https://pwn.watch/t/oracle-agile-plm Live security incidents worldwide: CVEs, patch status, fixed versions, advisories and the posts that broke them. en Thu, 21 Nov 2024 00:00:00 GMT https://pwn.watch/i/oracle-agile-product-lifecycle-management-plm-cve-2024-21287 https://pwn.watch/i/oracle-agile-product-lifecycle-management-plm-cve-2024-21287 Thu, 21 Nov 2024 00:00:00 GMT high <p>Oracle Agile Product Lifecycle Management (PLM) contains an incorrect authorization vulnerability in the Process Extension component of the Software Development Kit. Successful exploitation of this vulnerability may result in unauthenticated file disclosure. Added to the CISA KEV catalog on 2024-11-21.</p> <p><strong>Status:</strong> closed · <strong>Patch:</strong> patched · <strong>Fixed in:</strong> See vendor advisory linked in sources</p> <p><strong>Latest updates:</strong></p><ul><li>2024-11-21: CISA added CVE-2024-21287 to the KEV catalog (federal deadline 2024-12-12) (<a href="https://www.cisa.gov/known-exploited-vulnerabilities-catalog">source</a>)</li><li>2024-11-18: CVE-2024-21287 published (<a href="https://nvd.nist.gov/vuln/detail/CVE-2024-21287">source</a>)</li></ul> <p><strong>CVEs:</strong> CVE-2024-21287</p>