Oracle Product Lifecycle Analytics vulnerabilities

11 known vulnerabilities in Oracle Product Lifecycle Analytics from Oracle. 11 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

11vulnerabilities

3critical

8high

0exploited

8.4average CVSS score

Latest first

7.5 High severity
Oracle Product Lifecycle Analytics: Improper Neutralization of Special Elements used in an SQL Command
CVE-2026-101469Oct 20, 2026Oracle
Vulnerability in the Oracle Product Lifecycle Analytics product of Oracle Supply Chain (component: Installation Issues). The supported version that is affected is 3.6.1. Difficult to exploit vulnerability allows low privileged attacker with network access via
8.4 High severity
Oracle Product Lifecycle Analytics: Improper Access Control
CVE-2026-83264Sep 15, 2026Oracle
Vulnerability in the Oracle Product Lifecycle Analytics product of Oracle Supply Chain (component: Installation Issues). The supported version that is affected is 3.6.1. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastr
7.5 High severity
Oracle Product Lifecycle Analytics: Improper Privilege Management
CVE-2026-83263Sep 15, 2026Oracle
Vulnerability in the Oracle Product Lifecycle Analytics product of Oracle Supply Chain (component: Installation Issues). The supported version that is affected is 3.6.1. Difficult to exploit vulnerability allows low privileged attacker with network access via
7.5 High severity
Oracle Product Lifecycle Analytics: Improper Privilege Management
CVE-2026-83262Sep 15, 2026Oracle
Vulnerability in the Oracle Product Lifecycle Analytics product of Oracle Supply Chain (component: Installation Issues). The supported version that is affected is 3.6.1. Difficult to exploit vulnerability allows low privileged attacker with network access via
9.8 Critical severity
Oracle Product Lifecycle Analytics: Improper Authentication
CVE-2026-83261Sep 15, 2026Oracle
Vulnerability in the Oracle Product Lifecycle Analytics product of Oracle Supply Chain (component: Core). The supported version that is affected is 3.6.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromi
8.8 High severity
Oracle Product Lifecycle Analytics: Improper Access Control
CVE-2026-71051Aug 18, 2026Oracle
Vulnerability in the Oracle Product Lifecycle Analytics product of Oracle Supply Chain (component: Installation Issues). The supported version that is affected is 3.6.1. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastr
8.7 High severity
Oracle Product Lifecycle Analytics: Improper Access Control
CVE-2026-71050Aug 18, 2026Oracle
Vulnerability in the Oracle Product Lifecycle Analytics product of Oracle Supply Chain (component: Installation Issues). The supported version that is affected is 3.6.1. Easily exploitable vulnerability allows high privileged attacker with network access via O
8.5 High severity
Oracle Product Lifecycle Analytics: Improper Access Control
CVE-2026-71049Aug 18, 2026Oracle
Vulnerability in the Oracle Product Lifecycle Analytics product of Oracle Supply Chain (component: Installation Issues). The supported version that is affected is 3.6.1. Easily exploitable vulnerability allows low privileged attacker with network access via Or
7.6 High severity
Oracle Product Lifecycle Analytics: Improper Access Control
CVE-2026-71048Aug 18, 2026Oracle
Vulnerability in the Oracle Product Lifecycle Analytics product of Oracle Supply Chain (component: Installation Issues). The supported version that is affected is 3.6.1. Easily exploitable vulnerability allows low privileged attacker with network access via HT
9.3 Critical severity
Oracle Product Lifecycle Analytics: Exposure of Sensitive Information to an Unauthorized Actor
CVE-2026-61175Jul 21, 2026Oracle
Vulnerability in the Oracle Product Lifecycle Analytics product of Oracle Supply Chain (component: Installation Issues). The supported version that is affected is 3.6.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via H
9.0 Critical severity
Oracle Product Lifecycle Analytics: Improper Access Control
CVE-2026-61174Jul 21, 2026Oracle
Vulnerability in the Oracle Product Lifecycle Analytics product of Oracle Supply Chain (component: Installation Issues). The supported version that is affected is 3.6.1. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrast