Oracle has fixed an unauthenticated file disclosure flaw in Oracle Agile Product Lifecycle Management (PLM) tracked as CVE-2024-21287, which was actively exploited as a zero-day to download files.

Here’s the skinny on Oracle’s acquisition of Agile: PLM is a three-letter acronym that has never lived up to its reputation as hot number either across the enterprise or in the eyes of the investment ...