CVE-2026-61183

CVE-2026-61183 affects Oracle Agile Product Lifecycle Management for Process (component: Reporting) in version 6.2.4. The NVD/NIST entry states an unauthenticated attacker with network access over HTTP can compromise the system, potentially leading to takeover with CVSS 3.1 base score 9.8. No exp...

CVE-2026-61181

CVE-2026-61181 affects Oracle Agile Product Lifecycle Management for Process (Product Quality Management) with affected version 6.2.4. The vulnerability is exploitable over a network (HTTP) by a low-privilege attacker and requires user interaction; it may lead to unauthorized data access and pote...

CVE-2026-61179

The CVE-2026-61179 affects Oracle Agile Product Lifecycle Management for Process (component Product Quality Management ), with affected version 6.2.4 . A low-privilege attacker with network access over HTTP can compromise the system, potentially leading to takeover. CVSS v3.1 base score is 8.8 (H...

CVE-2026-61180

CVE-2026-61180 affects Oracle Agile Product Lifecycle Management for Process (Product Quality Management component) with affected version 6.2.4. The vulnerability can be exploited by a low-privilege attacker over HTTP with network access, potentially resulting in takeover of Oracle Agile PLM for ...

CVE-2026-61176

The CVE-2026-61176 entry concerns Oracle Product Lifecycle Analytics (Oracle Supply Chain), specifically the Installation Issues component, affected in version 3.6.1. The vulnerability description states that a highly privileged attacker with network access over HTTP can compromise Oracle Product...

CVE-2026-61175

The CVE-2026-61175 entry concerns Oracle Product Lifecycle Analytics (Oracle Supply Chain), specifically the Installation Issues component, affected in version 3.6.1. The vulnerability is exploitable over HTTP by an unauthenticated network attacker, potentially allowing access to all Oracle Produ...

CVE-2026-61178

CVE-2026-61178 affects Oracle Agile Product Lifecycle Management for Process (Installation component) in version 6.2.4. A unauthenticated attacker with network access via TCP can compromise the product, enabling takeover with CVSS 3.1 base score 9.8 (Impact: Confidentiality, Integrity, Availabili...

CVE-2026-61174

CVE-2026-61174 affects Oracle Product Lifecycle Analytics (Oracle Supply Chain), specifically the Installation Issues component in version 3.6.1. The issue allows a locally authenticated, non-privileged user to compromise the analytics product, with potential unauthorized read/write access to dat...

CVE-2026-61172

The connected sources confirm CVE-2026-61172 affects Oracle Agile PLM (Oracle Supply Chain), specifically the Security component, with affected version 9.3.6. The vulnerability allows an unauthenticated attacker with network access via HTTP to compromise Oracle Agile PLM, potentially leading to u...

CVE-2026-61173

CVE-2026-61173 affects Oracle Agile PLM (Oracle Supply Chain), specifically component: Security, with affected version 9.3.6. The vulnerability can be exploited over HTTP by an unauthenticated network-accessing attacker to potentially create, delete, or modify critical data or gain complete acces...

CVE-2026-61171

CVE-2026-61171 affects Oracle Agile PLM (Oracle Supply Chain), specifically version 9.3.6. The vulnerability is exploitable over HTTP with network access by an unauthenticated attacker and can lead to unauthorized creation, deletion, or modification of data, or complete access to Oracle Agile PLM...

CVE-2026-61170

CVE-2026-61170 affects Oracle Agile PLM 9.3.6 (Oracle Supply Chain, component: Security). The description states an unauthenticated attacker with network access via HTTP can compromise Oracle Agile PLM, potentially taking over the system. CVSS 3.1 base score 8.1 (HIGH) with network attack vector,...

CVE-2026-61169

The CVE-2026-61169 entry concerns Oracle Agile PLM (Oracle Supply Chain) with affected version 9.3.6 in the Security component. The vulnerability allows a low-privilege, logon-enabled attacker to compromise Oracle Agile PLM, with potential broader impact on related products (scope change) and res...

CVE-2026-61168

The CVE-2026-61168 entry concerns Oracle Agile PLM (Oracle Supply Chain), affected version 9.3.6, with a vulnerability in the Security component. The vulnerability is exploitable over HTTP with network access by a low-privilege attacker and can lead to takeover of Oracle Agile PLM. CVSS v3.1 base...

CVE-2026-61166

CVE-2026-61166 affects Oracle Agile PLM (Oracle Supply Chain) in the 9.3.6 release, specifically the User and User Group component. The vulnerability allows a low-privilege attacker with network access via HTTP to take over Oracle Agile PLM, per CVSS 3.1 base score 8.8 (C/H/I/A). Connected source...

CVE-2026-61167

Oracle Agile PLM (Oracle Supply Chain) 9.3.6 is vulnerable to an unauthenticated, network-accessible flaw via HTTP that can lead to takeover of Oracle Agile PLM. The CVE-2026-61167 entry shows a base score of 9.8 (CRITICAL) with CVSS v3.1 metrics: AV:N, AC:L, PR:N, UI:N, S:U, C:H/I:H/A:H. Connect...

CVE-2026-61163

CVE-2026-61163 affects Oracle Commerce Guided Search / Oracle Commerce Experience Manager (Forge component) with affected version 11.4.0. The vulnerability is exploitable over the network (HTTP) by an unauthenticated attacker, with attack complexity high and no required privileges, potentially le...

CVE-2026-61165

Technical details about CVE-2026-61165 are not publicly available in the provided documents. Monitor for updates from Oracle and NVD for affected versions, impact, and remediation.

CVE-2026-61164

CVE-2026-61164 affects Oracle Commerce Guided Search / Oracle Commerce Experience Manager (Content Acquisition System) with affected version 11.4.0. The vulnerability can be exploited by an unauthenticated attacker over HTTPS from network access to compromise data, enabling unauthorized create/de...

CVE-2026-61162

The CVE-2026-61162 affects Oracle Commerce Guided Search / Oracle Commerce Experience Manager (Endeca Application Controller) with affected version 11.4.0. The vulnerability allows a low-privilege, logged-in attacker to compromise the system, potentially causing unauthorized creation, deletion or...