9.8
Critique
CVE-2026-71040 Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Security)
Description
Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Security). The supported version that is affected is 9.3.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Agile PLM. Successful attacks of this vulnerability can result in takeover of Oracle Agile PLM. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Oracle Agile PLM | 9.3.6 | Pas de correctif indiqué |
Références
- Oracle Advisory www.oracle.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de Oracle Agile PLM
Les 38 CVE de Oracle Agile PLM →
CVE-2026-87362
Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Folders, Files & Attachments)
6.5
Moyenne
CVE-2026-101717
Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Security)
6.4
Moyenne
CVE-2026-101718
Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Application Server)
6.5
Moyenne
CVE-2026-101719
Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Application Server)
7.5
Élevée