Oracle has fixed an unauthenticated file disclosure flaw in Oracle Agile Product Lifecycle Management (PLM) tracked as CVE-2024-21287, which was actively exploited as a zero-day to download files.
The finalized January 2025 Critical Patch Update is scheduled for release on January 21. “Due to the threat posed by a successful attack, Oracle strongly recommends that customers apply Critical Patch ...
Oracle reports patching a security flaw in Agile PLM The bug was being exploited in the wild to steal files More than 1,000 companies could be vulnerable Oracle has fixed a vulnerability in its ...