CVE-2025-21556

Summary

CVE-2025-21556 is a severe vulnerability affecting the Oracle Agile PLM Framework component of Oracle Supply Chain, specifically version 9.3.6. This issue enables a low-privileged attacker with network access to compromise the Oracle Agile PLM Framework, potentially leading to significant impacts on additional products. Successfully exploited vulnerabilities can result in the takeover of the Oracle Agile PLM Framework, posing risks to confidentiality, integrity, and availability. The CVSS Base Score is 9.9. Attacks may occur via HTTP, making this easily exploitable.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.