← Back to browse · API

CVE-2024-21287

Severity
HIGH
CVSS
7.5
EPSS
0.01496
Risk score
55.52
CISA KEV
Yes
PoC
No
Published
2024-11-21
Modified
2024-11-21
First seen
2026-08-07
Aliases
EUVD-2024-19000, GHSA-XQ44-WCJX-G3W9
Products
Oracle Corporation:Oracle Agile PLM Framework 9.3.6, Oracle:Agile Product Lifecycle Management (PLM)
Sources
euvd EUVD-2024-19000
cisa.gov CVE-2024-21287

Description

Oracle Agile Product Lifecycle Management (PLM) contains an incorrect authorization vulnerability in the Process Extension component of the Software Development Kit. Successful exploitation of this vulnerability may result in unauthenticated file disclosure.

References