CVE-2026-61187

The CVE-2026-61187 entry concerns Oracle Agile Engineering Data Management (Oracle Supply Chain) with the Install component affected in version 6.2.1. The vulnerability is described as exploitable locally via the Install component, requiring a user who is logged into the infrastructure and perfor...

CVE-2026-61182

...

CVE-2026-61184

...

CVE-2026-61184

The CVE-2026-61184entry concerns Oracle Agile Product Lifecycle Management for Process (Oracle SCM), specifically the Product Quality Management component in version 6.2.4. It states an unauthenticated, network-accessible vulnerability over HTTP that can lead to unauthorized creation, deletion, o...

CVE-2026-61180

...

CVE-2026-61181

...

CVE-2026-61176

The CVE-2026-61176 entry concerns Oracle Product Lifecycle Analytics (Oracle Supply Chain), specifically the Installation Issues component, affected in version 3.6.1. The vulnerability description states that a highly privileged attacker with network access over HTTP can compromise Oracle Product...

CVE-2026-61176

...

CVE-2026-61172

...

CVE-2026-61170

...

CVE-2026-61169

...

CVE-2026-61171

CVE-2026-61171 affects Oracle Agile PLM (Oracle Supply Chain), specifically version 9.3.6. The vulnerability is exploitable over HTTP with network access by an unauthenticated attacker and can lead to unauthorized creation, deletion, or modification of data, or complete access to Oracle Agile PLM...

CVE-2026-61167

...

CVE-2026-61167

Oracle Agile PLM (Oracle Supply Chain) 9.3.6 is vulnerable to an unauthenticated, network-accessible flaw via HTTP that can lead to takeover of Oracle Agile PLM. The CVE-2026-61167 entry shows a base score of 9.8 (CRITICAL) with CVSS v3.1 metrics: AV:N, AC:L, PR:N, UI:N, S:U, C:H/I:H/A:H. Connect...

CVE-2026-61165

...

CVE-2026-61163

CVE-2026-61163 affects Oracle Commerce Guided Search / Oracle Commerce Experience Manager (Forge component) with affected version 11.4.0. The vulnerability is exploitable over the network (HTTP) by an unauthenticated attacker, with attack complexity high and no required privileges, potentially le...

CVE-2026-61165

Technical details about CVE-2026-61165 are not publicly available in the provided documents. Monitor for updates from Oracle and NVD for affected versions, impact, and remediation.

CVE-2026-61164

...

CVE-2026-61162

...

CVE-2026-61162

The CVE-2026-61162 affects Oracle Commerce Guided Search / Oracle Commerce Experience Manager (Endeca Application Controller) with affected version 11.4.0. The vulnerability allows a low-privilege, logged-in attacker to compromise the system, potentially causing unauthorized creation, deletion or...