Oracle
Oracle Agile Product Lifecycle Management: vulnerabilidades y CVE
Oracle Agile Product Lifecycle Management tiene 151 vulnerabilidades publicadas, 25 de ellas en los últimos 12 meses. 12 son críticas y 6 figuran en el catálogo de explotación activa de CISA.
CVE151
Últimos 12 meses25
Críticas12
Explotadas activamente6
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
🔴 Explotadas activamente (CISA KEV)
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2024-20953 | Alta (8.8) | 3.9% | ⚠ Explotación activa | 17 feb 2024 | Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Export). The supported version that is affected is 9.3.6. Easily exploitable vulnerability allows low privileged attacker with network… |
| CVE-2024-21287 | Alta (7.5) | 1.7% | ⚠ Explotación activa | 18 nov 2024 | Vulnerability in the Oracle Agile PLM Framework product of Oracle Supply Chain (component: Software Development Kit, Process Extension). The supported version that is affected is 9.3.6. Easily exploitable vulnerability… |
| CVE-2016-8735 | Crítica (9.8) | 90% | ⚠ Explotación activa | 6 abr 2017 | Remote code execution is possible with Apache Tomcat before 6.0.48, 7.x before 7.0.73, 8.x before 8.0.39, 8.5.x before 8.5.7, and 9.x before 9.0.0.M12 if JmxRemoteLifecycleListener is used and an attacker can reach JMX… |
| CVE-2017-12617 | Alta (8.1) | 100% | ⚠ Explotación activa | 4 oct 2017 | When running Apache Tomcat versions 9.0.0.M1 to 9.0.0, 8.5.0 to 8.5.22, 8.0.0.RC1 to 8.0.46 and 7.0.0 to 7.0.81 with HTTP PUTs enabled (e.g. via setting the readonly initialisation parameter of the Default servlet to… |
| CVE-2020-1938 | Crítica (9.8) | 99% | ⚠ Explotación activa | 24 feb 2020 | When using the Apache JServ Protocol (AJP), care must be taken when trusting incoming connections to Apache Tomcat. Tomcat treats AJP connections as having higher trust than, for example, a similar HTTP connection. If… |
| CVE-2019-2725 | Crítica (9.8) | 100% | ⚠ Explotación activa | 26 abr 2019 | Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Web Services). Supported versions that are affected are 10.3.6.0.0 and 12.1.3.0.0. Easily exploitable vulnerability allows… |
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2026-87266 | Alta (8.2) | 0.44% | — | 15 sept 2026 | Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Application Server). The supported version that is affected is 9.3.6. Easily exploitable vulnerability allows unauthenticated attacker… |
| CVE-2026-87258 | Alta (7.6) | 0.27% | — | 15 sept 2026 | Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Folders, Files & Attachments). The supported version that is affected is 9.3.6. Easily exploitable vulnerability allows low privileged… |
| CVE-2026-87257 | Alta (7.7) | 0.35% | — | 15 sept 2026 | Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: SDK). The supported version that is affected is 9.3.6. Easily exploitable vulnerability allows low privileged attacker with network access… |
| CVE-2026-87256 | Alta (7.7) | 0.35% | — | 15 sept 2026 | Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Application Server). The supported version that is affected is 9.3.6. Easily exploitable vulnerability allows low privileged attacker with… |
| CVE-2026-87254 | Alta (7.5) | 0.33% | — | 15 sept 2026 | Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Folders, Files & Attachments). The supported version that is affected is 9.3.6. Difficult to exploit vulnerability allows low privileged… |
| CVE-2026-87253 | Media (6.1) | 0.24% | — | 15 sept 2026 | Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Web Client). The supported version that is affected is 9.3.6. Easily exploitable vulnerability allows unauthenticated attacker with… |
| CVE-2026-87252 | Media (6.8) | 0.30% | — | 15 sept 2026 | Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Application Server). The supported version that is affected is 9.3.6. Difficult to exploit vulnerability allows unauthenticated attacker… |
| CVE-2026-71046 | Alta (8.8) | 0.16% | — | 18 ago 2026 | Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Security). The supported version that is affected is 9.3.6. Easily exploitable vulnerability allows low privileged attacker with logon to… |
| CVE-2026-71045 | Alta (8.8) | 0.42% | — | 18 ago 2026 | Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Security). The supported version that is affected is 9.3.6. Easily exploitable vulnerability allows unauthenticated attacker with network… |
| CVE-2026-71044 | Alta (8.8) | 0.43% | — | 18 ago 2026 | Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Export). The supported version that is affected is 9.3.6. Easily exploitable vulnerability allows low privileged attacker with network… |
| CVE-2026-71043 | Alta (7.5) | 0.41% | — | 18 ago 2026 | Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Security). The supported version that is affected is 9.3.6. Easily exploitable vulnerability allows unauthenticated attacker with network… |
| CVE-2026-71042 | Alta (8.1) | 0.38% | — | 18 ago 2026 | Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: PGC / Excel Plugin). The supported version that is affected is 9.3.6. Easily exploitable vulnerability allows low privileged attacker with… |
| CVE-2026-71041 | Alta (7) | 0.13% | — | 18 ago 2026 | Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Gantt Chart). The supported version that is affected is 9.3.6. Difficult to exploit vulnerability allows low privileged attacker with… |
| CVE-2026-71040 | Crítica (9.8) | 0.51% | — | 18 ago 2026 | Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Security). The supported version that is affected is 9.3.6. Easily exploitable vulnerability allows unauthenticated attacker with network… |
| CVE-2026-71039 | Alta (8.8) | 0.43% | — | 18 ago 2026 | Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Application Server). The supported version that is affected is 9.3.6. Easily exploitable vulnerability allows low privileged attacker with… |
| CVE-2026-61173 | Alta (7.4) | 0.34% | — | 21 jul 2026 | Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Security). The supported version that is affected is 9.3.6. Difficult to exploit vulnerability allows unauthenticated attacker with… |
| CVE-2026-61172 | Alta (7.5) | 0.41% | — | 21 jul 2026 | Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Security). The supported version that is affected is 9.3.6. Easily exploitable vulnerability allows unauthenticated attacker with network… |
| CVE-2026-61171 | Crítica (9.1) | 0.43% | — | 21 jul 2026 | Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Security). The supported version that is affected is 9.3.6. Easily exploitable vulnerability allows unauthenticated attacker with network… |
| CVE-2026-61170 | Alta (8.1) | 0.39% | — | 21 jul 2026 | Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Security). The supported version that is affected is 9.3.6. Difficult to exploit vulnerability allows unauthenticated attacker with… |
| CVE-2026-61169 | Media (6.5) | 0.15% | — | 21 jul 2026 | Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Security). The supported version that is affected is 9.3.6. Easily exploitable vulnerability allows low privileged attacker with logon to… |
| CVE-2026-61168 | Alta (8.8) | 0.43% | — | 21 jul 2026 | Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Security). The supported version that is affected is 9.3.6. Easily exploitable vulnerability allows low privileged attacker with network… |
| CVE-2026-61167 | Crítica (9.8) | 0.51% | — | 21 jul 2026 | Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Security). The supported version that is affected is 9.3.6. Easily exploitable vulnerability allows unauthenticated attacker with network… |
| CVE-2026-61166 | Alta (8.8) | 0.43% | — | 21 jul 2026 | Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: User and User Group). The supported version that is affected is 9.3.6. Easily exploitable vulnerability allows low privileged attacker… |
| CVE-2026-47009 | Media (6.5) | 0.39% | — | 21 jul 2026 | Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Folders, Files & Attachments). The supported version that is affected is 9.3.6. Easily exploitable vulnerability allows unauthenticated… |
| CVE-2026-46859 | Crítica (9.8) | 0.51% | — | 17 jun 2026 | Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Security). The supported version that is affected is 9.3.6. Easily exploitable vulnerability allows unauthenticated attacker with network… |
| CVE-2025-21565 | Alta (7.5) | 0.50% | — | 21 ene 2025 | Vulnerability in the Oracle Agile PLM Framework product of Oracle Supply Chain (component: Install). The supported version that is affected is 9.3.6. Easily exploitable vulnerability allows unauthenticated attacker with… |
| CVE-2025-21564 | Alta (8.1) | 0.50% | — | 21 ene 2025 | Vulnerability in the Oracle Agile PLM Framework product of Oracle Supply Chain (component: Agile Integration Services). The supported version that is affected is 9.3.6. Easily exploitable vulnerability allows low… |
| CVE-2025-21560 | Media (6.5) | 0.43% | — | 21 ene 2025 | Vulnerability in the Oracle Agile PLM Framework product of Oracle Supply Chain (component: SDK-Software Development Kit). The supported version that is affected is 9.3.6. Easily exploitable vulnerability allows low… |
| CVE-2025-21556 | Crítica (9.9) | 0.64% | — | 21 ene 2025 | Vulnerability in the Oracle Agile PLM Framework product of Oracle Supply Chain (component: Agile Integration Services). The supported version that is affected is 9.3.6. Easily exploitable vulnerability allows low… |
| CVE-2024-21287 | Alta (7.5) | 1.7% | ⚠ Explotación activa | 18 nov 2024 | Vulnerability in the Oracle Agile PLM Framework product of Oracle Supply Chain (component: Software Development Kit, Process Extension). The supported version that is affected is 9.3.6. Easily exploitable vulnerability… |
🎯 Cómo se explota (técnicas ATT&CK)
Número de CVE de esta tecnología asignadas a cada técnica de explotación o de impacto principal.