Oracle Project Manufacturing
Monthly
Oracle Project Manufacturing V16 (PJM Command Center component) exposes a local privilege-abuse flaw allowing a high-privileged attacker with infrastructure logon access to bypass authorization controls and gain unauthorized read and write access to all Project Manufacturing data. The CVSS vector (AV:L/AC:H/PR:H) constrains real-world risk significantly - exploitation requires existing elevated access on the host infrastructure and high attack complexity. No public exploit code and no CISA KEV listing have been identified at time of analysis, keeping this vulnerability in a watchlist rather than emergency-response category for most organizations.
Oracle Project Manufacturing V16 (PJM Command Center component) exposes a local privilege-abuse flaw allowing a high-privileged attacker with infrastructure logon access to bypass authorization controls and gain unauthorized read and write access to all Project Manufacturing data. The CVSS vector (AV:L/AC:H/PR:H) constrains real-world risk significantly - exploitation requires existing elevated access on the host infrastructure and high attack complexity. No public exploit code and no CISA KEV listing have been identified at time of analysis, keeping this vulnerability in a watchlist rather than emergency-response category for most organizations.