Oracle Agile PLM Framework Vulnerability in Integration Services Component Allowing Data Access and Denial-of-Service

A vulnerability exists in Oracle Agile PLM Framework, specifically within the Agile Integration Services component, version 9.3.6. This easily exploitable issue allows a low-privileged attacker with network access via HTTP to compromise the Agile PLM Framework. Successful exploitation can lead to unauthorized access to critical data or complete access to all data within the Agile PLM Framework, as well as the ability to cause a complete denial-of-service by hanging the application or causing it to crash frequently and repeatably.

Impact

Exploitation of this vulnerability can result in unauthorized access to sensitive data or all accessible data within Oracle Agile PLM Framework, along with the ability to cause a complete denial-of-service by repeatedly crashing the application or causing it to hang.