CVE-2026-61191

Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain component: Document Management. The supported version that is affected is 6.2.1. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Agile...

Cross-site Scripting (XSS)

Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS over the /umbraco/management/api/v1/document endpoint. A user can inject scripts as rich text content which will be executed when the target page is rendered. Workaround The project maintainers note that this...