Transportation Management (Oracle) - vulnerabilities (CVEs)

31 CVEs, 0 in the last 30 days, 23 known versions, newest CVE from 2026-07-21. Vendor: Oracle.

CVEs of Transportation Management

• CVE-2026-60584 - CVSS 7.6 (high), 2026-07-21: Vulnerability in the Oracle Transportation Management product of Oracle Supply Chain (component: CSV Management). The supported version that is affected is…
• CVE-2026-60583 - CVSS 8.8 (high), 2026-07-21: Vulnerability in the Oracle Transportation Management product of Oracle Supply Chain (component: Install). The supported version that is affected is 6.5.3.…
• CVE-2026-60433 - CVSS 6.5 (medium), 2026-07-21: Vulnerability in the Oracle Transportation Management product of Oracle Supply Chain (component: Integration). The supported version that is affected is…
• CVE-2026-60434 - CVSS 4.3 (medium), 2026-07-21: Vulnerability in the Oracle Transportation Management product of Oracle Supply Chain (component: Authentication). The supported version that is affected is…
• CVE-2022-39409 - CVSS 2.7 (low), 2022-10-18: Vulnerability in the Oracle Transportation Management product of Oracle Supply Chain (component: Business Process Automation). Supported versions that are…
• CVE-2022-39420 - CVSS 5.4 (medium), 2022-10-18: Vulnerability in the Oracle Transportation Management product of Oracle Supply Chain (component: Data, Functional Security). Supported versions that are…
• CVE-2022-39411 - CVSS 4.9 (medium), 2022-10-18: Vulnerability in the Oracle Transportation Management product of Oracle Supply Chain (component: Business Process Automation). Supported versions that are…
• CVE-2022-21591 - CVSS 5.4 (medium), 2022-10-18: Vulnerability in the Oracle Transportation Management product of Oracle Supply Chain (component: UI Infrastructure). Supported versions that are affected are…
• CVE-2022-21480 - CVSS 6.1 (medium), 2022-04-19: Vulnerability in the Oracle Transportation Management product of Oracle Supply Chain (component: User Interface). Supported versions that are affected are…
• CVE-2021-35616 - CVSS 5.4 (medium), 2021-10-20: Vulnerability in the Oracle Transportation Management product of Oracle Supply Chain (component: UI Infrastructure). The supported version that is affected is…
• CVE-2021-2476 - CVSS 5.3 (medium), 2021-10-20: Vulnerability in the Oracle Transportation Management product of Oracle Supply Chain (component: Authentication). The supported version that is affected is…
• CVE-2020-14544 - CVSS 4.3 (medium), 2020-07-15: Vulnerability in the Oracle Transportation Management product of Oracle Supply Chain (component: Data, Domain & Function Security). The supported version that…
• CVE-2020-9484 - CVSS 7 (high), 2020-05-20: When using Apache Tomcat versions 10.0.0-M1 to 10.0.0-M4, 9.0.0.M1 to 9.0.34, 8.5.0 to 8.5.54 and 7.0.0 to 7.0.103 if a) an attacker is able to control the…
• CVE-2020-2744 - CVSS 5.4 (medium), 2020-04-15: Vulnerability in the Oracle Transportation Management product of Oracle Supply Chain (component: Security). Supported versions that are affected are 6.3.7,…
• CVE-2020-1938 - CVSS 9.8 (critical), 2020-02-24: When using the Apache JServ Protocol (AJP), care must be taken when trusting incoming connections to Apache Tomcat. Tomcat treats AJP connections as having…
• CVE-2019-17569 - CVSS 4.8 (medium), 2020-02-24: The refactoring present in Apache Tomcat 9.0.28 to 9.0.30, 8.5.48 to 8.5.50 and 7.0.98 to 7.0.99 introduced a regression. The result of the regression was…
• CVE-2020-1935 - CVSS 4.8 (medium), 2020-02-24: In Apache Tomcat 9.0.0.M1 to 9.0.30, 8.5.0 to 8.5.50 and 7.0.0 to 7.0.99 the HTTP header parsing code used an approach to end-of-line parsing that allowed…
• CVE-2019-17563 - CVSS 7.5 (high), 2019-12-23: When using FORM authentication with Apache Tomcat 9.0.0.M1 to 9.0.29, 8.5.0 to 8.5.49 and 7.0.0 to 7.0.98 there was a narrow window where an attacker could…
• CVE-2019-2709 - CVSS 6.1 (medium), 2019-04-23: Vulnerability in the Oracle Transportation Management component of Oracle Supply Chain Products Suite (subcomponent: Security). Supported versions that are…
• CVE-2019-11358 - CVSS 6.1 (medium), 2019-04-20: jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution. If an…
• CVE-2019-2487 - CVSS 6.5 (medium), 2019-01-16: Vulnerability in the Oracle Transportation Management component of Oracle Supply Chain Products Suite (subcomponent: UI Infrastructure). Supported versions…
• CVE-2018-2823 - CVSS 6.5 (medium), 2018-04-19: Vulnerability in the Oracle Transportation Management component of Oracle Supply Chain Products Suite (subcomponent: Database). The supported version that is…
• CVE-2018-2662 - CVSS 5.4 (medium), 2018-01-18: Vulnerability in the Oracle Transportation Management component of Oracle Supply Chain Products Suite (subcomponent: Security). Supported versions that are…
• CVE-2018-2631 - CVSS 4.3 (medium), 2018-01-18: Vulnerability in the Oracle Transportation Management component of Oracle Supply Chain Products Suite (subcomponent: Security). Supported versions that are…
• CVE-2017-12617 - CVSS 8.1 (high), 2017-10-04: When running Apache Tomcat versions 9.0.0.M1 to 9.0.0, 8.5.0 to 8.5.22, 8.0.0.RC1 to 8.0.46 and 7.0.0 to 7.0.81 with HTTP PUTs enabled (e.g. via setting the…
• CVE-2017-10032 - CVSS 5.4 (medium), 2017-08-08: Vulnerability in the Oracle Transportation Management component of Oracle Supply Chain Products Suite (subcomponent: Access Control List). Supported versions…
• CVE-2017-3530 - CVSS 6.1 (medium), 2017-04-24: Vulnerability in the Oracle Transportation Manager component of Oracle Supply Chain Products Suite (subcomponent: Security). Supported versions that are…
• CVE-2016-8735 - CVSS 9.8 (critical), 2017-04-06: Remote code execution is possible with Apache Tomcat before 6.0.48, 7.x before 7.0.73, 8.x before 8.0.39, 8.5.x before 8.5.7, and 9.x before 9.0.0.M12 if…
• CVE-2016-3490 - CVSS 3 (low), 2016-07-21: Unspecified vulnerability in the Oracle Transportation Management component in Oracle Supply Chain Products Suite 6.3.0, 6.3.1, 6.3.2, 6.3.3, 6.3.4, 6.3.5,…
• CVE-2016-3470 - CVSS 7.1 (high), 2016-07-21: Unspecified vulnerability in the Oracle Transportation Management component in Oracle Supply Chain Products Suite 6.4.1 allows remote authenticated users to…
• CVE-2015-3195 - CVSS 5.3 (medium), 2015-12-06: The ASN1_TFLG_COMBINE implementation in crypto/asn1/tasn_dec.c in OpenSSL before 0.9.8zh, 1.0.0 before 1.0.0t, 1.0.1 before 1.0.1q, and 1.0.2 before 1.0.2e…