CVE-2024-21287 — Oracle Agile Product Lifecycle Management (PLM) Incorrect Authorization Vulnerability
2024-11-21 • CISA Known Exploited Vulnerability
[event] Oracle Agile Product Lifecycle Management (PLM) contains an incorrect authorization vulnerability in the Process Extension component of the Software Development Kit. Successful exploitation of this vulnerability may result in unauthenticated file disclosure.
> AFFECTED SOFTWARE
| Field | Value |
|---|---|
| Vendor | Oracle |
| Product | Agile Product Lifecycle Management (PLM) |
| CWE | CWE-863 |
| CVE ID | CVE-2024-21287 |
| Date Added | 2024-11-21 |
| Due Date | 2024-12-12 |
| Ransomware Campaign | Unknown |
> MITIGATION
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Due Date: 2024-12-12