Product Lifecycle Analytics (Oracle) - vulnerabilities (CVEs)
22 CVEs, 4 in the last 30 days, 2 known versions, newest CVE from 2026-10-20. Vendor: Oracle.
CVEs of Product Lifecycle Analytics
- CVE-2026-101472 - CVSS 5.5 (medium), 2026-10-20: Vulnerability in the Oracle Product Lifecycle Analytics product of Oracle Supply Chain (component: Installation Issues). The supported version that is…
- CVE-2026-101469 - CVSS 7.5 (high), 2026-10-20: Vulnerability in the Oracle Product Lifecycle Analytics product of Oracle Supply Chain (component: Installation Issues). The supported version that is…
- CVE-2026-101471 - CVSS 6.1 (medium), 2026-10-20: Vulnerability in the Oracle Product Lifecycle Analytics product of Oracle Supply Chain (component: Installation Issues). The supported version that is…
- CVE-2026-101470 - CVSS 6 (medium), 2026-10-20: Vulnerability in the Oracle Product Lifecycle Analytics product of Oracle Supply Chain (component: Installation Issues). The supported version that is…
- CVE-2026-83262 - CVSS 7.5 (high), 2026-09-15: Vulnerability in the Oracle Product Lifecycle Analytics product of Oracle Supply Chain (component: Installation Issues). The supported version that is…
- CVE-2026-83264 - CVSS 8.4 (high), 2026-09-15: Vulnerability in the Oracle Product Lifecycle Analytics product of Oracle Supply Chain (component: Installation Issues). The supported version that is…
- CVE-2026-83263 - CVSS 7.5 (high), 2026-09-15: Vulnerability in the Oracle Product Lifecycle Analytics product of Oracle Supply Chain (component: Installation Issues). The supported version that is…
- CVE-2026-83261 - CVSS 9.8 (critical), 2026-09-15: Vulnerability in the Oracle Product Lifecycle Analytics product of Oracle Supply Chain (component: Core). The supported version that is affected is 3.6.1.…
- CVE-2026-71050 - CVSS 8.7 (high), 2026-08-18: Vulnerability in the Oracle Product Lifecycle Analytics product of Oracle Supply Chain (component: Installation Issues). The supported version that is…
- CVE-2026-71051 - CVSS 8.8 (high), 2026-08-18: Vulnerability in the Oracle Product Lifecycle Analytics product of Oracle Supply Chain (component: Installation Issues). The supported version that is…
- CVE-2026-71049 - CVSS 8.5 (high), 2026-08-18: Vulnerability in the Oracle Product Lifecycle Analytics product of Oracle Supply Chain (component: Installation Issues). The supported version that is…
- CVE-2026-71048 - CVSS 7.6 (high), 2026-08-18: Vulnerability in the Oracle Product Lifecycle Analytics product of Oracle Supply Chain (component: Installation Issues). The supported version that is…
- CVE-2026-61175 - CVSS 9.3 (critical), 2026-07-21: Vulnerability in the Oracle Product Lifecycle Analytics product of Oracle Supply Chain (component: Installation Issues). The supported version that is…
- CVE-2026-61176 - CVSS 6.7 (medium), 2026-07-21: Vulnerability in the Oracle Product Lifecycle Analytics product of Oracle Supply Chain (component: Installation Issues). The supported version that is…
- CVE-2026-61174 - CVSS 9 (critical), 2026-07-21: Vulnerability in the Oracle Product Lifecycle Analytics product of Oracle Supply Chain (component: Installation Issues). The supported version that is…
- CVE-2022-22963 - CVSS 9.8 (critical), 2022-04-01: In Spring Cloud Function versions 3.1.6, 3.2.2 and older unsupported versions, when using routing functionality it is possible for a user to provide a…
- CVE-2022-22965 - CVSS 9.8 (critical), 2022-04-01: A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data binding. The specific exploit requires…
- CVE-2022-23437 - CVSS 6.5 (medium), 2022-01-24: There's a vulnerability within the Apache Xerces Java (XercesJ) XML parser when handling specially crafted XML document payloads. This causes, the XercesJ XML…
- CVE-2021-44832 - CVSS 6.6 (medium), 2021-12-28: Apache Log4j2 versions 2.0-beta7 through 2.17.0 (excluding security fix releases 2.3.2 and 2.12.4) are vulnerable to a remote code execution (RCE) attack when…
- CVE-2021-2351 - CVSS 8.3 (high), 2021-07-21: Vulnerability in the Advanced Networking Option component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 12.2.0.1 and 19c.…
- CVE-2021-36374 - CVSS 5.5 (medium), 2021-07-14: When reading a specially crafted ZIP archive, or a derived formats, an Apache Ant build can be made to allocate large amounts of memory that leads to an out…
- CVE-2020-11987 - CVSS 8.2 (high), 2021-02-24: Apache Batik 1.13 is vulnerable to server-side request forgery, caused by improper input validation by the NodePickerPanel. By using a specially-crafted…