TM
Product
Transportation Management
by Oracle · last CVE Jul 21, 2026
On CISA KEVExploited in the wild
30
CVEs
3
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 6Medium 20Low 2
Watch

Add Transportation Management to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2017-12617
In wildKEV
8.1
100%
Oct 3
When running Apache Tomcat versions 9.0.0.M1 to 9.0.0, 8.5.0 to 8.5.22, 8.0.0.RC1 to 8.0.46 and 7.0.0 to 7.0.81 with HTTP PUTs enabled (e.g
Affected: 6.3.1; 6.3.2; 6.3.3; 6.3.4; 6.3.5; 6.3.6; +1 more
CVE-2026-60583
8.8
0%
Jul 21
Vulnerability in the Oracle Transportation Management product of Oracle Supply Chain (component: Install)
Affected: 6.5.3
CVE-2026-60584
7.6
0%
Jul 21
Vulnerability in the Oracle Transportation Management product of Oracle Supply Chain (component: CSV Management)
Affected: 6.5.3
CVE-2019-17563
7.5
11%
Dec 23
When using FORM authentication with Apache Tomcat 9.0.0.M1 to 9.0.29, 8.5.0 to 8.5.49 and 7.0.0 to 7.0.98 there was a narrow window where an attacker could perform a session…
Affected: 6.3.7
CVE-2016-3470
7.1
2%
Jul 21
Unspecified vulnerability in the Oracle Transportation Management component in Oracle Supply Chain Products Suite 6.4.1 allows remote authenticated users to affect confidentiality…
Affected: 6.4.1
CVE-2020-9484
7.0
56%
May 20
When using Apache Tomcat versions 10.0.0-M1 to 10.0.0-M4, 9.0.0.M1 to 9.0.34, 8.5.0 to 8.5.54 and 7.0.0 to 7.0.103 if a) an attacker is able to control the contents and name of a…
Affected: 6.3.7
Showing 6