[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fMaGyszhEchQJDeMRTLR2h5S5lfmZjDaiycaIlH49TWo":3,"g5a-ex:oracle\u002Fautovue_for_agile_product_lifecycle_management@*":100,"g5a-family:oracle\u002Fautovue_for_agile_product_lifecycle_management":102},{"success":4,"data":5},true,{"product":6,"versions":18,"topVulnerabilitiesByEpss":20,"kevVulnerabilities":77,"seoMetadata":78,"meta":97},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":17},"oracle","autovue_for_agile_product_lifecycle_management",1,32,0,"2021-12-18",[14],{"version":15,"cve_count":10,"kev_count":11,"has_kev":16},"21.0.2",false,"Autovue For Agile Product Lifecycle Management by Oracle is a technology product with 1 tracked version and 32 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[19],{"version":15,"cve_count":10,"kev_count":11,"has_kev":16},[21,28,34,39,45,52,56,62,67,71],{"cveId":22,"description":23,"publishedDate":12,"cvssScore":24,"cvssVersion":25,"severity":26,"isKev":16,"epssScore":27},"CVE-2021-45105","Apache Log4j2 versions 2.0-alpha1 through 2.16.0 (excluding 2.12.3 and 2.3.1) did not protect from uncontrolled recursion from self-referential lookups. This allows an attacker with control over Thread Context Map data to cause a denial of service when a crafted string is interpreted. This issue was fixed in Log4j 2.17.0, 2.12.3, and 2.3.1.",5.9,"v3.1","Medium",0.99999,{"cveId":29,"description":30,"publishedDate":31,"cvssScore":32,"cvssVersion":25,"severity":26,"isKev":16,"epssScore":33},"CVE-2021-34429","For Eclipse Jetty versions 9.4.37-9.4.42, 10.0.1-10.0.5 & 11.0.1-11.0.5, URIs can be crafted using some encoded characters to access the content of the WEB-INF directory and\u002For bypass some security constraints. This is a variation of the vulnerability reported in CVE-2021-28164\u002FGHSA-v7ff-8wcx-gmc5.","2021-07-15",5.3,0.99298,{"cveId":35,"description":36,"publishedDate":37,"cvssScore":32,"cvssVersion":25,"severity":26,"isKev":16,"epssScore":38},"CVE-2021-28164","In Eclipse Jetty 9.4.37.v20210219 to 9.4.38.v20210224, the default compliance mode allows requests with URIs that contain %2e or %2e%2e segments to access protected resources within the WEB-INF directory. For example a request to \u002Fcontext\u002F%2e\u002FWEB-INF\u002Fweb.xml can retrieve the web.xml file. This can reveal sensitive information regarding the implementation of a web application.","2021-04-01",0.82371,{"cveId":40,"description":41,"publishedDate":37,"cvssScore":42,"cvssVersion":25,"severity":43,"isKev":16,"epssScore":44},"CVE-2021-28165","In Eclipse Jetty 7.2.2 to 9.4.38, 10.0.0.alpha0 to 10.0.1, and 11.0.0.alpha0 to 11.0.1, CPU usage can reach 100% upon receiving a large invalid TLS frame.",7.5,"High",0.53861,{"cveId":46,"description":47,"publishedDate":48,"cvssScore":49,"cvssVersion":25,"severity":50,"isKev":16,"epssScore":51},"CVE-2020-9548","FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to br.com.anteros.dbcp.AnterosDBCPConfig (aka anteros-core).","2020-03-02",9.8,"Critical",0.18921,{"cveId":53,"description":54,"publishedDate":48,"cvssScore":49,"cvssVersion":25,"severity":50,"isKev":16,"epssScore":55},"CVE-2020-9547","FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to com.ibatis.sqlmap.engine.transaction.jta.JtaTransactionConfig (aka ibatis-sqlmap).",0.18383,{"cveId":57,"description":58,"publishedDate":59,"cvssScore":60,"cvssVersion":25,"severity":43,"isKev":16,"epssScore":61},"CVE-2020-36179","FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to oadd.org.apache.commons.dbcp.cpdsadapter.DriverAdapterCPDS.","2021-01-07",8.1,0.17065,{"cveId":63,"description":64,"publishedDate":65,"cvssScore":60,"cvssVersion":25,"severity":43,"isKev":16,"epssScore":66},"CVE-2020-36188","FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to com.newrelic.agent.deps.ch.qos.logback.core.db.JNDIConnectionSource.","2021-01-06",0.08787,{"cveId":68,"description":69,"publishedDate":65,"cvssScore":60,"cvssVersion":25,"severity":43,"isKev":16,"epssScore":70},"CVE-2020-36184","FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp2.datasources.PerUserPoolDataSource.",0.08356,{"cveId":72,"description":73,"publishedDate":74,"cvssScore":75,"cvssVersion":25,"severity":43,"isKev":16,"epssScore":76},"CVE-2020-10673","FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to com.caucho.config.types.ResourceRef (aka caucho-quercus).","2020-03-18",8.8,0.08028,[],{"title":79,"metaDescription":80,"keywords":81,"structuredData":82},"Autovue For Agile Product Lifecycle Management by Oracle - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Autovue For Agile Product Lifecycle Management by Oracle covering 1 version with 32 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Autovue For Agile Product Lifecycle Management vulnerabilities, Autovue For Agile Product Lifecycle Management security, Autovue For Agile Product Lifecycle Management CVE, Oracle Autovue For Agile Product Lifecycle Management, Autovue For Agile Product Lifecycle Management threat intelligence, Oracle security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":83,"@type":84,"name":85,"description":80,"url":86,"manufacturer":87,"applicationCategory":91,"softwareVersion":92,"mainEntity":93},"https:\u002F\u002Fschema.org","SoftwareApplication","Autovue For Agile Product Lifecycle Management","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Foracle\u002Fautovue_for_agile_product_lifecycle_management",{"@type":88,"name":89,"url":90},"Organization","Oracle","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Foracle","Security Software","1 versions tracked",{"@type":94,"name":95,"description":96,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Autovue For Agile Product Lifecycle Management Security Vulnerabilities","Security vulnerabilities affecting Autovue For Agile Product Lifecycle Management by Oracle",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":98,"apiVersion":99},"2026-10-17T12:37:28.783Z","3.0",{"rows":101,"total":11,"capped":16,"failed":11},[],[]]