Description

Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Export). The supported version that is affected is 9.3.6. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Agile PLM. Successful attacks of this vulnerability can result in takeover of Oracle Agile PLM. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).

Executive Summary

Technical Details

Mitigations

References

Additional Metadata

{
  "score": "8.8",
  "pubDate": "2026-08-18T21:18:04.257Z",
  "pubdate": "2026-08-18T21:18:04.257Z",
  "executiveSummary": "This vulnerability affects the Oracle Agile PLM product within the Oracle Supply Chain portfolio, specifically targeting the Export component in version 9.3.6. Classified as a high-severity security flaw, it yields a CVSS 3.1 Base Score of 8.8 with a vector of CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H. The flaw enables a remote, low-privileged attacker to compromise the application entirely through network-based vectors via HTTP, achieving a complete system takeover.\nThe risk implications are severe, as successful exploitation results in total loss of confidentiality, integrity, and availability of the affected Oracle Agile PLM environment. The attack requires low privileges and network access, but does not necessitate user interaction, making it highly efficient for malicious actors who have breached low-level user accounts. The vulnerability underscores the critical need for strict access controls and robust input validation within enterprise supply chain management software to prevent unauthorized administrative escalation and system manipulation through export functionalities.",
  "technicalDetails": "The vulnerability resides in the Export component of Oracle Agile PLM version 9.3.6. The architectural root cause stems from improper handling of operational parameters or flawed authorization checks within the export execution flow, allowing authenticated users with minimal privileges to trigger unauthorized administrative actions or execute arbitrary logic.\nExploitation occurs via network access using the HTTP protocol. Because the attack vector is network-based (AV:N), an adversary does not require physical access or local host presence. The low attack complexity (AC:L) indicates that the flaw is reliably exploitable without requiring complex race conditions or timing constraints. Furthermore, the absence of user interaction (UI:N) means the exploit executes deterministically upon interaction by the attacker.\nThe attack flow proceeds as follows: First, the low-privileged attacker establishes a standard HTTP session with the vulnerable Oracle Agile PLM instance using legitimate credentials associated with a low-privilege role. Second, the attacker crafts a malicious request targeted at the Export component, leveraging improper input sanitization or broken access control logic to bypass intended privilege boundaries. Third, the crafted payload is submitted to the server. Fourth, the application processes the request within the context of the Export component, failing to adequately validate whether the initiating user possesses administrative or sufficient functional privileges.\nUpon successful processing of the malicious payload, the post-exploitation impact is catastrophic. The attacker achieves complete system takeover (C:H, I:H, A:H), granting them full administrative control over the Oracle Agile PLM environment. This allows the adversary to exfiltrate proprietary supply chain data, manipulate design or manufacturing records to compromise integrity, and disrupt core operational availability."
}