target entity

Agile Product Lifecycle Management (PLM)

2 source-linked records in the current knowledge graph.

Feb 24, 2025high

CVE-2024-20953: Oracle Agile Product Lifecycle Management (PLM) Deserialization Vulnerability

Oracle Agile Product Lifecycle Management (PLM) contains a deserialization vulnerability that allows a low-privileged attacker with network access via HTTP to compromise the system. Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

CVE-2024-20953EPSS 3.4%Agile Product Lifecycle Management (PLM)Oracle

CISA KEV ↗ · unattributed attribution

Nov 21, 2024high

CVE-2024-21287: Oracle Agile Product Lifecycle Management (PLM) Incorrect Authorization Vulnerability

Oracle Agile Product Lifecycle Management (PLM) contains an incorrect authorization vulnerability in the Process Extension component of the Software Development Kit. Successful exploitation of this vulnerability may result in unauthenticated file disclosure. Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

CVE-2024-21287EPSS 1.5%Agile Product Lifecycle Management (PLM)Oracle

CISA KEV ↗ · unattributed attribution