CVE-2018-3134
First published: Wed Oct 17 2018(Updated: )
Vulnerability in the Oracle Agile Product Lifecycle Management for Process component of Oracle Supply Chain Products Suite (subcomponent: User Group Management). The supported version that is affected is 6.2.0.0. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Agile Product Lifecycle Management for Process executes to compromise Oracle Agile Product Lifecycle Management for Process. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Agile Product Lifecycle Management for Process accessible data as well as unauthorized read access to a subset of Oracle Agile Product Lifecycle Management for Process accessible data. CVSS 3.0 Base Score 5.0 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:H/A:N).
Credit: secalert_us@oracle.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Oracle Agile Product Lifecycle Management for Process | =6.2.0.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2018-3134?
CVE-2018-3134 is a vulnerability in the Oracle Agile Product Lifecycle Management for Process component of Oracle Supply Chain Products Suite.
What is the affected software?
The affected software is Oracle Agile Product Lifecycle Management for Process version 6.2.0.0.
How severe is CVE-2018-3134?
CVE-2018-3134 has a severity level of medium.
How can the vulnerability be exploited?
The vulnerability can be exploited by a low privileged attacker with logon to the affected software.
How can I fix CVE-2018-3134?
To fix CVE-2018-3134, apply the necessary patches provided by Oracle.
- collector/nvd-index
- agent/author
- agent/severity
- agent/references
- agent/description
- agent/type
- agent/event
- agent/last-modified-date
- agent/first-publish-date
- agent/remedy
- agent/softwarecombine
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/oracle
- canonical/oracle agile product lifecycle management for process
- version/oracle agile product lifecycle management for process/6.2.0.0