Product Lifecycle Analytics vulnerabilities

8 known vulnerabilities in Product Lifecycle Analytics from Oracle. 8 are rated high or critical, and 2 have been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  Oracle Product Lifecycle Analytics: Improper Access Control

  CVE-2026-71051Aug 18, 2026Oracle

  Vulnerability in the Oracle Product Lifecycle Analytics product of Oracle Supply Chain (component: Installation Issues). The supported version that is affected is 3.6.1. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastr

• 8.7 High severity

  Oracle Product Lifecycle Analytics: Improper Access Control

  CVE-2026-71050Aug 18, 2026Oracle

  Vulnerability in the Oracle Product Lifecycle Analytics product of Oracle Supply Chain (component: Installation Issues). The supported version that is affected is 3.6.1. Easily exploitable vulnerability allows high privileged attacker with network access via O

• 8.5 High severity

  Oracle Product Lifecycle Analytics: Improper Access Control

  CVE-2026-71049Aug 18, 2026Oracle

  Vulnerability in the Oracle Product Lifecycle Analytics product of Oracle Supply Chain (component: Installation Issues). The supported version that is affected is 3.6.1. Easily exploitable vulnerability allows low privileged attacker with network access via Or

• 7.6 High severity

  Oracle Product Lifecycle Analytics: Improper Access Control

  CVE-2026-71048Aug 18, 2026Oracle

  Vulnerability in the Oracle Product Lifecycle Analytics product of Oracle Supply Chain (component: Installation Issues). The supported version that is affected is 3.6.1. Easily exploitable vulnerability allows low privileged attacker with network access via HT

• 9.3 Critical severity

  Oracle Product Lifecycle Analytics: Exposure of Sensitive Information to an Unauthorized Actor

  CVE-2026-61175Jul 21, 2026Oracle

  Vulnerability in the Oracle Product Lifecycle Analytics product of Oracle Supply Chain (component: Installation Issues). The supported version that is affected is 3.6.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via H

• 9.0 Critical severity

  Oracle Product Lifecycle Analytics: Improper Access Control

  CVE-2026-61174Jul 21, 2026Oracle

  Vulnerability in the Oracle Product Lifecycle Analytics product of Oracle Supply Chain (component: Installation Issues). The supported version that is affected is 3.6.1. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrast

• 9.8 Critical severity

  Spring Framework JDK 9+ Remote Code Execution Exploited

  CVE-2022-22965Apr 1, 2022Spring FrameworkEPSS 99.6%

  A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data binding. The specific exploit requires the application to run on Tomcat as a WAR deployment. If the application is deployed as a Spring Boot

• 9.8 Critical severity

  VMware Tanzu Spring Cloud Function Remote Code Execution Exploited

  CVE-2022-22963Apr 1, 2022Spring Cloud FunctionEPSS 99.9%

  In Spring Cloud Function versions 3.1.6, 3.2.2 and older unsupported versions, when using routing functionality it is possible for a user to provide a specially crafted SpEL as a routing-expression that may result in remote code execution and access to local r