TM
Product
Transportation Management
On CISA KEVExploited in the wild
30
CVEs
3
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 6Medium 20Low 2
Watch
Add Transportation Management to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-1938 In wildKEV | 9.8 | Feb 24 | Apache Tomcat Improper Privilege Management Vulnerability Affected: 6.3.7 |
| CVE-2016-8735 In wildKEV | 9.8 | Apr 6 | Remote code execution is possible with Apache Tomcat before 6.0.48, 7.x before 7.0.73, 8.x before 8.0.39, 8.5.x before 8.5.7, and 9.x before 9.0.0.M12 if… Affected: 6.3.0; 6.3.1; 6.3.2; 6.3.3; 6.3.4; 6.3.5; +2 more |
| CVE-2017-12617 In wildKEV | 8.1 | Oct 3 | When running Apache Tomcat versions 9.0.0.M1 to 9.0.0, 8.5.0 to 8.5.22, 8.0.0.RC1 to 8.0.46 and 7.0.0 to 7.0.81 with HTTP PUTs enabled (e.g Affected: 6.3.1; 6.3.2; 6.3.3; 6.3.4; 6.3.5; 6.3.6; +1 more |
| CVE-2026-60583 | 8.8 | Jul 21 | Vulnerability in the Oracle Transportation Management product of Oracle Supply Chain (component: Install) Affected: 6.5.3 |
| CVE-2026-60584 | 7.6 | Jul 21 | Vulnerability in the Oracle Transportation Management product of Oracle Supply Chain (component: CSV Management) Affected: 6.5.3 |
| CVE-2019-17563 | 7.5 | Dec 23 | When using FORM authentication with Apache Tomcat 9.0.0.M1 to 9.0.29, 8.5.0 to 8.5.49 and 7.0.0 to 7.0.98 there was a narrow window where an attacker could perform a session… Affected: 6.3.7 |
| CVE-2016-3470 | 7.1 | Jul 21 | Unspecified vulnerability in the Oracle Transportation Management component in Oracle Supply Chain Products Suite 6.4.1 allows remote authenticated users to affect confidentiality… Affected: 6.4.1 |
| CVE-2020-9484 | 7.0 | May 20 | When using Apache Tomcat versions 10.0.0-M1 to 10.0.0-M4, 9.0.0.M1 to 9.0.34, 8.5.0 to 8.5.54 and 7.0.0 to 7.0.103 if a) an attacker is able to control the contents and name of a… Affected: 6.3.7 |
| CVE-2026-60433 | 6.5 | Jul 21 | Vulnerability in the Oracle Transportation Management product of Oracle Supply Chain (component: Integration) Affected: 6.5.3 |
| CVE-2019-2487 | 6.5 | Jan 16 | Vulnerability in the Oracle Transportation Management component of Oracle Supply Chain Products Suite (subcomponent: UI Infrastructure) Affected: 6.3.7; 6.4.1; 6.4.2; 6.4.3 |
| CVE-2018-2823 | 6.5 | Apr 19 | Vulnerability in the Oracle Transportation Management component of Oracle Supply Chain Products Suite (subcomponent: Database) Affected: 6.4.3 |
| CVE-2022-21480 | 6.1 | Apr 19 | Vulnerability in the Oracle Transportation Management product of Oracle Supply Chain (component: User Interface) Affected: 6.4.3; 6.5.1 |
| CVE-2019-2709 | 6.1 | Apr 23 | Vulnerability in the Oracle Transportation Management component of Oracle Supply Chain Products Suite (subcomponent: Security) Affected: 6.3.7; 6.4.2; 6.4.3 |
| CVE-2017-3530 | 6.1 | Apr 24 | Vulnerability in the Oracle Transportation Manager component of Oracle Supply Chain Products Suite (subcomponent: Security) Affected: 6.2; 6.3.0; 6.3.1; 6.3.2; 6.3.3; 6.3.4; +6 more |
| CVE-2022-39420 | 5.4 | Oct 18 | Vulnerability in the Oracle Transportation Management product of Oracle Supply Chain (component: Data, Functional Security) Affected: 6.4.3; 6.5.1 |
| CVE-2022-21591 | 5.4 | Oct 18 | Vulnerability in the Oracle Transportation Management product of Oracle Supply Chain (component: UI Infrastructure) Affected: 6.4.3; 6.5.1 |
| CVE-2021-35616 | 5.4 | Oct 20 | Vulnerability in the Oracle Transportation Management product of Oracle Supply Chain (component: UI Infrastructure) Affected: 6.4.3 |
| CVE-2020-2744 | 5.4 | Apr 15 | Vulnerability in the Oracle Transportation Management product of Oracle Supply Chain (component: Security) Affected: 6.3.7; 6.4.2; 6.4.3 |
| CVE-2018-2662 | 5.4 | Jan 18 | Vulnerability in the Oracle Transportation Management component of Oracle Supply Chain Products Suite (subcomponent: Security) Affected: 6.2.11; 6.3.1; 6.3.2; 6.3.3; 6.3.4; 6.3.5; +3 more |
| CVE-2017-10032 | 5.4 | Aug 8 | Vulnerability in the Oracle Transportation Management component of Oracle Supply Chain Products Suite (subcomponent: Access Control List) Affected: 6.3.4.1; 6.3.5.1; 6.3.6.1; 6.3.7.1; 6.4.0; 6.4.1; +1 more |
| CVE-2021-2476 | 5.3 | Oct 20 | Vulnerability in the Oracle Transportation Management product of Oracle Supply Chain (component: Authentication) Affected: 6.4.3 |
| CVE-2015-3195 | 5.3 | Dec 6 | The ASN1_TFLG_COMBINE implementation in crypto/asn1/tasn_dec.c in OpenSSL before 0.9.8zh, 1.0.0 before 1.0.0t, 1.0.1 before 1.0.1q, and 1.0.2 before 1.0.2e mishandles errors… Affected: 6.1; 6.2 |
| CVE-2022-39411 | 4.9 | Oct 18 | Vulnerability in the Oracle Transportation Management product of Oracle Supply Chain (component: Business Process Automation) Affected: 6.4.3; 6.5.1 |
| CVE-2019-17569 | 4.8 | Feb 24 | The refactoring present in Apache Tomcat 9.0.28 to 9.0.30, 8.5.48 to 8.5.50 and 7.0.98 to 7.0.99 introduced a regression Affected: 6.3.7 |
| CVE-2020-1935 | 4.8 | Feb 24 | In Apache Tomcat 9.0.0.M1 to 9.0.30, 8.5.0 to 8.5.50 and 7.0.0 to 7.0.99 the HTTP header parsing code used an approach to end-of-line parsing that allowed some invalid HTTP… Affected: 6.3.7 |
| CVE-2026-60434 | 4.3 | Jul 21 | Vulnerability in the Oracle Transportation Management product of Oracle Supply Chain (component: Authentication) Affected: 6.5.3 |
| CVE-2020-14544 | 4.3 | Jul 15 | Vulnerability in the Oracle Transportation Management product of Oracle Supply Chain (component: Data, Domain & Function Security) Affected: 6.4.3 |
| CVE-2018-2631 | 4.3 | Jan 18 | Vulnerability in the Oracle Transportation Management component of Oracle Supply Chain Products Suite (subcomponent: Security) Affected: 6.2.11; 6.3.1; 6.3.2; 6.3.3; 6.3.4; 6.3.5; +5 more |
| CVE-2016-3490 | 3.0 | Jul 21 | Unspecified vulnerability in the Oracle Transportation Management component in Oracle Supply Chain Products Suite 6.3.0, 6.3.1, 6.3.2, 6.3.3, 6.3.4, 6.3.5, 6.3.6, 6.3.7, 6.4.0,… Affected: 6.3.0; 6.3.1; 6.3.2; 6.3.3; 6.3.4; 6.3.5; +14 more |
| CVE-2022-39409 | 2.7 | Oct 18 | Vulnerability in the Oracle Transportation Management product of Oracle Supply Chain (component: Business Process Automation) Affected: 6.4.3; 6.5.1 |
Showing 30
