CVE-2024-20953

Oracle Agile Product Lifecycle Management (PLM) Deserialization Vulnerability

Agile Product Lifecycle Management

Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Export). The supported version that is affected is 9.3.6. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Agile PLM. Successful attacks of this vulnerability can result in takeover of Oracle Agile PLM. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector…

17. Feb 2024

Ausgewertete Quellen

• Hersteller
  https://www.oracle.com/security-alerts/cpujan2024.html
• Hinweis
  https://www.zerodayinitiative.com/advisories/ZDI-24-096/
• CISA
  https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-20953
• CISA
  Oracle Agile Product Lifecycle Management (PLM) Deserialization Vulnerability
• NVD
  CVE-2024-20953