw allows an unauthenticated attacker to compromise Oracle Agile PLM through social engineering, requiring human interaction for successful attack execution. The attacks not only threaten the integrity and confidentiality of the data but may also lead to unauthorized updates, inserts, deletions, and potentially expose accessible data to attackers.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
Affected Version(s)
Agile PLM Framework 9.3.3
Agile PLM Framework 9.3.5
Agile PLM Framework 9.3.6
References
CVSS V3.1
Timeline
Vulnerability published
Vulnerability Reserved