8.8
Élevée
CVE-2026-61166 Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: User and User Group)
Description
Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: User and User Group). The supported version that is affected is 9.3.6. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Agile PLM. Successful attacks of this vulnerability can result in takeover of Oracle Agile PLM. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Oracle Agile PLM | 9.3.6 | Pas de correctif indiqué |
Autres CVE de Oracle Agile PLM
Les 38 CVE de Oracle Agile PLM →
CVE-2026-87362
Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Folders, Files & Attachments)
6.5
Moyenne
CVE-2026-101717
Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Security)
6.4
Moyenne
CVE-2026-101718
Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Application Server)
6.5
Moyenne
CVE-2026-101719
Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Application Server)
7.5
Élevée