Known Exploited Vulnerabilities November 21, 2024 · CISA KEV Catalog

CVE-2024-21287: Oracle Agile Product Lifecycle Management (PLM) Incorrect Authorization Vulnerability

Oracle Agile Product Lifecycle Management (PLM) contains an incorrect authorization vulnerability in the Process Extension component of the Software Development Kit. Successful exploitation of this vulnerability may result in unauthenticated file disclosure.

Read the original at CISA KEV Catalog ↗

Topics

Vulnerabilities & Patching

Mentions

CVE-2024-21287Oracle

Related

CVE-2026-21962: Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in Improper Access Control Vulnerability Known Exploited Vulnerabilities · Aug 24, 2026

CVE-2026-46817: Oracle E-Business Suite Improper Privilege Management Vulnerability Known Exploited Vulnerabilities · Jul 15, 2026

CVE-2026-35273: Oracle People Soft Enterprise People Tools Missing Authentication for Critical Function Vulnerability Known Exploited Vulnerabilities · Jun 12, 2026