[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fEh9UFUL9k-IP_8j-iAPIRoInHdZt4N9dZTHfkZPX104":3,"g5a-family:oracle\u002Fagile_product_lifecycle_management":139,"g5a-ex:oracle\u002Fagile_product_lifecycle_management@*":146},{"success":4,"data":5},true,{"product":6,"versions":35,"topVulnerabilitiesByEpss":43,"kevVulnerabilities":103,"seoMetadata":117,"meta":136},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":34},"oracle","agile_product_lifecycle_management",7,56,2,"2025-01-21",[14,18,20,22,25,28,31],{"version":15,"cve_count":11,"kev_count":16,"has_kev":17},"9.3.1.1",0,false,{"version":19,"cve_count":11,"kev_count":16,"has_kev":17},"9.3.1.2",{"version":21,"cve_count":11,"kev_count":16,"has_kev":17},"9.3.2",{"version":23,"cve_count":24,"kev_count":16,"has_kev":17},"9.3.3",9,{"version":26,"cve_count":27,"kev_count":16,"has_kev":17},"9.3.4",33,{"version":29,"cve_count":30,"kev_count":16,"has_kev":17},"9.3.5",45,{"version":32,"cve_count":33,"kev_count":11,"has_kev":4},"9.3.6",21,"Agile Product Lifecycle Management by Oracle is a technology product with 7 tracked versions and 56 known security vulnerabilities including 2 CISA Known Exploited Vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[36,37,38,39,40,41,42],{"version":15,"cve_count":11,"kev_count":16,"has_kev":17},{"version":19,"cve_count":11,"kev_count":16,"has_kev":17},{"version":21,"cve_count":11,"kev_count":16,"has_kev":17},{"version":23,"cve_count":24,"kev_count":16,"has_kev":17},{"version":26,"cve_count":27,"kev_count":16,"has_kev":17},{"version":29,"cve_count":30,"kev_count":16,"has_kev":17},{"version":32,"cve_count":33,"kev_count":11,"has_kev":4},[44,52,59,65,73,78,83,87,92,98],{"cveId":45,"description":46,"publishedDate":47,"cvssScore":48,"cvssVersion":49,"severity":50,"isKev":17,"epssScore":51},"CVE-2019-0227","A Server Side Request Forgery (SSRF) vulnerability affected the Apache Axis 1.4 distribution that was last released in 2006. Security and bug commits commits continue in the projects Axis 1.x Subversion repository, legacy users are encouraged to build from source. The successor to Axis 1.x is Axis2, the latest version is 1.7.9 and is not vulnerable to this issue.","2019-05-01",7.5,"v3.1","High",0.9194,{"cveId":53,"description":54,"publishedDate":55,"cvssScore":56,"cvssVersion":49,"severity":57,"isKev":17,"epssScore":58},"CVE-2018-8032","Apache Axis 1.x up to and including 1.4 is vulnerable to a cross-site scripting (XSS) attack in the default servlet\u002Fservices.","2018-08-02",6.1,"Medium",0.10554,{"cveId":60,"description":61,"publishedDate":62,"cvssScore":63,"cvssVersion":49,"severity":57,"isKev":17,"epssScore":64},"CVE-2020-1935","In Apache Tomcat 9.0.0.M1 to 9.0.30, 8.5.0 to 8.5.50 and 7.0.0 to 7.0.99 the HTTP header parsing code used an approach to end-of-line parsing that allowed some invalid HTTP headers to be parsed as valid. This led to a possibility of HTTP Request Smuggling if Tomcat was located behind a reverse proxy that incorrectly handled the invalid Transfer-Encoding header in a particular manner. Such a reverse proxy is considered unlikely.","2020-02-24",4.8,0.09386,{"cveId":66,"description":67,"publishedDate":68,"cvssScore":69,"cvssVersion":70,"severity":71,"isKev":17,"epssScore":72},"CVE-2016-3556","Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 and 9.3.5 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to EM Integration.","2016-07-21",9.8,"v3.0","Critical",0.04202,{"cveId":74,"description":75,"publishedDate":68,"cvssScore":76,"cvssVersion":70,"severity":50,"isKev":17,"epssScore":77},"CVE-2016-3554","Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 and 9.3.5 allows remote authenticated users to affect confidentiality, integrity, and availability via vectors related to PC \u002F BOM, MCAD, and Design.",8.8,0.04114,{"cveId":79,"description":80,"publishedDate":81,"cvssScore":76,"cvssVersion":49,"severity":50,"isKev":4,"epssScore":82},"CVE-2024-20953","Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Export).   The supported version that is affected is 9.3.6. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Agile PLM.  Successful attacks of this vulnerability can result in takeover of Oracle Agile PLM. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts).  CVSS Vector: (CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H).","2024-02-17",0.03934,{"cveId":84,"description":85,"publishedDate":68,"cvssScore":48,"cvssVersion":70,"severity":50,"isKev":17,"epssScore":86},"CVE-2016-3526","Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 and 9.3.5 allows remote attackers to affect confidentiality via vectors related to SDK, a different vulnerability than CVE-2016-3529 and CVE-2016-3560.",0.03655,{"cveId":88,"description":89,"publishedDate":90,"cvssScore":48,"cvssVersion":49,"severity":50,"isKev":17,"epssScore":91},"CVE-2018-11040","Spring Framework, versions 5.0.x prior to 5.0.7 and 4.3.x prior to 4.3.18 and older unsupported versions, allows web applications to enable cross-domain requests via JSONP (JSON with Padding) through AbstractJsonpResponseBodyAdvice for REST controllers and MappingJackson2JsonView for browser requests. Both are not enabled by default in Spring Framework nor Spring Boot, however, when MappingJackson2JsonView is configured in an application, JSONP support is automatically ready to use through the \"jsonp\" and \"callback\" JSONP parameters, enabling cross-domain requests.","2018-06-25",0.03229,{"cveId":93,"description":94,"publishedDate":95,"cvssScore":96,"cvssVersion":49,"severity":57,"isKev":17,"epssScore":97},"CVE-2018-1257","Spring Framework, versions 5.0.x prior to 5.0.6, versions 4.3.x prior to 4.3.17, and older unsupported versions allows applications to expose STOMP over WebSocket endpoints with a simple, in-memory STOMP broker through the spring-messaging module. A malicious user (or attacker) can craft a message to the broker that can lead to a regular expression, denial of service attack.","2018-05-11",6.5,0.03037,{"cveId":99,"description":100,"publishedDate":68,"cvssScore":101,"cvssVersion":70,"severity":50,"isKev":17,"epssScore":102},"CVE-2016-3538","Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 and 9.3.5 allows remote authenticated users to affect integrity and availability via vectors related to File Folders \u002F Attachment, a different vulnerability than CVE-2016-3539.",7.1,0.0265,[104,109],{"cveId":79,"description":80,"publishedDate":81,"cvssScore":76,"severity":50,"isKev":4,"epssScore":82,"cisaVulnName":105,"cisaDateAdded":106,"cisaShortDescription":107,"cisaRequiredAction":108},"Oracle Agile Product Lifecycle Management (PLM) Deserialization Vulnerability","2025-02-24","Oracle Agile Product Lifecycle Management (PLM) contains a deserialization vulnerability that allows a low-privileged attacker with network access via HTTP to compromise the system.","Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.",{"cveId":110,"description":111,"publishedDate":112,"cvssScore":48,"severity":50,"isKev":4,"epssScore":113,"cisaVulnName":114,"cisaDateAdded":115,"cisaShortDescription":116,"cisaRequiredAction":108},"CVE-2024-21287","Vulnerability in the Oracle Agile PLM Framework product of Oracle Supply Chain (component: Software Development Kit, Process Extension).   The supported version that is affected is 9.3.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Agile PLM Framework.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle Agile PLM Framework accessible data. CVSS 3.1 Base Score 7.5 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N).","2024-11-18",0.01723,"Oracle Agile Product Lifecycle Management (PLM) Incorrect Authorization Vulnerability","2024-11-21","Oracle Agile Product Lifecycle Management (PLM) contains an incorrect authorization vulnerability in the Process Extension component of the Software Development Kit. Successful exploitation of this vulnerability may result in unauthenticated file disclosure.",{"title":118,"metaDescription":119,"keywords":120,"structuredData":121},"Agile Product Lifecycle Management by Oracle - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Agile Product Lifecycle Management by Oracle covering 7 versions with 56 tracked vulnerabilities including 0 critical and 2 high-severity issues and 2 CISA KEV vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Agile Product Lifecycle Management vulnerabilities, Agile Product Lifecycle Management security, Agile Product Lifecycle Management CVE, Oracle Agile Product Lifecycle Management, Agile Product Lifecycle Management threat intelligence, Oracle security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, Agile Product Lifecycle Management KEV, Agile Product Lifecycle Management exploited vulnerabilities",{"@context":122,"@type":123,"name":124,"description":119,"url":125,"manufacturer":126,"applicationCategory":130,"softwareVersion":131,"mainEntity":132},"https:\u002F\u002Fschema.org","SoftwareApplication","Agile Product Lifecycle Management","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Foracle\u002Fagile_product_lifecycle_management",{"@type":127,"name":128,"url":129},"Organization","Oracle","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Foracle","Security Software","7 versions tracked",{"@type":133,"name":134,"description":135,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Agile Product Lifecycle Management Security Vulnerabilities","Security vulnerabilities affecting Agile Product Lifecycle Management by Oracle",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":137,"apiVersion":138},"2026-10-17T18:19:40.006Z","3.0",[140,143],{"product":141,"cves":142},"agile_product_lifecycle_management_for_process",10,{"product":144,"cves":145},"agile_product_lifecycle_management_integration_pack",3,{"rows":147,"total":11,"capped":17,"failed":16},[148,152],{"cveId":79,"name":105,"severity":50,"cvss":76,"added":106,"epss":82,"published":149,"ranges":150,"checked":4,"hits":151,"covers":17},"2024-02-17T02:15:49.52",[32],[],{"cveId":110,"name":114,"severity":50,"cvss":48,"added":115,"epss":113,"published":153,"ranges":154,"checked":4,"hits":155,"covers":17},"2024-11-18T22:15:05.897",[32],[]]