Oracle Agile PLM vulnerabilities

25 known vulnerabilities in Oracle Agile PLM from Oracle. 25 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  Oracle Agile PLM: Improper Access Control

  CVE-2026-101719Oct 20, 2026Oracle

  Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Application Server). The supported version that is affected is 9.3.6. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise

• 7.5 High severity

  Oracle Agile PLM: Exposure of Sensitive Information to an Unauthorized Actor

  CVE-2026-101562Oct 20, 2026Oracle

  Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Acollect). The supported version that is affected is 2.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Agile

• 8.2 High severity

  Oracle Agile PLM: Improper Access Control

  CVE-2026-87266Sep 15, 2026Oracle

  Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Application Server). The supported version that is affected is 9.3.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise O

• 7.6 High severity

  Oracle Agile PLM: Improper Access Control

  CVE-2026-87258Sep 15, 2026Oracle

  Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Folders, Files & Attachments). The supported version that is affected is 9.3.6. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to com

• 7.7 High severity

  Oracle Agile PLM: Improper Access Control

  CVE-2026-87257Sep 15, 2026Oracle

  Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: SDK). The supported version that is affected is 9.3.6. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Agile PLM.

• 7.7 High severity

  Oracle Agile PLM: Improper Access Control

  CVE-2026-87256Sep 15, 2026Oracle

  Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Application Server). The supported version that is affected is 9.3.6. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Or

• 7.5 High severity

  Oracle Agile PLM: Improper Access Control

  CVE-2026-87254Sep 15, 2026Oracle

  Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Folders, Files & Attachments). The supported version that is affected is 9.3.6. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to c

• 9.1 Critical severity

  Oracle Agile PLM: Improper Privilege Management

  CVE-2026-83260Sep 15, 2026Oracle

  Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Event Java PX). The supported version that is affected is 9.3.6. Easily exploitable vulnerability allows high privileged attacker with network access via T3, IIOP to compromise Or

• 8.8 High severity

  Oracle Agile PLM: Improper Access Control

  CVE-2026-71046Aug 18, 2026Oracle

  Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Security). The supported version that is affected is 9.3.6. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Agile PLM

• 8.8 High severity

  Oracle Agile PLM: Improper Access Control

  CVE-2026-71045Aug 18, 2026Oracle

  Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Security). The supported version that is affected is 9.3.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Agil

• 8.8 High severity

  Oracle Agile PLM: Improper Access Control

  CVE-2026-71044Aug 18, 2026Oracle

  Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Export). The supported version that is affected is 9.3.6. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Agile P

• 7.5 High severity

  Oracle Agile PLM: Improper Access Control

  CVE-2026-71043Aug 18, 2026Oracle

  Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Security). The supported version that is affected is 9.3.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Agil

• 8.1 High severity

  Oracle Agile PLM: Improper Access Control

  CVE-2026-71042Aug 18, 2026Oracle

  Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: PGC / Excel Plugin). The supported version that is affected is 9.3.6. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Or

• 7.0 High severity

  Oracle Agile PLM: Improper Access Control

  CVE-2026-71041Aug 18, 2026Oracle

  Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Gantt Chart). The supported version that is affected is 9.3.6. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Agil

• 9.8 Critical severity

  Oracle Agile PLM: Improper Access Control

  CVE-2026-71040Aug 18, 2026Oracle

  Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Security). The supported version that is affected is 9.3.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Agil

• 8.8 High severity

  Oracle Agile PLM: Improper Access Control

  CVE-2026-71039Aug 18, 2026Oracle

  Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Application Server). The supported version that is affected is 9.3.6. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Or

• 7.4 High severity

  Oracle Agile PLM: Improper Access Control

  CVE-2026-61173Jul 21, 2026Oracle

  Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Security). The supported version that is affected is 9.3.6. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Ag

• 7.5 High severity

  Oracle Agile PLM: Improper Access Control

  CVE-2026-61172Jul 21, 2026Oracle

  Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Security). The supported version that is affected is 9.3.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Agil

• 9.1 Critical severity

  Oracle Agile PLM: Improper Access Control

  CVE-2026-61171Jul 21, 2026Oracle

  Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Security). The supported version that is affected is 9.3.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Agil

• 8.1 High severity

  Oracle Agile PLM: Improper Access Control

  CVE-2026-61170Jul 21, 2026Oracle

  Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Security). The supported version that is affected is 9.3.6. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Ag

• 8.8 High severity

  Oracle Agile PLM: Improper Privilege Management

  CVE-2026-61168Jul 21, 2026Oracle

  Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Security). The supported version that is affected is 9.3.6. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Agile

• 9.8 Critical severity

  Oracle Agile PLM: Improper Access Control

  CVE-2026-61167Jul 21, 2026Oracle

  Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Security). The supported version that is affected is 9.3.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Agil

• 8.8 High severity

  Oracle Agile PLM: Improper Access Control

  CVE-2026-61166Jul 21, 2026Oracle

  Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: User and User Group). The supported version that is affected is 9.3.6. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise O

• 9.8 Critical severity

  Oracle Agile PLM: Improper Authentication

  CVE-2026-46859Jun 17, 2026Oracle

  Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Security). The supported version that is affected is 9.3.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Agil

• 7.5 High severity

  Oracle Agile PLM: Exposure of Sensitive Information to an Unauthorized Actor

  CVE-2026-21940Jan 20, 2026Oracle

  Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: User and User Group). The supported version that is affected is 9.3.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise