CVE-2024-21287
Oracle Agile Product Lifecycle Management (PLM) Incorrect Authorization Vulnerability
CVSS
—
Sem CVSS
EPSS
1.7%
p78
KEV
SIM
21 de nov. de 2024
Exploit Today
73
0-100
Publicado: — · Última mod.: —
Produto
Oracle / Agile Product Lifecycle Management (PLM)
Vulnerabilidade
Oracle Agile Product Lifecycle Management (PLM) Incorrect Authorization Vulnerability
Adicionado ao KEV
21 de nov. de 2024
Corrigir até
12 de dez. de 2024
Uso conhecido em ransomware
Não
Descrição resumida
Oracle Agile Product Lifecycle Management (PLM) contains an incorrect authorization vulnerability in the Process Extension component of the Software Development Kit. Successful exploitation of this vulnerability may result in unauthenticated file disclosure.
Ação necessária
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Notas
https://www.oracle.com/security-alerts/alert-cve-2024-21287.html ; https://nvd.nist.gov/vuln/detail/CVE-2024-21287