Vulnerabilities
Summary — last 7 days
New vulnerabilities3,385▲ 741 vs. last week
Critical / high1,598▲ 197 vs. last week
New active exploitation (KEV)5▼ 1 vs. last week
Unscored (no CVSS)256▲ 244 vs. last week
160 results, sorted by published date (most recent first)
| CVE | Status | Severity | EPSS | Active exploitation | Affected technologies | Published ▼ | Modified | Description |
|---|---|---|---|---|---|---|---|---|
| Awaiting Analysis | High (7.1) | 0.24% | — | Oracle Agile Engineering Data ManagementAI | 9/15/2026 | 9/17/2026 | Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Engineering Communication Interface). The supported version that is affected is 6.2.1. Easily exploitable vulnerability allows unauthenticated attacker with access to the physical communication segment attached to… | |
| Awaiting Analysis | High (7.3) | 0.14% | — | Oracle Agile Engineering Data ManagementAI | 9/15/2026 | 9/17/2026 | Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Engineering Communication Interface). The supported version that is affected is 6.2.1. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Agile Engineering… | |
| Awaiting Analysis | High (7.3) | 0.23% | — | Oracle Agile Engineering Data ManagementAI | 9/15/2026 | 9/17/2026 | Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Engineering Communication Interface). The supported version that is affected is 6.2.1. Easily exploitable vulnerability allows low privileged attacker with access to the physical communication segment attached to… | |
| Awaiting Analysis | High (8.4) | 0.14% | — | Oracle Agile Engineering Data ManagementAI | 9/15/2026 | 9/17/2026 | Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Engineering Communication Interface). The supported version that is affected is 6.2.1. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Agile Engineering… | |
| Analyzed | High (7.1) | 0.35% | — | Vmware Spring Data Rest | 8/27/2026 | 9/2/2026 | Spring Data REST does not guard identifier (@Id) and version (@Version) properties against mutation via RFC 6902 JSON Patch (application/json-patch+json) requests. Spring Data REST 5.1.0 Spring Data REST 5.0.0 - 5.0.6 Spring Data REST 4.5.0 - 4.5.12 Spring Data REST 4.0.0 - 4.4.15 Spring Data REST 3.7.20 and earlier | |
| Analyzed | Medium (4.3) | 0.31% | — | Vmware Spring Data Rest | 8/27/2026 | 9/4/2026 | Spring Data REST does not preserve the persisted version (@Version) property of an aggregate root when handling an HTTP PUT against an immutable target type. Spring Data REST 5.1.0 Spring Data REST 5.0.0 - 5.0.6 Spring Data REST 4.5.0 - 4.5.12 Spring Data REST 4.0.0 - 4.4.15 Spring Data REST 3.7.20 and earlier | |
| Analyzed | Medium (6.5) | 0.34% | — | Vmware Spring Data JPA | 8/26/2026 | 9/4/2026 | Spring Data JPA's Sort validation can be bypassed when parameters containing crafted payload are accepted from untrusted sources. Spring Data JPA 4.1.0 Spring Data JPA 4.0.0 - 4.0.6 Spring Data JPA 3.5.0 - 3.5.13 Spring Data JPA 3.0.0 - 3.4.15 | |
| Analyzed | High (8.1) | 0.39% | — | Oracle Agile Engineering Data Management | 8/18/2026 | 8/24/2026 | Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Web Services Security). The supported version that is affected is 6.2.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Agile Engineering Data… | |
| Analyzed | High (8.8) | 0.43% | — | Oracle Agile Engineering Data Management | 8/18/2026 | 8/24/2026 | Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Web Services Security). The supported version that is affected is 6.2.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Agile Engineering Data… | |
| Analyzed | Medium (6.4) | 0.15% | — | Oracle Agile Engineering Data Management | 8/18/2026 | 9/4/2026 | Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Install). The supported version that is affected is 6.2.1. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Agile Engineering Data Management executes… | |
| Analyzed | Medium (4.8) | 0.22% | — | Agile Engineering Data Management Product OF Oracle Supply Chain | 8/18/2026 | 9/4/2026 | Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Engineering Communication Interface). The supported version that is affected is 6.2.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Agile… | |
| Analyzed | High (8.2) | 0.29% | — | Agile Engineering Data Management Product OF Oracle Supply Chain | 8/18/2026 | 9/4/2026 | Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Engineering Communication Interface). The supported version that is affected is 6.2.1. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Agile… | |
| Modified | Medium (6.7) | 0.18% | — | Oracle Agile Engineering Data Management | 8/18/2026 | 8/25/2026 | Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Install). The supported version that is affected is 6.2.1. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Agile Engineering Data Management executes… | |
| Modified | High (7) | 0.13% | — | Oracle Agile Engineering Data Management | 8/18/2026 | 8/25/2026 | Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Engineering Communication Interface). The supported version that is affected is 6.2.1. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Agile… | |
| Modified | Medium (6.3) | 0.14% | — | Oracle Agile Engineering Data Management | 8/18/2026 | 8/26/2026 | Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Engineering Communication Interface). The supported version that is affected is 6.2.1. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Agile… | |
| Modified | High (7.5) | 0.33% | — | Oracle Agile Engineering Data Management | 8/18/2026 | 8/25/2026 | Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Engineering Communication Interface). The supported version that is affected is 6.2.1. Difficult to exploit vulnerability allows unauthenticated attacker with access to the physical communication segment attached… | |
| Analyzed | Medium (6.5) | 0.42% | — | Oracle Agile Engineering Data Management | 7/21/2026 | 7/28/2026 | Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Core). The supported version that is affected is 6.2.1. Easily exploitable vulnerability allows low privileged attacker with network access via TCP to compromise Oracle Agile Engineering Data Management. Successful… | |
| Analyzed | Medium (6.5) | 0.42% | — | Oracle Agile Engineering Data Management | 7/21/2026 | 7/28/2026 | Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Core). The supported version that is affected is 6.2.1. Easily exploitable vulnerability allows low privileged attacker with network access via TCP to compromise Oracle Agile Engineering Data Management. Successful… | |
| Analyzed | Medium (5.3) | 0.34% | — | Oracle Agile Engineering Data Management | 7/21/2026 | 7/28/2026 | Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Install). The supported version that is affected is 6.2.1. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Agile Engineering Data Management.… | |
| Analyzed | Medium (4.4) | 0.14% | — | Oracle Agile Engineering Data Management | 7/21/2026 | 7/28/2026 | Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Document Management). The supported version that is affected is 6.2.1. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Agile Engineering Data Management… | |
| Analyzed | Medium (6.4) | 0.26% | — | Oracle Agile Engineering Data Management | 7/21/2026 | 7/29/2026 | Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Install). The supported version that is affected is 6.2.1. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Agile Engineering Data Management.… | |
| Analyzed | Medium (6.5) | 0.15% | — | Oracle Agile Engineering Data Management | 7/21/2026 | 7/29/2026 | Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Install). The supported version that is affected is 6.2.1. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Agile Engineering Data Management executes to… | |
| Analyzed | Low (2.8) | 0.14% | — | Oracle Agile Engineering Data Management | 7/21/2026 | 7/28/2026 | Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Install). The supported version that is affected is 6.2.1. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Agile Engineering Data Management executes to… | |
| Analyzed | Critical (9.4) | 0.41% | — | Oracle Agile Engineering Data Management | 7/21/2026 | 7/29/2026 | Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Install). The supported version that is affected is 6.2.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Agile Engineering Data Management.… | |
| Analyzed | Medium (5.3) | 0.31% | — | Vmware Spring Data Rest | 6/10/2026 | 7/23/2026 | Spring Data REST's Querydsl integration accepts arbitrary persistent property paths as request-parameter filter keys and does not consider Jackson customizations before handing them to Querydsl. Affected versions: Spring Data REST 3.7.0 through 3.7.19; 4.3.0 through 4.3.16; 4.4.0 through 4.4.14; 4.5.0 through 4.5.11;… |