Browse / CVEs / CVE-2024-20953
CVE-2024-20953· oracle / agile product lifecycle management (plm)· CWE-502
Oracle Agile Product Lifecycle Management (PLM) Deserialization Vulnerability
Exploited in the wild. Listed by CISA on 2025-02-24; known to be used by ransomware.
3.9%likelihood of exploitation, next 30 days
91%of all CVEs are less likely
Nonecheck to confirm it
Oracle Agile Product Lifecycle Management (PLM) contains a deserialization vulnerability that allows a low-privileged attacker with network access via HTTP to compromise the system.
No ready check is stored for this CVE. Confirm it by hand from the references.
References
Use this check only on systems you are authorised to test. Where the data comes from