CVE-2025-21565highCWE-863

CVE-2025-21565: high-severity vulnerability in Oracle Agile PLM Framework

Published · Updated

Follow this CVE+ Monitor Agile PLM Framework

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 7.5epss 0.5%
Vulnerability in the Oracle Agile PLM Framework product of Oracle Supply Chain (component: Install). The supported version that is affected is 9.3.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Agile PLM Framework. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Agile PLM Framework accessible data. CVSS 3.1 Base Score 7.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N).
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Affected products
Oracle Corporation · Oracle Agile PLM Framework
Related CVEs — Oracle Agile PLM Framework

In the same product, most dangerous first.

CVE-2024-21287HIGHCVE-2024-21287EPSS 1.7%KEVCVE-2025-21556CRITICALCVE-2025-21556EPSS 0.6%CVE-2025-21564HIGHCVE-2025-21564EPSS 0.5%CVE-2025-21560MEDIUMCVE-2025-21560EPSS 0.4%