Oracle

Product Lifecycle Analytics

14 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
8.7

CVE-2026-71050

  • EPSS 0.38%
  • Veröffentlicht 18.08.2026 21:03:15
  • Zuletzt bearbeitet 20.08.2026 18:16:42

Vulnerability in the Oracle Product Lifecycle Analytics product of Oracle Supply Chain (component: Installation Issues). The supported version that is affected is 3.6.1. Easily exploitable vulnerability allows high privileged attacker with network ...

8.8

CVE-2026-71051

  • EPSS 0.15%
  • Veröffentlicht 18.08.2026 21:03:15
  • Zuletzt bearbeitet 20.08.2026 18:16:42

Vulnerability in the Oracle Product Lifecycle Analytics product of Oracle Supply Chain (component: Installation Issues). The supported version that is affected is 3.6.1. Easily exploitable vulnerability allows low privileged attacker with logon to ...

7.6

CVE-2026-71048

  • EPSS 0.32%
  • Veröffentlicht 18.08.2026 21:03:14
  • Zuletzt bearbeitet 20.08.2026 13:08:14

Vulnerability in the Oracle Product Lifecycle Analytics product of Oracle Supply Chain (component: Installation Issues). The supported version that is affected is 3.6.1. Easily exploitable vulnerability allows low privileged attacker with network a...

8.5

CVE-2026-71049

  • EPSS 0.3%
  • Veröffentlicht 18.08.2026 21:03:14
  • Zuletzt bearbeitet 20.08.2026 18:16:42

Vulnerability in the Oracle Product Lifecycle Analytics product of Oracle Supply Chain (component: Installation Issues). The supported version that is affected is 3.6.1. Easily exploitable vulnerability allows low privileged attacker with network a...

9

CVE-2026-61174

  • EPSS 0.17%
  • Veröffentlicht 21.07.2026 22:18:49
  • Zuletzt bearbeitet 03.08.2026 19:34:01

Vulnerability in the Oracle Product Lifecycle Analytics product of Oracle Supply Chain (component: Installation Issues). The supported version that is affected is 3.6.1. Easily exploitable vulnerability allows unauthenticated attacker with logon to...

9.3

CVE-2026-61175

  • EPSS 0.42%
  • Veröffentlicht 21.07.2026 22:18:49
  • Zuletzt bearbeitet 03.08.2026 19:05:25

Vulnerability in the Oracle Product Lifecycle Analytics product of Oracle Supply Chain (component: Installation Issues). The supported version that is affected is 3.6.1. Easily exploitable vulnerability allows unauthenticated attacker with network ...

6.7

CVE-2026-61176

  • EPSS 0.41%
  • Veröffentlicht 21.07.2026 22:18:49
  • Zuletzt bearbeitet 06.08.2026 15:24:53

Vulnerability in the Oracle Product Lifecycle Analytics product of Oracle Supply Chain (component: Installation Issues). The supported version that is affected is 3.6.1. Easily exploitable vulnerability allows high privileged attacker with network ...

9.8

CVE-2022-22963

Warnung Exploit
  • EPSS 99.94%
  • Veröffentlicht 01.04.2022 23:15:13
  • Zuletzt bearbeitet 30.10.2025 19:56:53

In Spring Cloud Function versions 3.1.6, 3.2.2 and older unsupported versions, when using routing functionality it is possible for a user to provide a specially crafted SpEL as a routing-expression that may result in remote code execution and access ...

9.8

CVE-2022-22965

Warnung Exploit
  • EPSS 99.68%
  • Veröffentlicht 01.04.2022 23:15:13
  • Zuletzt bearbeitet 30.10.2025 19:56:43

A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data binding. The specific exploit requires the application to run on Tomcat as a WAR deployment. If the application is deployed as a Sp...

7.1

CVE-2022-23437

  • EPSS 4.44%
  • Veröffentlicht 24.01.2022 15:15:09
  • Zuletzt bearbeitet 21.11.2024 06:48:33

There's a vulnerability within the Apache Xerces Java (XercesJ) XML parser when handling specially crafted XML document payloads. This causes, the XercesJ XML parser to wait in an infinite loop, which may sometimes consume system resources for prolon...