CVE-2026-61168

The CVE-2026-61168 entry concerns Oracle Agile PLM (Oracle Supply Chain), affected version 9.3.6, with a vulnerability in the Security component. The vulnerability is exploitable over HTTP with network access by a low-privilege attacker and can lead to takeover of Oracle Agile PLM. CVSS v3.1 base...

CVE-2026-61167

Oracle Agile PLM (Oracle Supply Chain) 9.3.6 is vulnerable to an unauthenticated, network-accessible flaw via HTTP that can lead to takeover of Oracle Agile PLM. The CVE-2026-61167 entry shows a base score of 9.8 (CRITICAL) with CVSS v3.1 metrics: AV:N, AC:L, PR:N, UI:N, S:U, C:H/I:H/A:H. Connect...

CVE-2026-61166

CVE-2026-61166 affects Oracle Agile PLM (Oracle Supply Chain) in the 9.3.6 release, specifically the User and User Group component. The vulnerability allows a low-privilege attacker with network access via HTTP to take over Oracle Agile PLM, per CVSS 3.1 base score 8.8 (C/H/I/A). Connected source...

CVE-2026-61163

CVE-2026-61163 affects Oracle Commerce Guided Search / Oracle Commerce Experience Manager (Forge component) with affected version 11.4.0. The vulnerability is exploitable over the network (HTTP) by an unauthenticated attacker, with attack complexity high and no required privileges, potentially le...

CVE-2026-61164

CVE-2026-61164 affects Oracle Commerce Guided Search / Oracle Commerce Experience Manager (Content Acquisition System) with affected version 11.4.0. The vulnerability can be exploited by an unauthenticated attacker over HTTPS from network access to compromise data, enabling unauthorized create/de...

CVE-2026-61165

Technical details about CVE-2026-61165 are not publicly available in the provided documents. Monitor for updates from Oracle and NVD for affected versions, impact, and remediation.

CVE-2026-61162

The CVE-2026-61162 affects Oracle Commerce Guided Search / Oracle Commerce Experience Manager (Endeca Application Controller) with affected version 11.4.0. The vulnerability allows a low-privilege, logged-in attacker to compromise the system, potentially causing unauthorized creation, deletion or...

CVE-2026-61161

The CVE-2026-61161 entry concerns Oracle Commerce Guided Search / Oracle Commerce Experience Manager (Endeca Application Controller), affected in version 11.4.0. The vulnerability is exploitable over HTTP with network access by an unauthenticated attacker, potentially leading to takeover of the a...

CVE-2026-61160

CVE-2026-61160 affects Oracle Commerce Guided Search / Oracle Commerce Experience Manager (component: Experience Manager) in 11.4.0. The vulnerability allows a low-privileged, network-accessible attacker over HTTP to compromise the product, potentially leading to unauthorized access to data and a...

CVE-2026-61158

CVE-2026-61158 affects Oracle Commerce Guided Search / Oracle Commerce Experience Manager (component: Experience Manager) and is applicable to version 11.4.0. The vulnerability can be triggered by an unauthenticated attacker with network access via RMI to compromise the Product, potentially leadi...

CVE-2026-61159

CVE-2026-61159 affects Oracle Commerce Guided Search / Oracle Commerce Experience Manager (component: Experience Manager) on version 11.4.0. The issue permits unauthenticated, network‑accessible HTTP access to compromise the product, with impact limited to confidentiality (CVSS 3.1: 7.5). Connect...

CVE-2026-61157

The CVE-2026-61157 entry concerns Oracle Commerce Guided Search / Oracle Commerce Experience Manager (component: Experience Manager) for version 11.4.0. The vulnerability is exploitable over HTTP by an unauthenticated attacker with network access, potentially leading to unauthorized access to con...

CVE-2026-61155

CVE-2026-61155 affects Oracle Commerce Guided Search Platform Services (Forge component) in version 11.4.0. The vulnerability allows unauthenticated, network-based access via HTTP, potentially granting access to critical data and enabling a complete DoS of Oracle Commerce Guided Search Platform S...

CVE-2026-61156

CVE-2026-61156 affects Oracle Commerce Guided Search Platform Services (Forge) with vulnerable version 11.4.0. An unauthenticated attacker over HTTPS can compromise the service, enabling unauthorized creation, deletion, or modification of data and potential unauthorized access to all Oracle Comme...

CVE-2026-61153

CVE-2026-61153 impacts Oracle Commerce Guided Search / Oracle Commerce Experience Manager (component: Experience Manager) with affected version 11.4.0. The vulnerability allows unauthenticated network access via HTTP to compromise the product, enabling unauthorized creation, deletion or modificat...

CVE-2026-61154

CVE-2026-61154 affects Oracle Commerce Guided Search Platform Services (Oracle Commerce, Forge component) with affected version 11.4.0. An unauthenticated attacker with network access over HTTP can compromise the Guided Search Platform Services, potentially leading to complete takeover. CVSS v3.1...

CVE-2026-61152

The CVE-2026-61152 entry applies to Oracle Commerce Guided Search / Oracle Commerce Experience Manager (component: Experience Manager) for version 11.4.0. The vulnerability is exploitable by a low-privileged attacker with network access over HTTP, potentially allowing unauthorized update/insert/d...

CVE-2026-61149

CVE-2026-61149 affects Oracle Commerce Guided Search / Oracle Commerce Experience Manager (component: Experience Manager) in Oracle Commerce version 11.4.0. The description indicates an easily exploitable vulnerability allowing a low-privileged attacker with network access via HTTP to compromise ...

CVE-2026-61150

Oracle Commerce Vulnerability CVE-2026-61150 affects the Oracle Commerce Guided Search / Oracle Commerce Experience Manager component (Experience Manager) in version 11.4.0. The issue allows a low-privileged, network-accessible attacker (HTTP) to compromise data, enabling unauthorized creation, d...

CVE-2026-61151

CVE-2026-61151 affects Oracle Commerce Guided Search / Oracle Commerce Experience Manager (component: Experience Manager) with affected version 11.4.0. A low-privilege, network-access attacker (HTTP) can compromise the product, leading to unauthorized access to data and possibly unauthorized upda...