CVE-2025-21564
CVSS 3.1 Score 8.1 of 10 (high)
Details
Published Jan 21, 2025
Summary
CVE-2025-21564 is a vulnerability affecting Oracle Agile PLM Framework's Agile Integration Services component in Oracle Supply Chain. The issue arises in Oracle Agile PLM Framework version 9.3.6 and grants a low-privileged attacker with network access via HTTP the ability to compromise the system. Successful exploitation could lead to unauthorized access to sensitive data or a denial-of-service (DoS) attack, resulting in a hang or frequent crashes. The CVSS Base Score is 8.1, with high impacts on confidentiality and availability.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Oracle Agile Product Lifecycle Management Framework
Affected Vendors
- BonqDAO