Login Request a demo
AP
Product
Agile Product Lifecycle Management
by Oracle · last CVE Sep 15, 2026
On CISA KEVExploited in the wildRansomware-linked
151
CVEs
6
On KEV
9.9
Max CVSS
0
New 30D
Vulnerabilities151In the news0Timeline
Severity mix
Critical 12High 74Medium 61Low 4
Severity
All severities151Critical12High74Medium61Low4
Exploitation
On CISA KEV6Exploited in the wild6
Watch

Add Agile Product Lifecycle Management to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2020-1938
In wildKEV
9.8
99%
Feb 24
Apache Tomcat Improper Privilege Management Vulnerability
Affected: 9.3.3; 9.3.5; 9.3.6
CVE-2019-2725
RansomwareIn wildKEV
9.8
100%
Apr 26
Oracle WebLogic Server, Injection
Affected: 9.3.3; 9.3.4; 9.3.5
CVE-2016-8735
In wildKEV
9.8
90%
Apr 6
Remote code execution is possible with Apache Tomcat before 6.0.48, 7.x before 7.0.73, 8.x before 8.0.39, 8.5.x before 8.5.7, and 9.x before 9.0.0.M12 if…
Affected: 9.3.5; 9.3.6
CVE-2025-21556
9.9
1%
Jan 21
Vulnerability in the Oracle Agile PLM Framework product of Oracle Supply Chain (component: Agile Integration Services)
Affected: 9.3.6
CVE-2026-71040
9.8
1%
Aug 18
Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Security)
Affected: 9.3.6
CVE-2026-61167
9.8
1%
Jul 21
Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Security)
Affected: 9.3.6
CVE-2026-46859
9.8
1%
Jun 16
Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Security)
Affected: 9.3.6
CVE-2020-10683
9.8
7%
May 1
dom4j before 2.0.3 and 2.1.x before 2.1.3 allows external DTDs and External Entities by default, which might enable XXE attacks
Affected: 9.3.3; 9.3.5
CVE-2020-9546
9.8
5%
Mar 2
FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to…
Affected: 9.3.6
CVE-2020-9548
9.8
19%
Mar 2
FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to br.com.anteros.dbcp.AnterosDBCPConfig (aka…
Affected: 9.3.6
CVE-2016-3556
9.8
4%
Jul 21
Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 and 9.3.5 allows remote attackers to affect confidentiality, integrity, and…
Affected: 9.3.4; 9.3.5
CVE-2026-61171
9.1
0%
Jul 21
Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Security)
Affected: 9.3.6
Showing 12