CVE-2024-20956

CVE-2024-20956 affects Oracle Agile Product Lifecycle Management for Process (Installation component) prior to version 6.2.4.2. The root cause is insufficient input validation in the Installation component, enabling an unauthenticated, network-accessible attacker (via HTTP) to perform unauthorize...