Product by Oracle

    Oracle Agile Engineering Data Management

    45 known vulnerabilities in Oracle Agile Engineering Data Management (Oracle), 2 of them actively exploited (CISA KEV).

    Key figures

    45

    Vulnerabilities

    2

    Actively exploited (KEV)

    0

    Used by ransomware

    4

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Oracle Agile Engineering Data Management (Oracle)
    CriticalCVE-2020-1938

    Apache Tomcat Improper Privilege Management Vulnerability

    In CISA KEValso in 20 other products

    		9.8
    CriticalCVE-2016-8735

    Apache Tomcat Remote Code Execution Vulnerability

    In CISA KEValso in 19 other products

    		9.8
    CriticalCVE-2016-3468

    Oracle Agile Engineering Data Management: security vulnerability

    		9.8
    HighCVE-2019-0227

    Apache Axis 1.4: Server-Side Request Forgery (SSRF)

    also in 34 other products

    		7.5
    HighCVE-2020-13935

    Apache Tomcat: Infinite Loop

    also in 17 other products

    		7.5
    HighCVE-2020-13934

    Apache Tomcat: Denial of Service

    also in 13 other products

    		7.5
    HighCVE-2017-3730

    Bad (EC)DHE parameters cause a client crash

    also in 6 other products

    		7.5
    HighCVE-2020-11987

    Apache Batik: Server-Side Request Forgery (SSRF)

    also in 22 other products

    		8.2
    HighCVE-2020-9484

    Apache Tomcat: Deserialization of Untrusted Data

    also in 25 other products

    		7.0
    HighCVE-2021-42340

    DoS via memory leak with WebSocket connections

    also in 18 other products

    		7.5
    HighCVE-2019-17563

    Apache Tomcat: Session Fixation

    also in 11 other products

    		7.5
    MediumCVE-2021-45105

    Apache Log4j2 does not always protect from infinite recursion in lookup evaluation

    also in 107 other products

    		5.9
    HighCVE-2020-11979

    Apache Ant: Creation of Temporary File in Directory with Insecure Permissions

    also in 30 other products

    		7.5
    MediumCVE-2022-23437

    Infinite loop within Apache XercesJ xml parser

    also in 31 other products

    		6.5
    MediumCVE-2018-8032

    Apache Axis: Cross-Site Scripting (XSS)

    also in 36 other products

    		6.1
    HighCVE-2021-2351

    Oracle WebLogic Server: security vulnerability

    also in 97 other products

    		8.3
    MediumCVE-2021-29425

    Possible limited path traversal vulnerabily in Apache Commons IO

    also in 60 other products

    		4.8
    MediumCVE-2020-1935

    Apache Tomcat: security vulnerability

    also in 20 other products

    		4.8
    MediumCVE-2019-17569

    Apache Tomcat: security vulnerability

    also in 16 other products

    		4.8
    HighCVE-2016-5518

    Oracle Agile Engineering Data Management: security vulnerability

    		8.1
    MediumCVE-2019-10219

    Hibernate Hibernate-validator: Cross-site Scripting

    also in 166 other products

    		6.5
    MediumCVE-2021-36374

    Apache Ant ZIP, and ZIP based, archive denial of service vulerability

    also in 37 other products

    		5.5
    MediumCVE-2020-1945

    Apache Ant: security vulnerability

    also in 44 other products

    		6.3
    HighCVE-2026-71052

    Oracle Agile Engineering Data Management: Improper Access Control

    also in 2 other products

    		8.8
    CriticalCVE-2026-61186

    Oracle Agile Engineering Data Management: Missing Authentication for Critical Function

    also in 2 other products

    		9.4

    All vulnerabilities in search

    News

    All products by Oracle