CVE-2026-61175

The CVE-2026-61175 entry concerns Oracle Product Lifecycle Analytics (Oracle Supply Chain), specifically the Installation Issues component, affected in version 3.6.1. The vulnerability is exploitable over HTTP by an unauthenticated network attacker, potentially allowing access to all Oracle Produ...

CVE-2026-61174

CVE-2026-61174 affects Oracle Product Lifecycle Analytics (Oracle Supply Chain), specifically the Installation Issues component in version 3.6.1. The issue allows a locally authenticated, non-privileged user to compromise the analytics product, with potential unauthorized read/write access to dat...

CVE-2026-61172

The connected sources confirm CVE-2026-61172 affects Oracle Agile PLM (Oracle Supply Chain), specifically the Security component, with affected version 9.3.6. The vulnerability allows an unauthenticated attacker with network access via HTTP to compromise Oracle Agile PLM, potentially leading to u...

CVE-2026-61173

CVE-2026-61173 affects Oracle Agile PLM (Oracle Supply Chain), specifically component: Security, with affected version 9.3.6. The vulnerability can be exploited over HTTP by an unauthenticated network-accessing attacker to potentially create, delete, or modify critical data or gain complete acces...

CVE-2026-61169

The CVE-2026-61169 entry concerns Oracle Agile PLM (Oracle Supply Chain) with affected version 9.3.6 in the Security component. The vulnerability allows a low-privilege, logon-enabled attacker to compromise Oracle Agile PLM, with potential broader impact on related products (scope change) and res...

CVE-2026-61171

CVE-2026-61171 affects Oracle Agile PLM (Oracle Supply Chain), specifically version 9.3.6. The vulnerability is exploitable over HTTP with network access by an unauthenticated attacker and can lead to unauthorized creation, deletion, or modification of data, or complete access to Oracle Agile PLM...

CVE-2026-61170

CVE-2026-61170 affects Oracle Agile PLM 9.3.6 (Oracle Supply Chain, component: Security). The description states an unauthenticated attacker with network access via HTTP can compromise Oracle Agile PLM, potentially taking over the system. CVSS 3.1 base score 8.1 (HIGH) with network attack vector,...

CVE-2026-61168

The CVE-2026-61168 entry concerns Oracle Agile PLM (Oracle Supply Chain), affected version 9.3.6, with a vulnerability in the Security component. The vulnerability is exploitable over HTTP with network access by a low-privilege attacker and can lead to takeover of Oracle Agile PLM. CVSS v3.1 base...

CVE-2026-61167

Oracle Agile PLM (Oracle Supply Chain) 9.3.6 is vulnerable to an unauthenticated, network-accessible flaw via HTTP that can lead to takeover of Oracle Agile PLM. The CVE-2026-61167 entry shows a base score of 9.8 (CRITICAL) with CVSS v3.1 metrics: AV:N, AC:L, PR:N, UI:N, S:U, C:H/I:H/A:H. Connect...

CVE-2026-61166

CVE-2026-61166 affects Oracle Agile PLM (Oracle Supply Chain) in the 9.3.6 release, specifically the User and User Group component. The vulnerability allows a low-privilege attacker with network access via HTTP to take over Oracle Agile PLM, per CVSS 3.1 base score 8.8 (C/H/I/A). Connected source...

CVE-2026-61165

Technical details about CVE-2026-61165 are not publicly available in the provided documents. Monitor for updates from Oracle and NVD for affected versions, impact, and remediation.

CVE-2026-61163

CVE-2026-61163 affects Oracle Commerce Guided Search / Oracle Commerce Experience Manager (Forge component) with affected version 11.4.0. The vulnerability is exploitable over the network (HTTP) by an unauthenticated attacker, with attack complexity high and no required privileges, potentially le...

CVE-2026-61164

CVE-2026-61164 affects Oracle Commerce Guided Search / Oracle Commerce Experience Manager (Content Acquisition System) with affected version 11.4.0. The vulnerability can be exploited by an unauthenticated attacker over HTTPS from network access to compromise data, enabling unauthorized create/de...

CVE-2026-61162

The CVE-2026-61162 affects Oracle Commerce Guided Search / Oracle Commerce Experience Manager (Endeca Application Controller) with affected version 11.4.0. The vulnerability allows a low-privilege, logged-in attacker to compromise the system, potentially causing unauthorized creation, deletion or...

CVE-2026-61161

The CVE-2026-61161 entry concerns Oracle Commerce Guided Search / Oracle Commerce Experience Manager (Endeca Application Controller), affected in version 11.4.0. The vulnerability is exploitable over HTTP with network access by an unauthenticated attacker, potentially leading to takeover of the a...

CVE-2026-61158

CVE-2026-61158 affects Oracle Commerce Guided Search / Oracle Commerce Experience Manager (component: Experience Manager) and is applicable to version 11.4.0. The vulnerability can be triggered by an unauthenticated attacker with network access via RMI to compromise the Product, potentially leadi...

CVE-2026-61160

CVE-2026-61160 affects Oracle Commerce Guided Search / Oracle Commerce Experience Manager (component: Experience Manager) in 11.4.0. The vulnerability allows a low-privileged, network-accessible attacker over HTTP to compromise the product, potentially leading to unauthorized access to data and a...

CVE-2026-61159

CVE-2026-61159 affects Oracle Commerce Guided Search / Oracle Commerce Experience Manager (component: Experience Manager) on version 11.4.0. The issue permits unauthenticated, network‑accessible HTTP access to compromise the product, with impact limited to confidentiality (CVSS 3.1: 7.5). Connect...

CVE-2026-61156

CVE-2026-61156 affects Oracle Commerce Guided Search Platform Services (Forge) with vulnerable version 11.4.0. An unauthenticated attacker over HTTPS can compromise the service, enabling unauthorized creation, deletion, or modification of data and potential unauthorized access to all Oracle Comme...

CVE-2026-61155

CVE-2026-61155 affects Oracle Commerce Guided Search Platform Services (Forge component) in version 11.4.0. The vulnerability allows unauthenticated, network-based access via HTTP, potentially granting access to critical data and enabling a complete DoS of Oracle Commerce Guided Search Platform S...