Lucene search
+L

1353 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/21 12:00 a.m.•7 views

CVE-2026-61188: Improper Privilege Management

Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain component: Installation. The supported version that is affected is 6.2.4. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

7.5CVSS5.8AI score0.00334EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/21 12:00 a.m.•6 views

CVE-2026-61184: Improper Access Control

Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain component: Product Quality Management. The supported version that is affected is 6.2.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...

9.1CVSS5.8AI score0.00425EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/21 12:00 a.m.•8 views

CVE-2026-61183: Improper Authentication

Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain component: Reporting. The supported version that is affected is 6.2.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Agile...

9.8CVSS5.8AI score0.00508EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/21 12:00 a.m.•9 views

CVE-2026-61182: Improper Privilege Management

Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain component: Data Import. The supported version that is affected is 6.2.4. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Agile...

6.7CVSS5.8AI score0.00181EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/21 12:00 a.m.•9 views

CVE-2026-61181: Improper Access Control

Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain component: Product Quality Management. The supported version that is affected is 6.2.4. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...

7.6CVSS5.8AI score0.0027EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/21 12:00 a.m.•7 views

CVE-2026-61180: Improper Privilege Management

Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain component: Product Quality Management. The supported version that is affected is 6.2.4. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...

8.8CVSS5.8AI score0.00432EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/21 12:00 a.m.•8 views

CVE-2026-61179: Improper Privilege Management

Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain component: Product Quality Management. The supported version that is affected is 6.2.4. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...

8.8CVSS5.8AI score0.00432EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/21 12:00 a.m.•10 views

CVE-2026-61178: Improper Authentication

Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain component: Installation. The supported version that is affected is 6.2.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via TCP to compromise Oracle Agi...

9.8CVSS5.8AI score0.00508EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/07/21 12:00 a.m.•40 views

PT-2026-63072

Name of the Vulnerable Software and Affected Versions Oracle Agile Product Lifecycle Management for Process version 6.2.4 Description A flaw in the Installation component allows a low privileged attacker with network access via HTTP to compromise the system. Successful exploitation can lead to a...

7.5CVSS7.1AI score0.00334EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/21 12:00 a.m.•13 views

CVE-2026-61185: Exposure of Sensitive Information to an Unauthorized Actor

Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain component: Installation. The supported version that is affected is 6.2.4. Easily exploitable vulnerability allows unauthenticated attacker with access to the physical communication segment...

7.4CVSS5.8AI score0.00341EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2026/07/17 7:49 p.m.•74 views

CVE-2026-14979 IBM Engineering Lifecycle Management - Jazz Foundation is vulnerable to XML Entity Expansion attack

IBM Engineering Lifecycle Management 7.0.3 Interim Fix 001 through Interim Fix 021, 7.1.0 Interim Fix 001 through Interim Fix 009, and 7.2.0 and 7.2.0 Interim Fix 001 DOORS could allow a remote attacker to cause a denial of service due to improper handling of XML entity expansion...

5.3CVSS0.00549EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/07/17 7:49 p.m.•23 views

CVE-2026-14979 IBM Engineering Lifecycle Management - Jazz Foundation is vulnerable to XML Entity Expansion attack

IBM Engineering Lifecycle Management 7.0.3 Interim Fix 001 through Interim Fix 021, 7.1.0 Interim Fix 001 through Interim Fix 009, and 7.2.0 and 7.2.0 Interim Fix 001 DOORS could allow a remote attacker to cause a denial of service due to improper handling of XML entity expansion...

5.3CVSS6AI score0.00549EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/07/17 7:49 p.m.•30 views

EUVD-2026-45300

IBM Engineering Lifecycle Management 7.0.3 Interim Fix 001 through Interim Fix 021, 7.1.0 Interim Fix 001 through Interim Fix 009, and 7.2.0 and 7.2.0 Interim Fix 001 DOORS could allow a remote attacker to cause a denial of service due to improper handling of XML entity expansion...

5.3CVSS5.4AI score0.00549EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/07/17 12:00 a.m.•30 views

PT-2026-60876

Name of the Vulnerable Software and Affected Versions IBM Engineering Lifecycle Management versions 7.0.3 Interim Fix 001 through Interim Fix 021 IBM Engineering Lifecycle Management versions 7.1.0 Interim Fix 001 through Interim Fix 009 IBM Engineering Lifecycle Management version 7.2.0 IBM...

7.5CVSS5.8AI score0.00549EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/17 12:00 a.m.•13 views

CVE-2026-14979: Improper Restriction of Recursive Entity References in DTDs

IBM Engineering Lifecycle Management 7.0.3 Interim Fix 001 through Interim Fix 021, 7.1.0 Interim Fix 001 through Interim Fix 009, and 7.2.0 and 7.2.0 Interim Fix 001 DOORS could allow a remote attacker to cause a denial of service due to improper handling of XML entity expansion...

7.5CVSS6AI score0.00549EPSS
SaveExploits0References3
RedHat Linux
RedHat Linux
•added 2026/07/16 10:53 a.m.•24 views

Important: Red Hat Security Advisory: Red Hat Edge Manager Version 1.1.3 Security Update

Red Hat Edge Manager Version 1.1.3 Security Update Red Hat Edge Manager RHEM provides simple, scalable, and security-focused management of edge devices and applications. It supports image-mode RHEL and container workloads that run on Podman/Docker or Kubernetes. RHEM is now available as a...

10CVSS6.3AI score0.02618EPSS
SaveExploits10References32
RedHat Linux
RedHat Linux
•added 2026/07/15 4:22 p.m.•29 views

Important: Red Hat Security Advisory: Red Hat Edge Manager Version 1.1.3 Security Update

Red Hat Edge Manager Version 1.1.3 Security Update Red Hat Edge Manager RHEM provides simple, scalable, and security-focused management of edge devices and applications. It supports image-mode RHEL and container workloads that run on Podman/Docker or Kubernetes. RHEM is now available as a...

10CVSS6.3AI score0.02618EPSS
SaveExploits10References32
IBM Security Bulletins
IBM Security Bulletins
•added 2026/07/14 11:21 a.m.•26 views

Security Bulletin: IBM Engineering Lifecycle Management - Jazz Foundation is vulnerable to XML Entity Expansion attack

Summary XML Entity Expansion vulnerability has been identified in IBM Engineering Lifecycle Management - Jazz Foundation. Vulnerability Details CVEID:CVE-2026-14979 DESCRIPTION: DOORS could allow a remote attacker to cause a denial of service due to improper handling of XML entity expansion...

7.5CVSS6AI score0.00549EPSS
SaveExploits0Affected Software1
RedHat Linux
RedHat Linux
•added 2026/07/08 3:52 p.m.•57 views

Important: Red Hat Security Advisory: Red Hat Edge Manager Version 1.0.3 Security Update

Red Hat Edge Manager Version 1.0.3 Security Update Red Hat Edge Manager RHEM provides simple, scalable, and security-focused management of edge devices and applications. It supports image-mode RHEL and container workloads that run on Podman/Docker or Kubernetes. RHEM is now available as a...

10CVSS6.2AI score0.01688EPSS
SaveExploits6References26
RedHat Linux
RedHat Linux
•added 2026/07/08 10:08 a.m.•41 views

Important: Red Hat Security Advisory: Red Hat Edge Manager Version 1.0.3 Security Update

Red Hat Edge Manager Version 1.0.3 Security Update Red Hat Edge Manager RHEM provides simple, scalable, and security-focused management of edge devices and applications. It supports image-mode RHEL and container workloads that run on Podman/Docker or Kubernetes. RHEM is now available as a...

10CVSS6.3AI score0.02618EPSS
SaveExploits10References28
Rows per page
Query Builder