AE
Product
Agile Engineering Data Management
by Oracle · last CVE Aug 18, 2026
On CISA KEVExploited in the wild
45
CVEs
2
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 4High 16Medium 20Low 3
Watch

Add Agile Engineering Data Management to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-70698
6.7
0%
Aug 18
Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Install)
Affected: 6.2.1.0
CVE-2026-61195
6.5
0%
Jul 21
Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Core)
Affected: 6.2.1.0
CVE-2026-61194
6.5
0%
Jul 21
Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Core)
Affected: 6.2.1.0
CVE-2026-61189
6.5
0%
Jul 21
Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Install)
Affected: 6.2.1.0
CVE-2022-23437
6.5
12%
Jan 24
Infinite loop within Apache XercesJ xml parser
Affected: 6.2.1.0
CVE-2026-70712
6.4
0%
Aug 18
Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Install)
Affected: 6.2.1.0
CVE-2026-61190
6.4
0%
Jul 21
Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Install)
Affected: 6.2.1.0
CVE-2026-70693
6.3
0%
Aug 18
Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Engineering Communication Interface)
Affected: 6.2.1.0
CVE-2020-1945
6.3
2%
May 14
Apache Ant 1.1 to 1.9.14 and 1.10.0 to 1.10.7 uses the default temporary directory identified by the Java system property java.io.tmpdir for several tasks and may thus leak…
Affected: 6.2.1.0
CVE-2019-10219
6.1
2%
Nov 8
A vulnerability was found in Hibernate-Validator
Affected: 6.2.1.0
CVE-2018-8032
6.1
11%
Aug 2
Apache Axis 1.x up to and including 1.4 is vulnerable to a cross-site scripting (XSS) attack in the default servlet/services
Affected: 6.2.1.0
CVE-2021-45105
5.9
100%
Dec 18
Apache Log4j2 versions 2.0-alpha1 through 2.16.0 (excluding 2.12.3 and 2.3.1) did not protect from uncontrolled recursion from self-referential lookups
Affected: 6.2.1.0
CVE-2021-36374
5.5
3%
Jul 14
When reading a specially crafted ZIP archive, or a derived formats, an Apache Ant build can be made to allocate large amounts of memory that leads to an out of memory error, even…
Affected: 6.2.1.0
CVE-2020-17521
5.5
1%
Dec 7
Apache Groovy provides extension methods to aid with creating temporary directories
Affected: 6.2.1.0
CVE-2026-61192
5.3
0%
Jul 21
Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Install)
Affected: 6.2.1.0
CVE-2021-29425
4.8
11%
Apr 13
Possible limited path traversal vulnerabily in Apache Commons IO
Affected: 6.2.1.0
CVE-2019-17569
4.8
9%
Feb 24
The refactoring present in Apache Tomcat 9.0.28 to 9.0.30, 8.5.48 to 8.5.50 and 7.0.98 to 7.0.99 introduced a regression
Affected: 6.2.1.0
CVE-2020-1935
4.8
9%
Feb 24
In Apache Tomcat 9.0.0.M1 to 9.0.30, 8.5.0 to 8.5.50 and 7.0.0 to 7.0.99 the HTTP header parsing code used an approach to end-of-line parsing that allowed some invalid HTTP…
Affected: 6.2.1.0
CVE-2017-10161
4.8
1%
Oct 19
Vulnerability in the Oracle Engineering Data Management component of Oracle Supply Chain Products Suite (subcomponent: Web Services Security)
Affected: 6.1.3.0; 6.2.2.0
CVE-2026-61191
4.4
0%
Jul 21
Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Document Management)
Affected: 6.2.1.0
Showing 20