WebClient Vulnerability in Oracle Agile PLM by Oracle

CVE-2023-22039

Summary

The vulnerability affects the Oracle Agile PLM WebClient, allowing an attacker with low privileges network access via HTTP to exploit the system. Although the attack requires interaction from a separate user, the repercussions can extend beyond Oracle Agile PLM, potentially impacting other associated products. Successful exploitation may lead to unauthorized modifications, such as updates, inserts, or deletions of data, and unauthorized read access to a portion of the accessible data within Oracle Agile PLM.

References