Oracle Corp. Autovue for Agile Product Lifecycle Management

Name: Oracle Corp. Autovue for Agile Product Lifecycle Management
Brand: Oracle Corp.

productRU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

critical

by severity

0critical3high1medium1low

updated 2026-10-27

vulnerabilities (5)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2021-28164US	medium5.3OT high	82.4% (100th)	Exploit	no fix	2021-04-01	≤ 21.0.2
CVE-2021-28165US	high7.5	53.9% (99th)	Exploit	no fix	2021-04-01	≤ 21.0.2
CVE-2020-35491US	high8.1	7.75% (95th)	—	no fix	2020-12-17	≤ 21.0.2
CVE-2020-35490US	high8.1	6.29% (94th)	—	no fix	2020-12-17	≤ 21.0.2
CVE-2021-28163US	low2.7	4.18% (91st)	—	no fix	2021-04-01	≤ 21.0.2

The flaw types (CWEs) most of these CVEs share.

CWE-200Exposure of Sensitive Information to an Unauthorized Actor2 CVEs
CWE-502Deserialization of Untrusted Data2 CVEs
CWE-551Incorrect Behavior Order: Authorization Before Parsing and Canonicalization2 CVEs
CWE-400Uncontrolled Resource Consumption1 CVEs
CWE-59Improper Link Resolution Before File Access ('Link Following')1 CVEs
CWE-755Improper Handling of Exceptional Conditions1 CVEs
CWE-770Allocation of Resources Without Limits or Throttling1 CVEs
CWE-863Incorrect Authorization1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.