TM
Product
Transportation Management
by Oracle · last CVE Jul 21, 2026
On CISA KEVExploited in the wild
30
CVEs
3
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 6Medium 20Low 2
Watch

Add Transportation Management to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2020-1938
In wildKEV
9.8
99%
Feb 24
Apache Tomcat Improper Privilege Management Vulnerability
Affected: 6.3.7
CVE-2016-8735
In wildKEV
9.8
90%
Apr 6
Remote code execution is possible with Apache Tomcat before 6.0.48, 7.x before 7.0.73, 8.x before 8.0.39, 8.5.x before 8.5.7, and 9.x before 9.0.0.M12 if…
Affected: 6.3.0; 6.3.1; 6.3.2; 6.3.3; 6.3.4; 6.3.5; +2 more
CVE-2017-12617
In wildKEV
8.1
100%
Oct 3
When running Apache Tomcat versions 9.0.0.M1 to 9.0.0, 8.5.0 to 8.5.22, 8.0.0.RC1 to 8.0.46 and 7.0.0 to 7.0.81 with HTTP PUTs enabled (e.g
Affected: 6.3.1; 6.3.2; 6.3.3; 6.3.4; 6.3.5; 6.3.6; +1 more
CVE-2026-60583
8.8
0%
Jul 21
Vulnerability in the Oracle Transportation Management product of Oracle Supply Chain (component: Install)
Affected: 6.5.3
CVE-2026-60584
7.6
0%
Jul 21
Vulnerability in the Oracle Transportation Management product of Oracle Supply Chain (component: CSV Management)
Affected: 6.5.3
CVE-2019-17563
7.5
11%
Dec 23
When using FORM authentication with Apache Tomcat 9.0.0.M1 to 9.0.29, 8.5.0 to 8.5.49 and 7.0.0 to 7.0.98 there was a narrow window where an attacker could perform a session…
Affected: 6.3.7
CVE-2016-3470
7.1
2%
Jul 21
Unspecified vulnerability in the Oracle Transportation Management component in Oracle Supply Chain Products Suite 6.4.1 allows remote authenticated users to affect confidentiality…
Affected: 6.4.1
CVE-2020-9484
7.0
56%
May 20
When using Apache Tomcat versions 10.0.0-M1 to 10.0.0-M4, 9.0.0.M1 to 9.0.34, 8.5.0 to 8.5.54 and 7.0.0 to 7.0.103 if a) an attacker is able to control the contents and name of a…
Affected: 6.3.7
CVE-2026-60433
6.5
0%
Jul 21
Vulnerability in the Oracle Transportation Management product of Oracle Supply Chain (component: Integration)
Affected: 6.5.3
CVE-2019-2487
6.5
1%
Jan 16
Vulnerability in the Oracle Transportation Management component of Oracle Supply Chain Products Suite (subcomponent: UI Infrastructure)
Affected: 6.3.7; 6.4.1; 6.4.2; 6.4.3
CVE-2018-2823
6.5
1%
Apr 19
Vulnerability in the Oracle Transportation Management component of Oracle Supply Chain Products Suite (subcomponent: Database)
Affected: 6.4.3
CVE-2022-21480
6.1
1%
Apr 19
Vulnerability in the Oracle Transportation Management product of Oracle Supply Chain (component: User Interface)
Affected: 6.4.3; 6.5.1
CVE-2019-2709
6.1
1%
Apr 23
Vulnerability in the Oracle Transportation Management component of Oracle Supply Chain Products Suite (subcomponent: Security)
Affected: 6.3.7; 6.4.2; 6.4.3
CVE-2017-3530
6.1
2%
Apr 24
Vulnerability in the Oracle Transportation Manager component of Oracle Supply Chain Products Suite (subcomponent: Security)
Affected: 6.2; 6.3.0; 6.3.1; 6.3.2; 6.3.3; 6.3.4; +6 more
CVE-2022-39420
5.4
1%
Oct 18
Vulnerability in the Oracle Transportation Management product of Oracle Supply Chain (component: Data, Functional Security)
Affected: 6.4.3; 6.5.1
CVE-2022-21591
5.4
1%
Oct 18
Vulnerability in the Oracle Transportation Management product of Oracle Supply Chain (component: UI Infrastructure)
Affected: 6.4.3; 6.5.1
CVE-2021-35616
5.4
28%
Oct 20
Vulnerability in the Oracle Transportation Management product of Oracle Supply Chain (component: UI Infrastructure)
Affected: 6.4.3
CVE-2020-2744
5.4
1%
Apr 15
Vulnerability in the Oracle Transportation Management product of Oracle Supply Chain (component: Security)
Affected: 6.3.7; 6.4.2; 6.4.3
CVE-2018-2662
5.4
1%
Jan 18
Vulnerability in the Oracle Transportation Management component of Oracle Supply Chain Products Suite (subcomponent: Security)
Affected: 6.2.11; 6.3.1; 6.3.2; 6.3.3; 6.3.4; 6.3.5; +3 more
CVE-2017-10032
5.4
1%
Aug 8
Vulnerability in the Oracle Transportation Management component of Oracle Supply Chain Products Suite (subcomponent: Access Control List)
Affected: 6.3.4.1; 6.3.5.1; 6.3.6.1; 6.3.7.1; 6.4.0; 6.4.1; +1 more
CVE-2021-2476
5.3
1%
Oct 20
Vulnerability in the Oracle Transportation Management product of Oracle Supply Chain (component: Authentication)
Affected: 6.4.3
CVE-2015-3195
5.3
39%
Dec 6
The ASN1_TFLG_COMBINE implementation in crypto/asn1/tasn_dec.c in OpenSSL before 0.9.8zh, 1.0.0 before 1.0.0t, 1.0.1 before 1.0.1q, and 1.0.2 before 1.0.2e mishandles errors…
Affected: 6.1; 6.2
CVE-2022-39411
4.9
1%
Oct 18
Vulnerability in the Oracle Transportation Management product of Oracle Supply Chain (component: Business Process Automation)
Affected: 6.4.3; 6.5.1
CVE-2019-17569
4.8
9%
Feb 24
The refactoring present in Apache Tomcat 9.0.28 to 9.0.30, 8.5.48 to 8.5.50 and 7.0.98 to 7.0.99 introduced a regression
Affected: 6.3.7
CVE-2020-1935
4.8
9%
Feb 24
In Apache Tomcat 9.0.0.M1 to 9.0.30, 8.5.0 to 8.5.50 and 7.0.0 to 7.0.99 the HTTP header parsing code used an approach to end-of-line parsing that allowed some invalid HTTP…
Affected: 6.3.7
CVE-2026-60434
4.3
0%
Jul 21
Vulnerability in the Oracle Transportation Management product of Oracle Supply Chain (component: Authentication)
Affected: 6.5.3
CVE-2020-14544
4.3
1%
Jul 15
Vulnerability in the Oracle Transportation Management product of Oracle Supply Chain (component: Data, Domain & Function Security)
Affected: 6.4.3
CVE-2018-2631
4.3
1%
Jan 18
Vulnerability in the Oracle Transportation Management component of Oracle Supply Chain Products Suite (subcomponent: Security)
Affected: 6.2.11; 6.3.1; 6.3.2; 6.3.3; 6.3.4; 6.3.5; +5 more
CVE-2016-3490
3.0
1%
Jul 21
Unspecified vulnerability in the Oracle Transportation Management component in Oracle Supply Chain Products Suite 6.3.0, 6.3.1, 6.3.2, 6.3.3, 6.3.4, 6.3.5, 6.3.6, 6.3.7, 6.4.0,…
Affected: 6.3.0; 6.3.1; 6.3.2; 6.3.3; 6.3.4; 6.3.5; +14 more
CVE-2022-39409
2.7
1%
Oct 18
Vulnerability in the Oracle Transportation Management product of Oracle Supply Chain (component: Business Process Automation)
Affected: 6.4.3; 6.5.1
Showing 30