Oracle Global Lifecycle Management

Name: Oracle Global Lifecycle Management
Brand: Oracle

productNL

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

EPSS ≥ 10%

by severity

1critical0high0medium0low

updated 2026-10-27

vulnerabilities (5)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2026-2332US	critical9.1	1.31% (70th)	Exploit	no fix	2026-04-14	≤ vers:unknown/*
CVE-2026-33557US	—	0.90% (59th)	—	no fix	2026-04-20	≤ vers:unknown/*
CVE-2026-47040US	—OT elevated	0.49% (42nd)	—	no fix	2026-07-21	≤ vers:unknown/*
CVE-2026-61211US	—	0.43% (37th)	—	no fix	2026-07-21	≤ vers:unknown/*
CVE-2026-60402US	—	0.43% (37th)	—	no fix	2026-07-21	≤ vers:unknown/*

The flaw types (CWEs) most of these CVEs share.

CWE-284Improper Access Control2 CVEs
CWE-1285Improper Validation of Specified Index, Position, or Offset in Input1 CVEs
CWE-303Incorrect Implementation of Authentication Algorithm1 CVEs
CWE-306Missing Authentication for Critical Function1 CVEs
CWE-404Improper Resource Shutdown or Release1 CVEs
CWE-444Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.