CVE-2025-21565

Summary

CVE-2025-21565 is a vulnerability affecting Oracle Agile PLM Framework version 9.3.6 in the Oracle Supply Chain component (Install). This easily exploitable issue enables unauthenticated attackers, with only network access via HTTP, to compromise Oracle Agile PLM Framework. The consequences of a successful attack can range from unauthorized access to critical data to complete control over all accessible data. The vulnerability has a base score of 7.5 (Confidentiality impacts) on the Common Vulnerability Scoring System (CVSS) and falls under the vector (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N).

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.