Oracle Corporation Oracle Product Lifecycle Analytics vulnerabilities

22 known vulnerabilities, 2 confirmed exploited in the wild (CISA KEV), 15 published in the last 12 months.

Exploited Oracle Corporation Oracle Product Lifecycle Analytics vulnerabilities

CVE-2022-22963 — VMware Tanzu Spring Cloud Function Remote Code Execution Vulnerability
CVE-2022-22965 — Spring Framework JDK 9+ Remote Code Execution Vulnerability

CVE-2026-101472 — (CVSS 5.5)
CVE-2026-101470 — (CVSS 6.0)
CVE-2026-101469 — (CVSS 7.5)
CVE-2026-101471 — (CVSS 6.1)
CVE-2026-83264 — (CVSS 8.4)
CVE-2026-83263 — (CVSS 7.5)
CVE-2026-83262 — (CVSS 7.5)
CVE-2026-83261 — (CVSS 9.8)
CVE-2026-71051 — (CVSS 8.8)
CVE-2026-71050 — (CVSS 8.7)
CVE-2026-71049 — (CVSS 8.5)
CVE-2026-71048 — (CVSS 7.6)
CVE-2026-61176 — (CVSS 6.7)
CVE-2026-61175 — (CVSS 9.3)
CVE-2026-61174 — (CVSS 9.0)
CVE-2022-22965 — Spring Framework JDK 9+ Remote Code Execution Vulnerability (CVSS 9.8) — exploited
CVE-2022-22963 — VMware Tanzu Spring Cloud Function Remote Code Execution Vulnerability (CVSS 9.8) — exploited
CVE-2022-23437 — Infinite loop within Apache XercesJ xml parser (CVSS 6.5)
CVE-2021-44832 — Apache Log4j2 vulnerable to RCE via JDBC Appender when attacker controls configuration (CVSS 6.6)
CVE-2021-2351 — (CVSS 5.1)
CVE-2021-36374 — Apache Ant ZIP, and ZIP based, archive denial of service vulerability (CVSS 5.5)
CVE-2020-11987 — (CVSS 8.2)