coldbraid

CVE-2024-21287 Oracle Agile Product Lifecycle Management (PLM)

Oracle Agile Product Lifecycle Management (PLM) contains an incorrect authorization vulnerability in the Process Extension component of the Software Development Kit. Successful exploitation of this vulnerability may result in unauthenticated file disclosure.

CVSS
not scored

CWE-863

On CISA’s exploited list

Oracle Agile Product Lifecycle Management (PLM) Incorrect Authorization Vulnerability

Added
2024-11-21
Federal patch deadline
2024-12-12
Ransomware use
not known