CVE-2024-21287

UNKNOWNKnown Exploited

CISA Known Exploited Vulnerability

https://www.oracle.com/security-alerts/alert-cve-2024-21287.html ; https://nvd.nist.gov/vuln/detail/CVE-2024-21287

Remediation deadline: December 12, 2024

Description

Oracle Agile Product Lifecycle Management (PLM) contains an incorrect authorization vulnerability in the Process Extension component of the Software Development Kit. Successful exploitation of this vulnerability may result in unauthenticated file disclosure.

Timeline

Published:November 21st, 2024 12:00 AM

Last modified:November 21st, 2024 12:00 AM

Added to KEV:November 21st, 2024

CVSS Scoring

No CVSS v3 score available

Affected Software

From NVD CPE configuration data

Vendors

Oracle

Products

Agile Product Lifecycle Management (PLM)

Weaknesses (CWE)

CWE-863

References & Reports

Advisories, patches, and third-party reports

No references available.

Source: CISA KEV + NVD · Data may lag official sources by up to one minute