Natalia Trojanowska

**Name of the Vulnerable Software and Affected Versions** Oracle Agile PLM version 9.3.6 **Description** The issue exists due to insufficient input validation in the Attachments component of Oracle Agile PLM. This allows a remote attacker to gain unauthorized access to the device via HTTP requests. Successful attacks can result in unauthorized access to critical data or complete access to all Oracle Agile PLM accessible data. **Recommendations** For version 9.3.6, consider restricting access to the Attachments component until a patch is available. As a temporary workaround, limit network access via HTTP to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.