Oracle Agile PLM for Process Vulnerable to Unauthorized Access

CVE-2024-20956

What is CVE-2024-20956?

The vulnerability in Oracle Agile Product Lifecycle Management for Process exposes supported versions prior to 6.2.4.2 to exploitation by unauthenticated attackers with network access via HTTP. This flaw allows unauthorized updates, inserts, or deletions of accessible data, as well as unauthorized reads of certain data sets. Additionally, the vulnerability may facilitate a partial denial of service, impacting the availability of the product. Organizations utilizing the affected versions should prioritize remediation to safeguard their data integrity and overall system security.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References