Security Flaw in Oracle Agile PLM Allows Network Access Exploitation

CVE-2020-2920

Summary

An exploitable security vulnerability exists in Oracle Agile PLM that enables unauthorized access to sensitive data via HTTP. This flaw allows an unauthenticated attacker to compromise Oracle Agile PLM through social engineering, requiring human interaction for successful attack execution. The attacks not only threaten the integrity and confidentiality of the data but may also lead to unauthorized updates, inserts, deletions, and potentially expose accessible data to attackers.

References