[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fDHGDe8Ye2hib5hnwVYQVMzwc7pr7ghnana6tBigo378":3,"g5a-ex:oracle\u002Fagile_product_lifecycle_management_for_process@*":134,"g5a-family:oracle\u002Fagile_product_lifecycle_management_for_process":136},{"success":4,"data":5},true,{"product":6,"versions":39,"topVulnerabilitiesByEpss":50,"kevVulnerabilities":111,"seoMetadata":112,"meta":131},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":9,"kevCount":10,"lastCveUpdate":11,"versions":12,"description":38},"oracle","agile_product_lifecycle_management_for_process",10,0,"2024-04-16",[13,17,19,22,25,28,30,32,34,36],{"version":14,"cve_count":15,"kev_count":10,"has_kev":16},"6.1",1,false,{"version":18,"cve_count":15,"kev_count":10,"has_kev":16},"6.1.0.4",{"version":20,"cve_count":21,"kev_count":10,"has_kev":16},"6.1.1.6",2,{"version":23,"cve_count":24,"kev_count":10,"has_kev":16},"6.2.0.0",7,{"version":26,"cve_count":27,"kev_count":10,"has_kev":16},"6.2.1.0",3,{"version":29,"cve_count":27,"kev_count":10,"has_kev":16},"6.2.2.0",{"version":31,"cve_count":27,"kev_count":10,"has_kev":16},"6.2.3.0",{"version":33,"cve_count":15,"kev_count":10,"has_kev":16},"6.2.3.1",{"version":35,"cve_count":10,"kev_count":10,"has_kev":16},"6.2.4",{"version":37,"cve_count":21,"kev_count":10,"has_kev":16},"6.2.4.2","Agile Product Lifecycle Management For Process by Oracle is a technology product with 10 tracked versions and 10 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[40,41,42,43,44,45,46,47,48,49],{"version":14,"cve_count":15,"kev_count":10,"has_kev":16},{"version":18,"cve_count":15,"kev_count":10,"has_kev":16},{"version":20,"cve_count":21,"kev_count":10,"has_kev":16},{"version":23,"cve_count":24,"kev_count":10,"has_kev":16},{"version":26,"cve_count":27,"kev_count":10,"has_kev":16},{"version":29,"cve_count":27,"kev_count":10,"has_kev":16},{"version":31,"cve_count":27,"kev_count":10,"has_kev":16},{"version":33,"cve_count":15,"kev_count":10,"has_kev":16},{"version":35,"cve_count":10,"kev_count":10,"has_kev":16},{"version":37,"cve_count":21,"kev_count":10,"has_kev":16},[51,59,64,70,77,84,89,94,99,105],{"cveId":52,"description":53,"publishedDate":54,"cvssScore":55,"cvssVersion":56,"severity":57,"isKev":16,"epssScore":58},"CVE-2020-11022","In jQuery versions greater than or equal to 1.2 and before 3.5.0, passing HTML from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0.","2020-04-29",6.1,"v3.1","Medium",0.99215,{"cveId":60,"description":61,"publishedDate":62,"cvssScore":55,"cvssVersion":56,"severity":57,"isKev":16,"epssScore":63},"CVE-2019-11358","jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution. If an unsanitized source object contained an enumerable __proto__ property, it could extend the native Object.prototype.","2019-04-20",0.8682,{"cveId":65,"description":66,"publishedDate":67,"cvssScore":55,"cvssVersion":68,"severity":57,"isKev":16,"epssScore":69},"CVE-2015-9251","jQuery before 3.0.0 is vulnerable to Cross-site Scripting (XSS) attacks when a cross-domain Ajax request is performed without the dataType option, causing text\u002Fjavascript responses to be executed.","2018-01-18","v3.0",0.29726,{"cveId":71,"description":72,"publishedDate":73,"cvssScore":74,"cvssVersion":56,"severity":75,"isKev":16,"epssScore":76},"CVE-2021-2351","Vulnerability in the Advanced Networking Option component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 12.2.0.1 and 19c. Difficult to exploit vulnerability allows unauthenticated attacker with network access via Oracle Net to compromise Advanced Networking Option. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Advanced Networking Option, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Advanced Networking Option. Note: The July 2021 Critical Patch Update introduces a number of Native Network Encryption changes to deal with vulnerability CVE-2021-2351 and prevent the use of weaker ciphers. Customers should review: \"Changes in Native Network Encryption with the July 2021 Critical Patch Update\" (Doc ID 2791571.1). CVSS 3.1 Base Score 8.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:C\u002FC:H\u002FI:H\u002FA:H).","2021-07-21",8.3,"High",0.02432,{"cveId":78,"description":79,"publishedDate":80,"cvssScore":81,"cvssVersion":68,"severity":82,"isKev":16,"epssScore":83},"CVE-2018-3069","Vulnerability in the Oracle Agile Product Lifecycle Management for Process component of Oracle Supply Chain Products Suite (subcomponent: Installation). The supported version that is affected is 6.2.0.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Agile Product Lifecycle Management for Process. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Agile Product Lifecycle Management for Process accessible data. CVSS 3.0 Base Score 2.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:H\u002FUI:N\u002FS:U\u002FC:L\u002FI:N\u002FA:N).","2018-07-18",2.7,"Low",0.01023,{"cveId":85,"description":86,"publishedDate":87,"cvssScore":55,"cvssVersion":68,"severity":57,"isKev":16,"epssScore":88},"CVE-2018-2572","Vulnerability in the Oracle Agile Product Lifecycle Management for Process component of Oracle Supply Chain Products Suite (subcomponent: Installation). Supported versions that are affected are 6.1.1.6, 6.2.0.0 and 6.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Agile Product Lifecycle Management for Process. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Agile Product Lifecycle Management for Process, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Agile Product Lifecycle Management for Process accessible data as well as unauthorized read access to a subset of Oracle Agile Product Lifecycle Management for Process accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:C\u002FC:L\u002FI:L\u002FA:N).","2018-04-19",0.00971,{"cveId":90,"description":91,"publishedDate":11,"cvssScore":92,"cvssVersion":56,"severity":75,"isKev":16,"epssScore":93},"CVE-2024-21092","Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Product Quality Management).   The supported version that is affected is 6.2.4.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Agile Product Lifecycle Management for Process.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle Agile Product Lifecycle Management for Process accessible data as well as  unauthorized access to critical data or complete access to all Oracle Agile Product Lifecycle Management for Process accessible data. CVSS 3.1 Base Score 8.1 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:N).",8.1,0.00596,{"cveId":95,"description":96,"publishedDate":11,"cvssScore":97,"cvssVersion":56,"severity":57,"isKev":16,"epssScore":98},"CVE-2024-21091","Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Data Import).   The supported version that is affected is 6.2.4.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Agile Product Lifecycle Management for Process.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle Agile Product Lifecycle Management for Process accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N).",6.5,0.00446,{"cveId":100,"description":101,"publishedDate":102,"cvssScore":103,"cvssVersion":68,"severity":57,"isKev":16,"epssScore":104},"CVE-2018-3134","Vulnerability in the Oracle Agile Product Lifecycle Management for Process component of Oracle Supply Chain Products Suite (subcomponent: User Group Management). The supported version that is affected is 6.2.0.0. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Agile Product Lifecycle Management for Process executes to compromise Oracle Agile Product Lifecycle Management for Process. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Agile Product Lifecycle Management for Process accessible data as well as unauthorized read access to a subset of Oracle Agile Product Lifecycle Management for Process accessible data. CVSS 3.0 Base Score 5.0 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:R\u002FS:U\u002FC:L\u002FI:H\u002FA:N).","2018-10-17",5,0.00403,{"cveId":106,"description":107,"publishedDate":108,"cvssScore":109,"cvssVersion":56,"severity":57,"isKev":16,"epssScore":110},"CVE-2016-5504","Unspecified vulnerability in the Oracle Agile Product Lifecycle Management for Process component in Oracle Supply Chain Products Suite 6.1.0.4, 6.1.1.6, and 6.2.0.0 allows local users to affect confidentiality via vectors related to Supplier Portal.","2016-10-25",4.1,0.00314,[],{"title":113,"metaDescription":114,"keywords":115,"structuredData":116},"Agile Product Lifecycle Management For Process by Oracle - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Agile Product Lifecycle Management For Process by Oracle covering 10 versions with 10 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Agile Product Lifecycle Management For Process vulnerabilities, Agile Product Lifecycle Management For Process security, Agile Product Lifecycle Management For Process CVE, Oracle Agile Product Lifecycle Management For Process, Agile Product Lifecycle Management For Process threat intelligence, Oracle security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":117,"@type":118,"name":119,"description":114,"url":120,"manufacturer":121,"applicationCategory":125,"softwareVersion":126,"mainEntity":127},"https:\u002F\u002Fschema.org","SoftwareApplication","Agile Product Lifecycle Management For Process","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Foracle\u002Fagile_product_lifecycle_management_for_process",{"@type":122,"name":123,"url":124},"Organization","Oracle","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Foracle","Security Software","10 versions tracked",{"@type":128,"name":129,"description":130,"vulnerabilityCount":9,"dateModified":11},"SecurityVulnerability","Agile Product Lifecycle Management For Process Security Vulnerabilities","Security vulnerabilities affecting Agile Product Lifecycle Management For Process by Oracle",{"totalVersions":9,"totalVulnerabilities":9,"kevVulnerabilities":10,"lastUpdated":11,"generatedAt":132,"apiVersion":133},"2026-10-17T18:25:28.274Z","3.0",{"rows":135,"total":10,"capped":16,"failed":10},[],[]]