Firetruck

CVE-2024-20953

KEV

Oracle Agile Product Lifecycle Management (PLM) Deserialization Vulnerability

View CVE record →
Vendor / Project
Oracle
Product
Agile Product Lifecycle Management (PLM)
Date added
Feb 24, 2025
Due date
Mar 17, 2025
Known ransomware use
Unknown
CWEs
CWE-502

Description

Oracle Agile Product Lifecycle Management (PLM) contains a deserialization vulnerability that allows a low-privileged attacker with network access via HTTP to compromise the system.

Required action

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Notes