CVE-2026-61197

CVE-2026-61197 affects the Oracle Identity Manager (OIM) Legacy UI in Oracle Fusion Middleware. Affected versions: 12.2.1.4.0 and 14.1.2.1.0. The flaw allows an unauthenticated, network-based attacker (via HTTP) to compromise OIM, leading to unauthorized creation, deletion, or modification of dat...

CVE-2026-61196

Summary : CVE-2026-61196 affects Oracle Identity Manager (OIM) within Oracle Fusion Middleware, specifically the OIM Legacy UI. Affected versions are 12.2.1.4.0 and 14.1.2.1.0. The flaw allows unauthenticated, network-accessible attackers via HTTP to compromise OIM, with the potential takeover of...

CVE-2026-61194

Oracle Agile Engineering Data Management (Supply Chain, Core) is affected in version 6.2.1. The flaw allows a low-privileged, network-accessible attacker (TCP) to trigger a hang or frequent crash (DoS). CVSS 3.1 base score 6.5 (AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H). Exploitation details are not pr...

CVE-2026-61192

The CVE-2026-61192 entry concerns Oracle Agile Engineering Data Management (Oracle Supply Chain), specifically the Install component in version 6.2.1. The issue is exploitable by a low-privilege attacker with network access over HTTP, potentially causing a hang or frequent crash (complete DOS). T...

CVE-2026-61191

The CVE-2026-61191 entry pertains to Oracle Agile Engineering Data Management (Oracle Supply Chain), specifically the Document Management component in version 6.2.1. The vulnerability is characterized as easily exploitable with local access (low privileges, user login required) and can lead to un...

CVE-2026-61188

CVE-2026-61188 affects Oracle Agile Product Lifecycle Management for Process (Oracle Supply Chain), specifically the Installation component in version 6.2.4. The vulnerability is described as exploitable with network access over HTTP by a low-privileged attacker, potentially leading to takeover o...

CVE-2026-61189

CVE-2026-61189 concerns Oracle Agile Engineering Data Management (Oracle Supply Chain), specifically the Install component in version 6.2.1. The vulnerability allows a low-privilege user with login access to the infrastructure where Oracle Agile Engineering Data Management runs to compromise the ...

CVE-2026-61190

CVE-2026-61190 affects Oracle Agile Engineering Data Management (Oracle Supply Chain), specifically the Install component, version 6.2.1. The vulnerability allows a low-privilege attacker who has network access via HTTP to compromise the system. Successful exploitation requires user interaction a...

CVE-2026-61185

CVE-2026-61185 affects Oracle Agile PLM for Process (component: Installation) with affected version 6.2.4. The vulnerability allows unauthenticated access from the physical network segment attached to the hardware running Oracle Agile PLM for Process, potentially impacting additional products (sc...

CVE-2026-61187

The CVE-2026-61187 entry concerns Oracle Agile Engineering Data Management (Oracle Supply Chain) with the Install component affected in version 6.2.1. The vulnerability is described as exploitable locally via the Install component, requiring a user who is logged into the infrastructure and perfor...

CVE-2026-61186

Technical details (affected product/version, root cause, impact, remediation) are not publicly provided in the supplied documents. Monitor for updates.

CVE-2026-61182

CVE-2026-61182 affects Oracle Agile Product Lifecycle Management for Process, Data Import component, version 6.2.4. The description states an easily exploitable, local-privilege scenario where a high-privilege attacker with logon to the hosting infrastructure can compromise the product. CVSS v3.1...

CVE-2026-61183

CVE-2026-61183 affects Oracle Agile Product Lifecycle Management for Process (component: Reporting) in version 6.2.4. The NVD/NIST entry states an unauthenticated attacker with network access over HTTP can compromise the system, potentially leading to takeover with CVSS 3.1 base score 9.8. No exp...

CVE-2026-61184

The CVE-2026-61184entry concerns Oracle Agile Product Lifecycle Management for Process (Oracle SCM), specifically the Product Quality Management component in version 6.2.4. It states an unauthenticated, network-accessible vulnerability over HTTP that can lead to unauthorized creation, deletion, o...

CVE-2026-61179

The CVE-2026-61179 affects Oracle Agile Product Lifecycle Management for Process (component Product Quality Management ), with affected version 6.2.4 . A low-privilege attacker with network access over HTTP can compromise the system, potentially leading to takeover. CVSS v3.1 base score is 8.8 (H...

CVE-2026-61180

CVE-2026-61180 affects Oracle Agile Product Lifecycle Management for Process (Product Quality Management component) with affected version 6.2.4. The vulnerability can be exploited by a low-privilege attacker over HTTP with network access, potentially resulting in takeover of Oracle Agile PLM for ...

CVE-2026-61181

CVE-2026-61181 affects Oracle Agile Product Lifecycle Management for Process (Product Quality Management) with affected version 6.2.4. The vulnerability is exploitable over a network (HTTP) by a low-privilege attacker and requires user interaction; it may lead to unauthorized data access and pote...

CVE-2026-61175

The CVE-2026-61175 entry concerns Oracle Product Lifecycle Analytics (Oracle Supply Chain), specifically the Installation Issues component, affected in version 3.6.1. The vulnerability is exploitable over HTTP by an unauthenticated network attacker, potentially allowing access to all Oracle Produ...

CVE-2026-61176

The CVE-2026-61176 entry concerns Oracle Product Lifecycle Analytics (Oracle Supply Chain), specifically the Installation Issues component, affected in version 3.6.1. The vulnerability description states that a highly privileged attacker with network access over HTTP can compromise Oracle Product...

CVE-2026-61178

CVE-2026-61178 affects Oracle Agile Product Lifecycle Management for Process (Installation component) in version 6.2.4. A unauthenticated attacker with network access via TCP can compromise the product, enabling takeover with CVSS 3.1 base score 9.8 (Impact: Confidentiality, Integrity, Availabili...