CVE-2024-20953

CISA KEV
ACT NOW Priority: 0.00 BB Relevance: 1/100
Published: N/A Modified: N/A First seen: 2026-10-29 Status: pending_score

Description

Oracle Agile Product Lifecycle Management (PLM) contains a deserialization vulnerability that allows a low-privileged attacker with network access via HTTP to compromise the system.

CISA Known Exploited Vulnerability

Vendor / Product Oracle — Agile Product Lifecycle Management (PLM)
Date Added 2025-02-24
Remediation Due 2025-03-17
https://www.oracle.com/security-alerts/cpujan2024.html ; https://nvd.nist.gov/vuln/detail/CVE-2024-20953

Bug Bounty Relevance

1 / 100
✓ Known exploited (KEV)

CVSS Score

Unscored

EPSS — Exploitation Probability

3.93%
Raw Score 0.039340
Percentile 90.3%
Date 2026-10-28

Intelligence Sources

kev ref →