oracle autovue for agile product lifecycle management

Name: oracle autovue for agile product lifecycle management
Brand: oracle

productUS

cpe:2.3:a:oracle:autovue_for_agile_product_lifecycle_management:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

by severity

3critical24high3medium2low

updated 2026-10-28

vulnerabilities (32)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2021-45105US	medium5.9	100.0% (100th)	Exploit	no fix	2021-12-18	= 21.0.2
CVE-2021-34429US	medium5.3OT high	99.3% (100th)	Exploit	no fix	2021-07-15	= 21.0.2
CVE-2021-28164US	medium5.3OT high	82.4% (100th)	Exploit	no fix	2021-04-01	= 21.0.2
CVE-2021-28165US	high7.5	53.9% (99th)	Exploit	no fix	2021-04-01	= 21.0.2
CVE-2020-9548US	critical9.8	18.9% (97th)	Exploit	no fix	2020-03-02	= 21.0.2
CVE-2020-9547US	critical9.8	18.4% (97th)	Exploit	no fix	2020-03-02	= 21.0.2
CVE-2020-36179US	high8.1	17.1% (97th)	Exploit	no fix	2021-01-07	= 21.0.2
CVE-2020-36188US	high8.1	8.79% (95th)	Exploit	no fix	2021-01-06	= 21.0.2
CVE-2020-36184US	high8.1	8.36% (95th)	Exploit	no fix	2021-01-06	= 21.0.2
CVE-2020-10673US	high8.8	8.03% (95th)	Exploit	no fix	2020-03-18	= 21.0.2
CVE-2020-24616US	high8.1	7.61% (95th)	Exploit	no fix	2020-08-25	= 21.0.2
CVE-2020-24750US	high8.1	7.33% (94th)	Exploit	no fix	2020-09-17	= 21.0.2
CVE-2020-11113US	high8.8	6.28% (94th)	Exploit	no fix	2020-03-31	= 21.0.2
CVE-2020-36180US	high8.1	4.09% (91st)	Exploit	no fix	2021-01-07	= 21.0.2
CVE-2021-34428US	low3.5	0.96% (61st)	Exploit	no fix	2021-06-22	= 21.0.2
CVE-2020-35491US	high8.1	7.75% (95th)	—	no fix	2020-12-17	= 21.0.2
CVE-2020-35490US	high8.1	6.29% (94th)	—	no fix	2020-12-17	= 21.0.2
CVE-2020-36183US	high8.1	4.97% (92nd)	—	no fix	2021-01-07	= 21.0.2
CVE-2020-9546US	critical9.8	4.58% (92nd)	—	no fix	2020-03-02	= 21.0.2
CVE-2020-14061US	high8.1	4.46% (91st)	—	no fix	2020-06-14	= 21.0.2
CVE-2020-36187US	high8.1	4.24% (91st)	—	no fix	2021-01-06	= 21.0.2
CVE-2020-36186US	high8.1	4.24% (91st)	—	no fix	2021-01-06	= 21.0.2
CVE-2020-36185US	high8.1	4.24% (91st)	—	no fix	2021-01-06	= 21.0.2
CVE-2021-28163US	low2.7	4.18% (91st)	—	no fix	2021-04-01	= 21.0.2
CVE-2020-36182US	high8.1	4.09% (91st)	—	no fix	2021-01-07	= 21.0.2
CVE-2020-36181US	high8.1	4.09% (91st)	—	no fix	2021-01-06	= 21.0.2
CVE-2020-36189US	high8.1	3.99% (90th)	—	no fix	2021-01-06	= 21.0.2
CVE-2020-10968US	high8.8	3.66% (90th)	—	no fix	2020-03-26	= 21.0.2
CVE-2020-11112US	high8.8	3.64% (90th)	—	no fix	2020-03-31	= 21.0.2
CVE-2020-11111US	high8.8	3.61% (89th)	—	no fix	2020-03-31	= 21.0.2
CVE-2020-10969US	high8.8	3.56% (89th)	—	no fix	2020-03-26	= 21.0.2
CVE-2020-10672US	high8.8	3.06% (88th)	—	no fix	2020-03-18	= 21.0.2

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-502Deserialization of Untrusted Data26 CVEs
CWE-96Improper Neutralization of Directives in Statically Saved Code ('Static Code Injection')5 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor3 CVEs
CWE-551Incorrect Behavior Order: Authorization Before Parsing and Canonicalization3 CVEs
CWE-863Incorrect Authorization2 CVEs
CWE-20Improper Input Validation1 CVEs
CWE-400Uncontrolled Resource Consumption1 CVEs
CWE-59Improper Link Resolution Before File Access ('Link Following')1 CVEs

sources (1)

Which sources assert this record, and when.

USNVD / CVE32 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan