CVE-2024-20953 Oracle Agile Product Lifecycle Management (PLM)
Oracle Agile Product Lifecycle Management (PLM) contains a deserialization vulnerability that allows a low-privileged attacker with network access via HTTP to compromise the system.
- CVSS
- not scored
On CISA’s exploited list
Oracle Agile Product Lifecycle Management (PLM) Deserialization Vulnerability
- Added
- 2025-02-24
- Federal patch deadline
- 2025-03-17
- Ransomware use
- not known