CVE-2024-20953 — Oracle Agile Product Lifecycle Management (PLM) Deserialization Vulnerability

CISA KEVExploited: confirmedOracle

Oracle Agile Product Lifecycle Management (PLM) contains a deserialization vulnerability that allows a low-privileged attacker with network access via HTTP to compromise the system.

Vulnerability details

Affected productsAgile Product Lifecycle Management (PLM)
KEV remediation due2025-03-17