This will be my last post as I am leaving the Wonderful World of Windchill for another career opportunity. Since I got so many good info from this forum, as my final give back here's the latest gotcha that I discovered:
I went to install the 11.0-M030-CPS16 Critical Patch set on the customer's Pro/Intralink 11.0 server. Install failed at the update of the bundled Oracle DB server:
Confirmed that the 11.0 Pro/Intralink build requires the database to be upgraded in advance, meaning that the only way to mitigate the CWE-502 issue for this install is to apply the temp "11.0-M030-CPS15_CPSXB1 jar patch".
Customer will need to upgrade the install to 11.1 or 11.2 from here, in order to be able to use the Oracle 12c.R2 release.