36268 matches found
CVE-2026-71069
...
CVE-2026-71067
Affected: Oracle Agile PLM MCAD Connector v3.6 (CAX Client component). Root cause: Not specified in the documents. Impact: CVSS 8.8 (High) — a low-privileged, network-reachable attacker via HTTP can achieve full compromise (confidentiality, integrity, availability) and takeover of the connector. ...
CVE-2026-71064
...
CVE-2026-71050
...
CVE-2026-71046
...
CVE-2026-71048
...
CVE-2026-71044
...
CVE-2026-71043
Oracle Agile PLM 9.3.6 (Security component) has an unauthenticated, network-reachable flaw exploitable via HTTP. CVSS 3.1 scores it HIGH (7.5, C:H), allowing unauthorized access to critical or all accessible data. No exploitation or patch details are provided; see Oracle's August 2026 CPU advisor...
CVE-2026-71044
Oracle Agile PLM (Oracle Supply Chain, component: Export ) version 9.3.6 is affected by a vulnerability that allows a low-privileged attacker with network access via HTTP to achieve full takeover of the application. The CVSS 3.1 score is 8.8 (HIGH) with impacts to confidentiality, integrity, and ...
CVE-2026-71043
...
CVE-2026-71041
A HIGH-severity local privilege escalation affects Oracle Agile PLM 9.3.6's Gantt Chart component. A low-privileged attacker with local infrastructure access can compromise the product with full C/I/A impact. Oracle's August 2026 CPU advisory (cspuaug2026.html) is the reference; no patch version ...
CVE-2026-71042
...
CVE-2026-71040
Oracle Agile PLM 9.3.6's Security component allows an unauthenticated, network-accessible attacker to fully compromise the application (C/I/A impact), yielding complete takeover. CVSS 9.8 Critical. No exploit details provided. Oracle's August 2026 CPU advisory is referenced for patch information.
CVE-2026-71038
...
CVE-2026-71035
A HIGH-severity (CVSS 8.1) vulnerability affects Oracle Commerce 11.4.0's Forge component, exploitable by an unauthenticated remote attacker over HTTP with high attack complexity, leading to full compromise of Guided Search/Experience Manager (C/I/A impact). Oracle's August 2026 CPU advisory is t...
CVE-2026-71034
Oracle Commerce 11.4.0 (component: Forge) is vulnerable to an unauthenticated SOAP-based attack via network access. Successful exploitation enables an attacker to gain unauthorized access to critical data or complete access to all accessible Oracle Commerce data, with confidentiality impact rated...
CVE-2026-71036
Oracle Commerce version 11.4.0 Experience Manager component is vulnerable to an unauthenticated, network-accessible attack (CVSS 9.1) allowing full confidentiality and integrity compromise. Oracle's August 2026 CPU advisory provides patch details; no exploitation evidence is present in the provid...
CVE-2026-71033
...