Agile Product Lifecycle Management vulnerabilities

Product

Agile Product Lifecycle Management

by Oracle · last CVE Sep 15, 2026

On CISA KEVExploited in the wildRansomware-linked

151

CVEs

On KEV

9.9

Max CVSS

New 30D

Vulnerabilities151 In the news0 Timeline

Severity mix

Critical 12High 74Medium 61Low 4

Severity

All severities151 Critical12 High74 Medium61 Low4

Exploitation

On CISA KEV6 Exploited in the wild6

Watch

Add Agile Product Lifecycle Management to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2016-5524	5.3	2%	Oct 25	Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 and 9.3.5 allows remote attackers to affect confidentiality via unknown… Affected: 9.3.4; 9.3.5
CVE-2016-5510	5.3	2%	Oct 25	Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 and 9.3.5 allows remote attackers to affect confidentiality via unknown… Affected: 9.3.4; 9.3.5
CVE-2016-3560	5.3	2%	Jul 21	Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 and 9.3.5 allows remote attackers to affect confidentiality via vectors… Affected: 9.3.4; 9.3.5
CVE-2021-29425	4.8	11%	Apr 13	Possible limited path traversal vulnerabily in Apache Commons IO Affected: 9.3.6
CVE-2019-17569	4.8	9%	Feb 24	The refactoring present in Apache Tomcat 9.0.28 to 9.0.30, 8.5.48 to 8.5.50 and 7.0.98 to 7.0.99 introduced a regression Affected: 9.3.3; 9.3.5; 9.3.6
CVE-2020-1935	4.8	9%	Feb 24	In Apache Tomcat 9.0.0.M1 to 9.0.30, 8.5.0 to 8.5.50 and 7.0.0 to 7.0.99 the HTTP header parsing code used an approach to end-of-line parsing that allowed some invalid HTTP… Affected: 9.3.3; 9.3.5; 9.3.6
CVE-2017-10299	4.3	1%	Oct 19	Vulnerability in the Oracle Agile PLM component of Oracle Supply Chain Products Suite (subcomponent: Security) Affected: 9.3.5; 9.3.6
CVE-2016-5522	4.3	1%	Oct 25	Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 and 9.3.5 allows remote authenticated users to affect confidentiality via… Affected: 9.3.4; 9.3.5
CVE-2016-5513	4.3	1%	Oct 25	Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 and 9.3.5 allows remote authenticated users to affect confidentiality via… Affected: 9.3.4; 9.3.5
CVE-2016-3517	4.3	2%	Jul 21	Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 and 9.3.5 allows remote attackers to affect integrity via vectors related… Affected: 9.3.4; 9.3.5
CVE-2016-3507	4.3	2%	Jul 21	Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 and 9.3.5 allows remote attackers to affect integrity via vectors related… Affected: 9.3.4; 9.3.5