CVE-2026-61196

Summary : CVE-2026-61196 affects Oracle Identity Manager (OIM) within Oracle Fusion Middleware, specifically the OIM Legacy UI. Affected versions are 12.2.1.4.0 and 14.1.2.1.0. The flaw allows unauthenticated, network-accessible attackers via HTTP to compromise OIM, with the potential takeover of...

CVE-2026-61191

The CVE-2026-61191 entry pertains to Oracle Agile Engineering Data Management (Oracle Supply Chain), specifically the Document Management component in version 6.2.1. The vulnerability is characterized as easily exploitable with local access (low privileges, user login required) and can lead to un...

CVE-2026-61187

The CVE-2026-61187 entry concerns Oracle Agile Engineering Data Management (Oracle Supply Chain) with the Install component affected in version 6.2.1. The vulnerability is described as exploitable locally via the Install component, requiring a user who is logged into the infrastructure and perfor...

CVE-2026-61186

Technical details (affected product/version, root cause, impact, remediation) are not publicly provided in the supplied documents. Monitor for updates.

CVE-2026-61184

...

CVE-2026-61179

The CVE-2026-61179 affects Oracle Agile Product Lifecycle Management for Process (component Product Quality Management ), with affected version 6.2.4 . A low-privilege attacker with network access over HTTP can compromise the system, potentially leading to takeover. CVSS v3.1 base score is 8.8 (H...

CVE-2026-61176

...

CVE-2026-61172

...

CVE-2026-61169

The CVE-2026-61169 entry concerns Oracle Agile PLM (Oracle Supply Chain) with affected version 9.3.6 in the Security component. The vulnerability allows a low-privilege, logon-enabled attacker to compromise Oracle Agile PLM, with potential broader impact on related products (scope change) and res...

CVE-2026-61169

...

CVE-2026-61171

...

CVE-2026-61168

The CVE-2026-61168 entry concerns Oracle Agile PLM (Oracle Supply Chain), affected version 9.3.6, with a vulnerability in the Security component. The vulnerability is exploitable over HTTP with network access by a low-privilege attacker and can lead to takeover of Oracle Agile PLM. CVSS v3.1 base...

CVE-2026-61165

Technical details about CVE-2026-61165 are not publicly available in the provided documents. Monitor for updates from Oracle and NVD for affected versions, impact, and remediation.

CVE-2026-61162

...

CVE-2026-61162

...

CVE-2026-61161

...

CVE-2026-61161

...

CVE-2026-61161

The CVE-2026-61161 entry concerns Oracle Commerce Guided Search / Oracle Commerce Experience Manager (Endeca Application Controller), affected in version 11.4.0. The vulnerability is exploitable over HTTP with network access by an unauthenticated attacker, potentially leading to takeover of the a...

CVE-2026-61159

...

CVE-2026-61159

CVE-2026-61159 affects Oracle Commerce Guided Search / Oracle Commerce Experience Manager (component: Experience Manager) on version 11.4.0. The issue permits unauthenticated, network‑accessible HTTP access to compromise the product, with impact limited to confidentiality (CVSS 3.1: 7.5). Connect...