Login Request a demo
AP
Product
Agile Product Lifecycle Management
by Oracle · last CVE Sep 15, 2026
On CISA KEVExploited in the wildRansomware-linked
151
CVEs
6
On KEV
9.9
Max CVSS
0
New 30D
Vulnerabilities151In the news0Timeline
Severity mix
Critical 12High 74Medium 61Low 4
Severity
All severities151Critical12High74Medium61Low4
Exploitation
On CISA KEV6Exploited in the wild6
Watch

Add Agile Product Lifecycle Management to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2020-1938
In wildKEV
9.8
99%
Feb 24
Apache Tomcat Improper Privilege Management Vulnerability
Affected: 9.3.3; 9.3.5; 9.3.6
CVE-2019-2725
RansomwareIn wildKEV
9.8
100%
Apr 26
Oracle WebLogic Server, Injection
Affected: 9.3.3; 9.3.4; 9.3.5
CVE-2016-8735
In wildKEV
9.8
90%
Apr 6
Remote code execution is possible with Apache Tomcat before 6.0.48, 7.x before 7.0.73, 8.x before 8.0.39, 8.5.x before 8.5.7, and 9.x before 9.0.0.M12 if…
Affected: 9.3.5; 9.3.6
CVE-2024-20953
In wildKEV
8.8
4%
Feb 17
Oracle Agile Product Lifecycle Management (PLM) Deserialization Vulnerability
Affected: 9.3.6
CVE-2017-12617
In wildKEV
8.1
100%
Oct 3
When running Apache Tomcat versions 9.0.0.M1 to 9.0.0, 8.5.0 to 8.5.22, 8.0.0.RC1 to 8.0.46 and 7.0.0 to 7.0.81 with HTTP PUTs enabled (e.g
Affected: 9.3.3; 9.3.4; 9.3.5; 9.3.6
CVE-2024-21287
In wildKEV
7.5
2%
Nov 18
Oracle Agile Product Lifecycle Management (PLM) Incorrect Authorization Vulnerability
Affected: 9.3.6
Showing 6