Oracle Agile PLM for Process Vulnerable to Unauthorized Access

CVE-2024-20956

What is CVE-2024-20956?

The vulnerability in Oracle Agile Product Lifecycle Management for Process exposes supported versions prior to 6.2.4.2 to exploitation by unauthenticated attackers with network access via HTTP. This flaw allows unauthorized updates, inserts, or deletions of accessible data, as well as unauthorized reads of certain data sets. Additionally, the vulnerability may facilitate a partial denial of service, impacting the availability of the product. Organizations utilizing the affected versions should prioritize remediation to safeguard their data integrity and overall system security.

References