Login Request a demo
PL
Product
Product Lifecycle Analytics
by Oracle · last CVE Aug 18, 2026
On CISA KEVExploited in the wild
13
CVEs
2
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities13In the news0Timeline
Severity mix
Critical 4High 5Medium 4Low 0
Severity
All severities13Critical4High5Medium4Low0
Exploitation
On CISA KEV2Exploited in the wild2
Watch

Add Product Lifecycle Analytics to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2022-22965
In wildKEV
9.8
100%
Apr 1
Spring Framework JDK 9+ Remote Code Execution Vulnerability
Affected: 3.6.1
CVE-2022-22963
In wildKEV
9.8
100%
Apr 1
VMware Tanzu Spring Cloud Function Remote Code Execution Vulnerability
Affected: 3.6.1.0
CVE-2026-61175
9.3
0%
Jul 21
Vulnerability in the Oracle Product Lifecycle Analytics product of Oracle Supply Chain (component: Installation Issues)
Affected: 3.6.1
CVE-2026-61174
9.0
0%
Jul 21
Vulnerability in the Oracle Product Lifecycle Analytics product of Oracle Supply Chain (component: Installation Issues)
Affected: 3.6.1
CVE-2026-71051
8.8
0%
Aug 18
Vulnerability in the Oracle Product Lifecycle Analytics product of Oracle Supply Chain (component: Installation Issues)
Affected: 3.6.1
CVE-2026-71050
8.7
0%
Aug 18
Vulnerability in the Oracle Product Lifecycle Analytics product of Oracle Supply Chain (component: Installation Issues)
Affected: 3.6.1
CVE-2026-71049
8.5
0%
Aug 18
Vulnerability in the Oracle Product Lifecycle Analytics product of Oracle Supply Chain (component: Installation Issues)
Affected: 3.6.1
CVE-2020-11987
8.2
13%
Feb 24
Apache Batik 1.13 is vulnerable to server-side request forgery, caused by improper input validation by the NodePickerPanel
Affected: 3.6.1
CVE-2026-71048
7.6
0%
Aug 18
Vulnerability in the Oracle Product Lifecycle Analytics product of Oracle Supply Chain (component: Installation Issues)
Affected: 3.6.1
CVE-2026-61176
6.7
0%
Jul 21
Vulnerability in the Oracle Product Lifecycle Analytics product of Oracle Supply Chain (component: Installation Issues)
Affected: 3.6.1
CVE-2021-44832
6.6
98%
Dec 28
Apache Log4j2 versions 2.0-beta7 through 2.17.0 (excluding security fix releases 2.3.2 and 2.12.4) are vulnerable to a remote code execution (RCE) attack when a configuration uses…
Affected: 3.6.1
CVE-2022-23437
6.5
12%
Jan 24
Infinite loop within Apache XercesJ xml parser
Affected: 3.6.1
CVE-2021-36374
5.5
3%
Jul 14
When reading a specially crafted ZIP archive, or a derived formats, an Apache Ant build can be made to allocate large amounts of memory that leads to an out of memory error, even…
Affected: 3.6.1
Showing 13