33299 matches found
CVE-2026-71043
Oracle Agile PLM 9.3.6 (Security component) has an unauthenticated, network-reachable flaw exploitable via HTTP. CVSS 3.1 scores it HIGH (7.5, C:H), allowing unauthorized access to critical or all accessible data. No exploitation or patch details are provided; see Oracle's August 2026 CPU advisor...
CVE-2026-71044
Oracle Agile PLM (Oracle Supply Chain, component: Export ) version 9.3.6 is affected by a vulnerability that allows a low-privileged attacker with network access via HTTP to achieve full takeover of the application. The CVSS 3.1 score is 8.8 (HIGH) with impacts to confidentiality, integrity, and ...
CVE-2026-71044
...
CVE-2026-71043
...
CVE-2026-71041
A HIGH-severity local privilege escalation affects Oracle Agile PLM 9.3.6's Gantt Chart component. A low-privileged attacker with local infrastructure access can compromise the product with full C/I/A impact. Oracle's August 2026 CPU advisory (cspuaug2026.html) is the reference; no patch version ...
CVE-2026-71042
...
CVE-2026-71040
Oracle Agile PLM 9.3.6's Security component allows an unauthenticated, network-accessible attacker to fully compromise the application (C/I/A impact), yielding complete takeover. CVSS 9.8 Critical. No exploit details provided. Oracle's August 2026 CPU advisory is referenced for patch information.
CVE-2026-71038
...
CVE-2026-71035
A HIGH-severity (CVSS 8.1) vulnerability affects Oracle Commerce 11.4.0's Forge component, exploitable by an unauthenticated remote attacker over HTTP with high attack complexity, leading to full compromise of Guided Search/Experience Manager (C/I/A impact). Oracle's August 2026 CPU advisory is t...
CVE-2026-71034
Oracle Commerce 11.4.0 (component: Forge) is vulnerable to an unauthenticated SOAP-based attack via network access. Successful exploitation enables an attacker to gain unauthorized access to critical data or complete access to all accessible Oracle Commerce data, with confidentiality impact rated...
CVE-2026-71036
Oracle Commerce version 11.4.0 Experience Manager component is vulnerable to an unauthenticated, network-accessible attack (CVSS 9.1) allowing full confidentiality and integrity compromise. Oracle's August 2026 CPU advisory provides patch details; no exploitation evidence is present in the provid...
CVE-2026-71033
...
CVE-2026-71031
...
CVE-2026-71032
...
CVE-2026-71023
An unauthenticated, network-reachable flaw in Oracle Commerce 11.4.0's Endeca Application Controller allows arbitrary creation, deletion, or modification of all accessible data (CVSS 7.5, HIGH). No exploitation evidence is provided. Customers should consult Oracle's August 2026 CPU advisory for p...
CVE-2026-71021
...
CVE-2026-71018
Oracle Commerce 11.4.0's Endeca Application Controller is vulnerable: unauthenticated remote attackers can exploit it via HTTP to read all accessible data and modify some data, requiring victim interaction; CVSS 3.1 score 8.2 (High). No specific root cause or patch details are provided. No known ...
CVE-2026-71017
Oracle Commerce 11.4.0's Endeca Application Controller is vulnerable to an unauthenticated, network-accessible HTTP attack (CVSS 6.5, HIGH complexity). Successful exploitation yields unauthorized access to critical data and partial denial of service. No exploit details are provided; Oracle's Augu...
CVE-2026-71015
Oracle Commerce 11.4.0 (Endeca Application Controller) has a critical CVSS 9.1 flaw exploitable by unauthenticated attackers over HTTP, enabling unauthorized data creation, deletion, modification, and full data access; no exploit details are provided, and the Oracle CSP advisory (cspuaug2026.html...