9.1
Critique
CVE-2026-83260 Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Event Java PX)
Description
Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Event Java PX). The supported version that is affected is 9.3.6. Easily exploitable vulnerability allows high privileged attacker with network access via T3, IIOP to compromise Oracle Agile PLM. While the vulnerability is in Oracle Agile PLM, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of Oracle Agile PLM. CVSS 3.1 Base Score 9.1 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H).
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Oracle Agile PLM | 9.3.6 | Pas de correctif indiqué |
Références
- Oracle Advisory www.oracle.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de Oracle Agile PLM
Les 38 CVE de Oracle Agile PLM →
CVE-2026-87362
Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Folders, Files & Attachments)
6.5
Moyenne
CVE-2026-101718
Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Application Server)
6.5
Moyenne
CVE-2026-101717
Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Security)
6.4
Moyenne
CVE-2026-101719
Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Application Server)
7.5
Élevée