Oracle Agile Product Lifecycle Management For Process
Monthly
Information disclosure in Oracle Agile Product Lifecycle Management for Process 6.2.4 allows low-privileged authenticated network attackers to read a subset of application data via HTTP through the Product Quality Management component. The vulnerability carries a CVSS 3.1 score of 4.3 and is classified as CWE-200, reflecting improper exposure of sensitive information. No public exploit code exists and no active exploitation has been identified; EPSS stands at 0.03% (8th percentile), consistent with SSVC's 'exploitation: none' signal.
Information disclosure in Oracle Agile Product Lifecycle Management for Process 6.2.4 allows low-privileged authenticated network attackers to read a subset of application data via HTTP through the Product Quality Management component. The vulnerability carries a CVSS 3.1 score of 4.3 and is classified as CWE-200, reflecting improper exposure of sensitive information. No public exploit code exists and no active exploitation has been identified; EPSS stands at 0.03% (8th percentile), consistent with SSVC's 'exploitation: none' signal.