Summary
Oracle Agile Product Lifecycle Management (PLM) contains an incorrect authorization vulnerability in the Process Extension component of the Software Development Kit. Successful exploitation of this vulnerability may result in unauthenticated file disclosure.
- Vendor
- Oracle
- Product
- Agile Product Lifecycle Management (PLM)
- Added to KEV
- Nov 21, 2024
- Remediation due
- Dec 12, 2024 (US federal deadline)
- Ransomware use
- Not known
- Weakness
- CWE-863
- EPSS
- 1.7% as of Nov 12
In the news
- No Asia-Pacific article names this CVE yet.
Linked
Actors named alongside it:
none
Incidents exploiting it:
- none recorded
References