9.8
Critical
CVE-2026-83261 Vulnerability in the Oracle Product Lifecycle Analytics product of Oracle Supply Chain (component: Core)
Description
Vulnerability in the Oracle Product Lifecycle Analytics product of Oracle Supply Chain (component: Core). The supported version that is affected is 3.6.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Product Lifecycle Analytics. Successful attacks of this vulnerability can result in takeover of Oracle Product Lifecycle Analytics. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Oracle Product Lifecycle Analytics | 3.6.1 | No fix stated |
Other CVEs of Oracle Product Lifecycle Analytics
The 15 CVEs of Oracle Product Lifecycle Analytics →
CVE-2026-101472
Vulnerability in the Oracle Product Lifecycle Analytics product of Oracle Supply Chain (component: Installation Issues)
5.5
Medium
CVE-2026-101471
Vulnerability in the Oracle Product Lifecycle Analytics product of Oracle Supply Chain (component: Installation Issues)
6.1
Medium
CVE-2026-101470
Vulnerability in the Oracle Product Lifecycle Analytics product of Oracle Supply Chain (component: Installation Issues)
6.0
Medium
CVE-2026-101469
Vulnerability in the Oracle Product Lifecycle Analytics product of Oracle Supply Chain (component: Installation Issues)
7.5
High