oracle transportation management

Name: oracle transportation management
Brand: oracle

productUS

cpe:2.3:a:oracle:transportation_management:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

2critical4high16medium1low

updated 2026-10-28

vulnerabilities (31)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2017-12617US	high8.1OT critical	100.0% (100th)	KEV	no fix	2017-10-04	7 versions
CVE-2020-1938US	critical9.8OT critical	99.3% (100th)	KEV	no fix	2020-02-24	= 6.3.7
CVE-2016-8735US	critical9.8OT critical	90.3% (100th)	KEV	no fix	2017-04-06	8 versions
CVE-2019-11358US	medium6.1	86.8% (100th)	Exploit	no fix	2019-04-20	= 1.4.3
CVE-2020-9484US	high7.0	55.5% (99th)	Exploit	no fix	2020-05-20	= 6.3.7
CVE-2015-3195US	medium5.3	38.7% (99th)	Exploit	no fix	2015-12-06	2 versions
CVE-2021-35616US	medium5.4	28.0% (98th)	Exploit	no fix	2021-10-20	= 6.4.3
CVE-2019-17563US	high7.5	10.7% (96th)	—	no fix	2019-12-23	= 6.3.7
CVE-2020-1935US	medium4.8	9.39% (95th)	—	no fix	2020-02-24	= 6.3.7
CVE-2019-17569US	medium4.8	8.87% (95th)	—	no fix	2020-02-24	= 6.3.7
CVE-2016-3470US	high7.1	2.11% (82nd)	—	no fix	2016-07-21	= 6.4.1
CVE-2017-3530US	medium6.1	1.68% (77th)	—	no fix	2017-04-24	12 versions
CVE-2016-3490US	low3.0	1.26% (69th)	—	no fix	2016-07-21	10 versions
CVE-2021-2476US	medium5.0	1.20% (68th)	—	no fix	2021-10-20	= 6.4.3
CVE-2017-10032US	medium5.4	1.18% (67th)	—	no fix	2017-08-08	7 versions
CVE-2019-2487US	medium6.5	1.16% (67th)	—	no fix	2019-01-16	4 versions
CVE-2018-2823US	medium6.5	1.03% (64th)	—	no fix	2018-04-19	= 6.4.3
CVE-2019-2709US	medium6.1	0.98% (62nd)	—	no fix	2019-04-23	3 versions
CVE-2020-14544US	medium4.3	0.87% (59th)	—	no fix	2020-07-15	= 6.4.3
CVE-2022-21480US	medium5.8	0.81% (57th)	—	no fix	2022-04-19	2 versions
CVE-2022-39409US	—	0.81% (57th)	—	no fix	2022-10-18	2 versions
CVE-2018-2631US	medium4.3	0.81% (57th)	—	no fix	2018-01-18	11 versions
CVE-2022-39411US	—	0.77% (55th)	—	no fix	2022-10-18	2 versions
CVE-2020-2744US	medium5.4	0.74% (54th)	—	no fix	2020-04-15	3 versions
CVE-2018-2662US	medium5.4	0.66% (51st)	—	no fix	2018-01-18	9 versions
CVE-2022-21591US	—	0.61% (49th)	—	no fix	2022-10-18	2 versions
CVE-2022-39420US	—	0.54% (45th)	—	no fix	2022-10-18	2 versions
CVE-2026-60583US	—OT elevated	0.43% (37th)	—	no fix	2026-07-21	= 6.5.3
CVE-2026-60433US	—	0.41% (35th)	—	no fix	2026-07-21	= 6.5.3
CVE-2026-60584US	—	0.32% (25th)	—	no fix	2026-07-21	= 6.5.3
CVE-2026-60434US	—	0.27% (19th)	—	no fix	2026-07-21	= 6.5.3

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-284Improper Access Control6 CVEs
CWE-266Incorrect Privilege Assignment5 CVEs
CWE-287Improper Authentication4 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor3 CVEs
CWE-269Improper Privilege Management2 CVEs
CWE-444Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')2 CVEs
CWE-1321Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')1 CVEs
CWE-17CWE-171 CVEs

sources (1)

Which sources assert this record, and when.

USNVD / CVE31 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan