{"metadata": {"vulnerability": "CVE-2024-21287", "count": 57, "kinds": {"milestone": 6, "sighting": 23, "kev": 11, "other": 17}, "linked_omitted": 0}, "data": [{"timestamp": "2023-12-07T22:28:10.707Z", "date_only": false, "value": "2023-12-07T22:28:10.707Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2024-21287", "field": "cveMetadata.dateReserved"}, {"timestamp": "2023-12-13T01:21:42.641Z", "date_only": false, "value": "2023-12-13T01:21:42.641825Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2024-21287", "record": "GSD-2024-21287", "field": "gsd.osvSchema.modified", "linked_record": true}, {"timestamp": "2024-11-18T21:39:18.692Z", "date_only": false, "value": "2024-11-18T21:39:18.692Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2024-21287", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2024-11-18T21:39:18.692Z", "date_only": false, "value": "2024-11-18T21:39:18.692Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / oracle", "record": "CVE-2024-21287", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2024-11-18T21:44:22.445Z", "date_only": false, "value": "2024-11-18T21:44:22.445239Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/113506140934519890", "record": "cve-2024-21287", "field": "creation_timestamp", "uuid": "16928e6d-345d-43cd-ac4b-e58a3ab5d01c", "url": "https://infosec.exchange/users/cve/statuses/113506140934519890"}, {"timestamp": "2024-11-18T22:15:05Z", "date_only": false, "value": "2024-11-18T22:15:05Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-XQ44-WCJX-G3W9", "record": "GHSA-XQ44-WCJX-G3W9", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2024-11-18T22:15:05.897Z", "date_only": false, "value": "2024-11-18T22:15:05.897", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-21287", "record": "FKIE_CVE-2024-21287", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2024-11-18T23:00:00Z", "date_only": false, "value": "2024-11-18T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-3492", "record": "WID-SEC-W-2024-3492", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2024-11-18T23:00:00Z", "date_only": false, "value": "2024-11-18T23:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-3492", "record": "WID-SEC-W-2024-3492", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2024-11-18T23:00:00Z", "date_only": false, "value": "2024-11-18T23:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-3492", "record": "WID-SEC-W-2024-3492", "field": "vulnerabilities.0.release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2024-11-18T23:00:00Z", "date_only": false, "value": "2024-11-18T23:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-3492", "record": "WID-SEC-W-2024-3492", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2024-11-19T00:05:05Z", "date_only": false, "value": "2024-11-19T00:05:05.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cvedetector/11407", "record": "CVE-2024-21287", "field": "creation_timestamp", "uuid": "fc4781f8-1949-4bea-929c-8e075e3ff51f", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-21287 - \"Oracle Agile PLM Framework Software Development Kit Process Extension Remote HTTP Authentication Bypass\"\", \n  \"Content\": \"CVE ID : CVE-2024-21287 \nPublished : Nov. 18, 2024, 10:15 p.m. | 39\u00a0minutes ago \nDescription : Vulnerability in the Oracle Agile PLM Framework product of Oracle Supply Chain (component: Software Development Kit, Process Extension).   The supported version that is affected is 9.3.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Agile PLM Framework.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle Agile PLM Framework accessible data. CVSS 3.1 Base Score 7.5 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N). \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "url": "https://t.me/cvedetector/11407"}, {"timestamp": "2024-11-19T00:32:43Z", "date_only": false, "value": "2024-11-19T00:32:43Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-XQ44-WCJX-G3W9", "record": "GHSA-XQ44-WCJX-G3W9", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2024-11-19T09:41:05.945Z", "date_only": false, "value": "2024-11-19T09:41:05.945149Z", "kind": "other", "label": "Advisory revision", "source": "csaf_ncscnl \u00b7 NCSC-2024-0453", "record": "NCSC-2024-0453", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2024-11-19T09:41:05.945Z", "date_only": false, "value": "2024-11-19T09:41:05.945149Z", "kind": "milestone", "label": "Published", "source": "csaf_ncscnl \u00b7 NCSC-2024-0453", "record": "NCSC-2024-0453", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2024-11-19T09:41:05.945Z", "date_only": false, "value": "2024-11-19T09:41:05.945149Z", "kind": "other", "label": "Updated", "source": "csaf_ncscnl \u00b7 NCSC-2024-0453", "record": "NCSC-2024-0453", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2024-11-19T11:34:42.670Z", "date_only": false, "value": "2024-11-19T11:34:42.670+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-3492", "record": "WID-SEC-W-2024-3492", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2024-11-19T15:15:04.433Z", "date_only": false, "value": "2024-11-19T15:15:04.433958Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/edwardk/statuses/113510272474706897", "record": "cve-2024-21287", "field": "creation_timestamp", "uuid": "f8a9038d-c4d8-46df-869e-3a81ad785d37", "url": "https://infosec.exchange/users/edwardk/statuses/113510272474706897"}, {"timestamp": "2024-11-19T20:07:59.142Z", "date_only": false, "value": "2024-11-19T20:07:59.142694Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113511424220768349", "record": "CVE-2024-21287", "field": "creation_timestamp", "uuid": "463e96a4-8680-4ac5-a180-5b43433f2431", "url": "https://infosec.exchange/users/screaminggoat/statuses/113511424220768349"}, {"timestamp": "2024-11-19T20:49:47Z", "date_only": false, "value": "2024-11-19T20:49:47.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/BleepingComputer/21057", "record": "CVE-2024-21287", "field": "creation_timestamp", "uuid": "e3a8217d-4975-41c1-9726-ed5334a9d36b", "content": "\u200aOracle warns of Agile PLM file disclosure flaw exploited in attacks\n\nOracle has fixed an unauthenticated file disclosure flaw in\u00a0Oracle Agile Product Lifecycle Management (PLM) tracked as CVE-2024-21287, which was actively exploited as a zero-day to download files. [...]\n\nhttps://www.bleepingcomputer.com/news/security/oracle-warns-of-agile-plm-file-disclosure-flaw-exploited-in-attacks/", "url": "https://t.me/BleepingComputer/21057", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2024-11-19T21:42:10.834Z", "date_only": false, "value": "2024-11-19T21:42:10.834703Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/edwardk/statuses/113511794640613423", "record": "CVE-2024-21287", "field": "creation_timestamp", "uuid": "17671c11-52e6-44d1-9de8-b0cad4afaf11", "url": "https://infosec.exchange/users/edwardk/statuses/113511794640613423"}, {"timestamp": "2024-11-20T04:24:00Z", "date_only": false, "value": "2024-11-20T04:24:00.000000Z", "kind": "sighting", "label": "Seen", "source": "https://thehackernews.com/2024/11/oracle-warns-of-agile-plm-vulnerability.html", "record": "CVE-2024-21287", "field": "creation_timestamp", "uuid": "9320dcb3-01da-4580-bb5a-17f1a508fbfe", "url": "https://thehackernews.com/2024/11/oracle-warns-of-agile-plm-vulnerability.html"}, {"timestamp": "2024-11-20T05:27:18Z", "date_only": false, "value": "2024-11-20T05:27:18.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/thehackernews/5915", "record": "CVE-2024-21287", "field": "creation_timestamp", "uuid": "cae25a6d-09fa-4788-aff8-338a02f44f5f", "content": "\ud83d\uded1 Urgent Alert: A high-severity vulnerability in Oracle's Agile PLM Framework is actively being exploited. \n \nNo username or password required, CVE-2024-21287 could leak sensitive data without any authentication. \n \nRead the full advisory \u2014 https://thehackernews.com/2024/11/oracle-warns-of-agile-plm-vulnerability.html", "url": "https://t.me/thehackernews/5915", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2024-11-20T08:29:07Z", "date_only": false, "value": "2024-11-20T08:29:07.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/KomunitiSiber/2892", "record": "CVE-2024-21287", "field": "creation_timestamp", "uuid": "4bddcfb4-808f-4aa8-bce1-b0bf264bd10b", "content": "Oracle Warns of Agile PLM Vulnerability Currently Under Active Exploitation\nhttps://thehackernews.com/2024/11/oracle-warns-of-agile-plm-vulnerability.html\n\nOracle is warning that a high-severity security flaw impacting the Agile Product Lifecycle Management (PLM) Framework has been exploited in the wild.\nThe vulnerability, tracked as CVE-2024-21287 (CVSS score: 7.5), could be exploited sans authentication to leak sensitive information.\n\"This vulnerability is remotely exploitable without authentication, i.e., it may be exploited over a network", "url": "https://t.me/KomunitiSiber/2892", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2024-11-20T12:32:03Z", "date_only": false, "value": "2024-11-20T12:32:03.000000Z", "kind": "sighting", "label": "Exploited", "source": "Telegram/0Tgv-linri2TD2LQRlryMRX0gmQtmIgpiC1bpMG5uWfdbg", "record": "CVE-2024-21287", "field": "creation_timestamp", "uuid": "2ba3191d-4068-492c-a59d-86ba4acdbaf6", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2024-11-20T13:40:51.971Z", "date_only": false, "value": "2024-11-20T13:40:51.971482Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/jbhall56/statuses/113515564339510109", "record": "CVE-2024-21287", "field": "creation_timestamp", "uuid": "458b676b-dffb-4f2b-a014-a338911998b4", "url": "https://infosec.exchange/users/jbhall56/statuses/113515564339510109"}, {"timestamp": "2024-11-21T00:00:00Z", "date_only": false, "value": "2024-11-21T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2024-21287", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "0dddae63-7be6-4f8c-8380-286d4e09b714", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2024-11-21T00:00:00Z", "date_only": false, "value": "2024-11-21T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2024-21287", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "417978e0-7e72-46db-83ae-13f8c3ade02a", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2024-11-21T00:00:00Z", "date_only": true, "value": "2024-11-21", "kind": "other", "label": "Catalog added", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2024-21287", "field": "containers.adp.0.metrics.1.other.content.dateAdded"}, {"timestamp": "2024-11-21T00:00:00Z", "date_only": false, "value": "2024-11-21T00:00:00.000Z", "kind": "kev", "label": "Catalog added", "source": "kevintel", "record": "CVE-2024-21287", "field": "evidence.0.details.added_date", "uuid": "417978e0-7e72-46db-83ae-13f8c3ade02a", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2024-11-21T00:00:00Z", "date_only": true, "value": "2024-11-21", "kind": "kev", "label": "Date added", "source": "cisa-kev", "record": "CVE-2024-21287", "field": "evidence.0.details.date_added", "uuid": "0dddae63-7be6-4f8c-8380-286d4e09b714", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2024-11-21T00:00:00Z", "date_only": false, "value": "2024-11-21T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "cisa-kev", "record": "CVE-2024-21287", "field": "timestamps.first_seen_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "0dddae63-7be6-4f8c-8380-286d4e09b714", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2024-11-21T00:00:00Z", "date_only": false, "value": "2024-11-21T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "kevintel", "record": "CVE-2024-21287", "field": "timestamps.first_seen_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "417978e0-7e72-46db-83ae-13f8c3ade02a", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2024-11-21T00:00:00Z", "date_only": false, "value": "2024-11-21T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "cisa-kev", "record": "CVE-2024-21287", "field": "status.status_updated_at", "uuid": "0dddae63-7be6-4f8c-8380-286d4e09b714", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2024-11-21T00:00:00Z", "date_only": false, "value": "2024-11-21T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "kevintel", "record": "CVE-2024-21287", "field": "status.status_updated_at", "uuid": "417978e0-7e72-46db-83ae-13f8c3ade02a", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2024-11-21T00:00:00Z", "date_only": false, "value": "2024-11-21T00:00:00.000Z", "kind": "other", "label": "Timeline", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2024-21287", "field": "containers.adp.0.timeline.0.time", "text": "CVE-2024-21287 added to CISA KEV"}, {"timestamp": "2024-11-21T16:17:42.452Z", "date_only": false, "value": "2024-11-21T16:17:42.452365Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113521843358225188", "record": "CVE-2024-21287", "field": "creation_timestamp", "uuid": "82cd9f62-3a0f-4f38-a47e-cb3bb21db915", "url": "https://infosec.exchange/users/screaminggoat/statuses/113521843358225188"}, {"timestamp": "2024-11-21T18:34:14.075Z", "date_only": false, "value": "2024-11-21T18:34:14.075865Z", "kind": "sighting", "label": "Seen", "source": "https://feedsin.space/feed/CISAKevBot/items/2729458", "record": "CVE-2024-21287", "field": "creation_timestamp", "uuid": "aa5b796a-7035-47f4-9e27-2ea07c790b55", "url": "https://feedsin.space/feed/CISAKevBot/items/2729458"}, {"timestamp": "2024-11-21T21:10:02Z", "date_only": false, "value": "2024-11-21T21:10:02.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2024-21287", "field": "creation_timestamp", "uuid": "df10b065-20f2-4001-8af0-80c85b5cd4f4"}, {"timestamp": "2024-11-22T02:22:34.067Z", "date_only": false, "value": "2024-11-22T02:22:34.067362Z", "kind": "sighting", "label": "Seen", "source": "https://mstdn.ca/users/rfwaveio/statuses/113524221513212196", "record": "CVE-2024-21287", "field": "creation_timestamp", "uuid": "d55fa87f-a482-4c94-a05b-b04dc9f3b8ab", "url": "https://mstdn.ca/users/rfwaveio/statuses/113524221513212196"}, {"timestamp": "2024-11-23T04:55:47.950Z", "date_only": false, "value": "2024-11-23T04:55:47.950960Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2024-21287", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2024-11-23T04:55:47.950Z", "date_only": false, "value": "2024-11-23T04:55:47.950960Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-21287", "record": "FKIE_CVE-2024-21287", "field": "metrics.ssvcV203.0.ssvcData.timestamp", "linked_record": true}, {"timestamp": "2024-11-28T10:58:24Z", "date_only": false, "value": "2024-11-28T10:58:24.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/VfNXvTZLNEqWicP3kA9WPIcdljmbCPlbJq4BVBN5ax6E5eg", "record": "CVE-2024-21287", "field": "creation_timestamp", "uuid": "ef1cb71f-c471-4408-85f6-17b595293ef7"}, {"timestamp": "2024-12-12T00:00:00Z", "date_only": true, "value": "2024-12-12", "kind": "kev", "label": "Due date", "source": "cisa-kev", "record": "CVE-2024-21287", "field": "evidence.0.details.due_date", "uuid": "0dddae63-7be6-4f8c-8380-286d4e09b714", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-02-23T02:11:02Z", "date_only": false, "value": "2025-02-23T02:11:02.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2024-21287", "field": "creation_timestamp", "uuid": "8a4e26aa-c446-464f-b674-e719f586f6e4"}, {"timestamp": "2025-03-01T01:45:13.217Z", "date_only": false, "value": "2025-03-01T01:45:13.217433Z", "kind": "sighting", "label": "Seen", "source": "https://poliverso.org/objects/0477a01e-174112eb-f97b33dde7c3e5be", "record": "CVE-2024-21287", "field": "creation_timestamp", "uuid": "b12ad51b-a0ec-4d24-a383-f9b36fd6016b", "url": "https://poliverso.org/objects/0477a01e-174112eb-f97b33dde7c3e5be"}, {"timestamp": "2025-07-30T07:40:15.262Z", "date_only": false, "value": "2025-07-30T07:40:15.262731Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyberalerts.bsky.social/post/3lv64lem3fz2y", "record": "CVE-2024-21287", "field": "creation_timestamp", "uuid": "9c71b79c-90f4-4e76-bf2e-77767030c0ec", "url": "https://bsky.app/profile/cyberalerts.bsky.social/post/3lv64lem3fz2y"}, {"timestamp": "2025-08-18T18:30:59Z", "date_only": false, "value": "2025-08-18T18:30:59.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/fc16b923-3a13-4e9d-9aac-10a57cac12c7", "record": "CVE-2024-21287", "field": "creation_timestamp", "uuid": "0de78585-4def-40a2-8db3-5f13850cdfc2"}, {"timestamp": "2025-10-21T22:55:35.923Z", "date_only": false, "value": "2025-10-21T22:55:35.923Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2024-21287", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-10-21T22:55:35.923Z", "date_only": false, "value": "2025-10-21T22:55:35.923Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2024-21287", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2025-10-22T00:33:11Z", "date_only": false, "value": "2025-10-22T00:33:11Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-XQ44-WCJX-G3W9", "record": "GHSA-XQ44-WCJX-G3W9", "field": "modified", "linked_record": true}, {"timestamp": "2026-02-02T12:26:21.022Z", "date_only": false, "value": "2026-02-02T12:26:21.022517Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/0dddae63-7be6-4f8c-8380-286d4e09b714", "record": "CVE-2024-21287", "field": "creation_timestamp", "uuid": "c42960de-4c1d-4712-a9d8-5883821f5352", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/0dddae63-7be6-4f8c-8380-286d4e09b714", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-06-17T07:08:56.087Z", "date_only": false, "value": "2026-06-17T07:08:56.087", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-21287", "record": "FKIE_CVE-2024-21287", "field": "lastModified", "linked_record": true}, {"timestamp": "2026-06-19T12:46:31.055Z", "date_only": false, "value": "2026-06-19T12:46:31.055678Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/24ffeac4-79a9-418a-b116-595b33304473", "record": "CVE-2024-21287", "field": "creation_timestamp", "uuid": "4638acbe-4984-4806-b8a5-ff2123d52597", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/24ffeac4-79a9-418a-b116-595b33304473", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-06-23T14:02:37Z", "date_only": false, "value": "2026-06-23T14:02:37+00:00", "kind": "kev", "label": "Recorded", "source": "kevintel", "record": "CVE-2024-21287", "field": "timestamps.recorded_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "batch_listing": true, "uuid": "417978e0-7e72-46db-83ae-13f8c3ade02a", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-23T14:06:01.624Z", "date_only": false, "value": "2026-06-23T14:06:01.624456Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/417978e0-7e72-46db-83ae-13f8c3ade02a", "record": "CVE-2024-21287", "field": "creation_timestamp", "uuid": "beb67f19-a25a-4984-87ea-976f69e597a6", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/417978e0-7e72-46db-83ae-13f8c3ade02a", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-11-04T13:31:51Z", "date_only": false, "value": "2026-11-04T13:31:51+00:00", "kind": "kev", "label": "Recorded", "source": "cisa-kev", "record": "CVE-2024-21287", "field": "timestamps.recorded_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "batch_listing": true, "uuid": "0dddae63-7be6-4f8c-8380-286d4e09b714", "status": {"status_reason": "confirmed", "exploited": true}}], "metrics": {"as_of": "2026-11-15T06:01:03.552Z", "anchors": {"origin": {"timestamp": "2024-11-18T21:39:18.692Z", "date_only": false, "value": "2024-11-18T21:39:18.692Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2024-21287", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2024-11-18T21:39:18.692Z", "date_only": false, "value": "2024-11-18T21:39:18.692Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2024-21287", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": null, "exploitation": {"timestamp": "2024-11-19T20:49:47Z", "date_only": false, "value": "2024-11-19T20:49:47.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/BleepingComputer/21057", "record": "CVE-2024-21287", "field": "creation_timestamp", "uuid": "e3a8217d-4975-41c1-9726-ed5334a9d36b", "content": "\u200aOracle warns of Agile PLM file disclosure flaw exploited in attacks\n\nOracle has fixed an unauthenticated file disclosure flaw in\u00a0Oracle Agile Product Lifecycle Management (PLM) tracked as CVE-2024-21287, which was actively exploited as a zero-day to download files. [...]\n\nhttps://www.bleepingcomputer.com/news/security/oracle-warns-of-agile-plm-file-disclosure-flaw-exploited-in-attacks/", "url": "https://t.me/BleepingComputer/21057", "metric_role": "exploitation", "metric_basis": "sighting_report"}, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": true, "seconds": 83428.308, "hours": 23.17453, "days": 0.9656054166666668, "min_seconds": 83428.308, "max_seconds": 83428.308, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2024-11-18T21:39:18.692Z", "date_only": false, "value": "2024-11-18T21:39:18.692Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2024-21287", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2024-11-19T20:49:47Z", "date_only": false, "value": "2024-11-19T20:49:47.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/BleepingComputer/21057", "record": "CVE-2024-21287", "field": "creation_timestamp", "uuid": "e3a8217d-4975-41c1-9726-ed5334a9d36b", "content": "\u200aOracle warns of Agile PLM file disclosure flaw exploited in attacks\n\nOracle has fixed an unauthenticated file disclosure flaw in\u00a0Oracle Agile Product Lifecycle Management (PLM) tracked as CVE-2024-21287, which was actively exploited as a zero-day to download files. [...]\n\nhttps://www.bleepingcomputer.com/news/security/oracle-warns-of-agile-plm-file-disclosure-flaw-exploited-in-attacks/", "url": "https://t.me/BleepingComputer/21057", "metric_role": "exploitation", "metric_basis": "sighting_report"}}, "disclosure_to_exploit": {"available": true, "seconds": 83428.308, "hours": 23.17453, "days": 0.9656054166666668, "min_seconds": 83428.308, "max_seconds": 83428.308, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2024-11-18T21:39:18.692Z", "date_only": false, "value": "2024-11-18T21:39:18.692Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2024-21287", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2024-11-19T20:49:47Z", "date_only": false, "value": "2024-11-19T20:49:47.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/BleepingComputer/21057", "record": "CVE-2024-21287", "field": "creation_timestamp", "uuid": "e3a8217d-4975-41c1-9726-ed5334a9d36b", "content": "\u200aOracle warns of Agile PLM file disclosure flaw exploited in attacks\n\nOracle has fixed an unauthenticated file disclosure flaw in\u00a0Oracle Agile Product Lifecycle Management (PLM) tracked as CVE-2024-21287, which was actively exploited as a zero-day to download files. [...]\n\nhttps://www.bleepingcomputer.com/news/security/oracle-warns-of-agile-plm-file-disclosure-flaw-exploited-in-attacks/", "url": "https://t.me/BleepingComputer/21057", "metric_role": "exploitation", "metric_basis": "sighting_report"}}, "disclosure_to_exploit_publication": {"available": false, "missing": ["end"]}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 62756504.860478, "hours": 17432.362461243887, "days": 726.3484358851621, "min_seconds": 62756504.860478, "max_seconds": 62756504.860478, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2024-11-18T21:39:18.692Z", "date_only": false, "value": "2024-11-18T21:39:18.692Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2024-21287", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-15T06:01:03.552Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": true, "seconds": 62673076.552478, "hours": 17409.18793124389, "days": 725.3828304684954, "min_seconds": 62673076.552478, "max_seconds": 62673076.552478, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2024-11-19T20:49:47Z", "date_only": false, "value": "2024-11-19T20:49:47.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/BleepingComputer/21057", "record": "CVE-2024-21287", "field": "creation_timestamp", "uuid": "e3a8217d-4975-41c1-9726-ed5334a9d36b", "content": "\u200aOracle warns of Agile PLM file disclosure flaw exploited in attacks\n\nOracle has fixed an unauthenticated file disclosure flaw in\u00a0Oracle Agile Product Lifecycle Management (PLM) tracked as CVE-2024-21287, which was actively exploited as a zero-day to download files. [...]\n\nhttps://www.bleepingcomputer.com/news/security/oracle-warns-of-agile-plm-file-disclosure-flaw-exploited-in-attacks/", "url": "https://t.me/BleepingComputer/21057", "metric_role": "exploitation", "metric_basis": "sighting_report"}, "end": {"timestamp": "2026-11-15T06:01:03.552Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploit_publication_to_patch": {"available": false, "missing": ["start"]}}}