Oracle Agile PLM 9.3.5
Approved changes feed: RSS · Atom
cpe:2.3:a:oracle:agile_plm:9.3.5:*:*:*:*:*:*:*
part: a version: 9.3.5 update: *
| Vendor | Oracle (3509f9eb-d8a0-57da-b153-b8021021b133) |
|---|---|
| Product | Agile Plm (81f8b2bb-ded1-51de-b531-94995bcb1d7e) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2021-26272 |
vulnerable | 2026-06-08 05:30:42.142521 |
Details available
It was possible to execute a ReDoS-type attack inside CKEditor 4 before 4.16 by persuading a victim to paste crafted URL-like text into the editor, and then press Enter or Space (in the Autolink plugin).
Published: 2021-01-26T20:39:56.000Z
Updated: 2024-08-03T20:19:20.393Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-26271 |
vulnerable | 2026-06-08 05:30:42.134795 |
Details available
It was possible to execute a ReDoS-type attack inside CKEditor 4 before 4.16 by persuading a victim to paste crafted text into the Styles input of specific dialogs (in the Advanced Tab for Dialogs plugin).
Published: 2021-01-26T20:39:46.000Z
Updated: 2024-08-03T20:19:20.393Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-9484 |
vulnerable | 2026-06-08 05:28:01.863801 |
Details available
When using Apache Tomcat versions 10.0.0-M1 to 10.0.0-M4, 9.0.0.M1 to 9.0.34, 8.5.0 to 8.5.54 and 7.0.0 to 7.0.103 if a) an attacker is able to control the contents and name of a file on the server; and b) the server is configured to use the PersistenceManager with a FileStore; and c) the PersistenceManager is configured with sessionAttributeValueClassNameFilter="null" (the default unless a SecurityManager is used) or a sufficiently lax filter to allow the attacker provided object to be deserialized; and d) the attacker knows the relative file path from the storage location used by FileStore to the file the attacker has control over; then, using a specifically crafted request, the attacker will be able to trigger remote code execution via deserialization of the file under their control. Note that all of conditions a) to d) must be true for the attack to succeed.
Published: 2020-05-20T18:26:41.000Z
Updated: 2024-08-04T10:26:16.293Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-9281 |
vulnerable | 2026-06-08 05:27:21.086097 |
Details available
A cross-site scripting (XSS) vulnerability in the HTML Data Processor for CKEditor 4.0 before 4.14 allows remote attackers to inject arbitrary web script through a crafted "protected" comment (with the cke_protected syntax).
Published: 2020-03-07T00:02:27.000Z
Updated: 2024-08-04T10:26:15.821Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-27193 |
vulnerable | 2026-06-08 05:23:52.206594 |
Details available
A cross-site scripting (XSS) vulnerability in the Color Dialog plugin for CKEditor 4.15.0 allows remote attackers to run arbitrary web script after persuading a user to copy and paste crafted HTML code into one of editor inputs.
Published: 2020-11-12T20:31:41.000Z
Updated: 2024-08-04T16:11:35.976Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-1938 |
vulnerable | 2026-06-08 05:21:03.610881 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-13935 |
vulnerable | 2026-06-08 05:18:01.433262 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-13934 |
vulnerable | 2026-06-08 05:18:01.412140 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-10683 |
vulnerable | 2026-06-08 05:16:35.562959 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-2725 |
vulnerable | 2026-06-08 05:13:54.158463 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-17569 |
vulnerable | 2026-06-08 05:13:10.717970 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-10086 |
vulnerable | 2026-06-08 05:12:22.141285 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-1258 |
vulnerable | 2026-06-08 05:11:17.331886 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-15756 |
vulnerable | 2026-06-08 05:11:03.459948 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-11039 |
vulnerable | 2026-06-08 05:10:37.657502 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-12617 |
vulnerable | 2026-06-08 05:08:47.285808 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-10039 |
vulnerable | 2026-06-08 05:08:34.903178 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-8735 |
vulnerable | 2026-06-08 05:08:14.728720 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.