Oracle Agile Product Lifecycle Management vulnerabilities
151 published vulnerabilities in Oracle Agile Product Lifecycle Management, 6 of them exploited in the wild. The most were published in 2020 (41), and 25 so far in 2026.
Oracle Agile Product Lifecycle Management vulnerabilities by year
2016
2017
2018
2019
2020
2021
2022
2023
2024
2025
2026
Most exploited Oracle Agile Product Lifecycle Management vulnerabilities
- CVE-2020-1938 Apache Tomcat Improper Privilege Management
- CVE-2016-8735 Apache Tomcat Remote Code Execution
- CVE-2024-20953 Oracle Agile Product Lifecycle Management (PLM) Deserialization
- CVE-2017-12617 Apache Tomcat Remote Code Execution
- CVE-2024-21287 Oracle Agile Product Lifecycle Management (PLM) Incorrect Authorization
- CVE-2019-2725 Oracle WebLogic Server, Injection
- CVE-2025-21556 Missing authorization in Oracle Agile PLM Framework
- CVE-2026-71040 Auth bypass in Oracle Agile PLM
- CVE-2026-61167 Auth bypass in Oracle Agile PLM
- CVE-2026-46859 Auth bypass in Oracle Agile PLM
- CVE-2020-10683 dom4j allows External Entities by default which might enable XXE attacks
- CVE-2020-9546 jackson-databind mishandles the interaction between serialization gadgets and typing
Find these in your own software.
Upload an SBOM and sbomify checks it against every vulnerability here, every day.