CISA Known Exploited Vulnerability

This vulnerability is actively exploited in the wild and listed in the CISA Known Exploited Vulnerabilities catalog.

Remediation Deadline: Dec 12, 2024

CVE-2024-21287

High

EPSS 69.8%CISA KEV

Oracle/Agile Product Lifecycle Management (PLM)

Description

Oracle Agile Product Lifecycle Management (PLM) contains an incorrect authorization vulnerability in the Process Extension component of the Software Development Kit. Successful exploitation of this vulnerability may result in unauthenticated file disclosure.

EPSS — Exploit Probability

69.8%

Higher than 98.6% of all CVEs

Required Action

https://www.oracle.com/security-alerts/alert-cve-2024-21287.html ; https://nvd.nist.gov/vuln/detail/CVE-2024-21287

Risk Assessment

HIGH

In CISA KEV

High EPSS

Details

Severity: High
EPSS: 69.8%
CISA KEV: Yes
Ransomware: Unknown
Articles: 0

Timeline

Published

Nov 21, 2024

Added to KEV

Nov 21, 2024

Remediation Due

Dec 12, 2024

Affected Product

Oracle

Agile Product Lifecycle Management (PLM)

View all Oracle CVEs

External Links

NVD (NIST)CVE Details MITRE CVE