Agile Engineering Data Management vulnerabilities

8 known vulnerabilities in Agile Engineering Data Management from Oracle. 8 are rated high or critical, and 2 have been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.1 High severity

  Oracle Agile Engineering Data Management: Improper Access Control

  CVE-2026-71053Aug 18, 2026Oracle

  Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Web Services Security). The supported version that is affected is 6.2.1. Difficult to exploit vulnerability allows unauthenticated attacker with network ac

• 8.8 High severity

  Oracle Agile Engineering Data Management: Improper Access Control

  CVE-2026-71052Aug 18, 2026Oracle

  Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Web Services Security). The supported version that is affected is 6.2.1. Easily exploitable vulnerability allows low privileged attacker with network acces

• 7.0 High severity

  Oracle Agile Engineering Data Management: Improper Access Control

  CVE-2026-70697Aug 18, 2026Oracle

  Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Engineering Communication Interface). The supported version that is affected is 6.2.1. Difficult to exploit vulnerability allows low privileged attacker wi

• 7.5 High severity

  Oracle Agile Engineering Data Management: Improper Access Control

  CVE-2026-70691Aug 18, 2026Oracle

  Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Engineering Communication Interface). The supported version that is affected is 6.2.1. Difficult to exploit vulnerability allows unauthenticated attacker w

• 9.4 Critical severity

  Oracle Agile Engineering Data Management: Improper Access Control

  CVE-2026-61186Jul 21, 2026Oracle

  Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Install). The supported version that is affected is 6.2.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to

• 7.0 High severity

  Apache Tomcat: Time-of-check Time-of-use (TOCTOU) Race Condition

  CVE-2022-23181Jan 27, 2022Apache

  The fix for bug CVE-2020-9484 introduced a time of check, time of use vulnerability into Apache Tomcat 10.1.0-M1 to 10.1.0-M8, 10.0.0-M5 to 10.0.14, 9.0.35 to 9.0.56 and 8.5.55 to 8.5.73 that allowed a local attacker to perform actions with the privileges of t

• 9.8 Critical severity

  Apache Tomcat Improper Privilege Management Exploited

  CVE-2020-1938Feb 24, 2020ApacheEPSS 99.3%

  When using the Apache JServ Protocol (AJP), care must be taken when trusting incoming connections to Apache Tomcat. Tomcat treats AJP connections as having higher trust than, for example, a similar HTTP connection. If such connections are available to an attac

• 9.8 Critical severity

  Apache Tomcat Remote Code Execution Exploited

  CVE-2016-8735Apr 6, 2017ApacheEPSS 90.3%

  Remote code execution is possible with Apache Tomcat before 6.0.48, 7.x before 7.0.73, 8.x before 8.0.39, 8.5.x before 8.5.7, and 9.x before 9.0.0.M12 if JmxRemoteLifecycleListener is used and an attacker can reach JMX ports. The issue exists because this list