Oracle vulnerabilities

Latest Oracle vulnerabilities

• 7.6 High severity

  Oracle Agile Product Lifecycle Management for…: Improper Access Control

  CVE-2026-61181Jul 21, 2026Oracle

  Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Product Quality Management). The supported version that is affected is 6.2.4. Easily exploitable vulnerability allows low privileged attacker

• 8.8 High severity

  Oracle Agile Product Lifecycle Management for…: Improper Privilege Management

  CVE-2026-61180Jul 21, 2026Oracle

  Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Product Quality Management). The supported version that is affected is 6.2.4. Easily exploitable vulnerability allows low privileged attacker

• 8.8 High severity

  Oracle Agile Product Lifecycle Management for…: Improper Privilege Management

  CVE-2026-61179Jul 21, 2026Oracle

  Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Product Quality Management). The supported version that is affected is 6.2.4. Easily exploitable vulnerability allows low privileged attacker

• 9.8 Critical severity

  Oracle Agile Product Lifecycle Management for…: Improper Authentication

  CVE-2026-61178Jul 21, 2026Oracle

  Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Installation). The supported version that is affected is 6.2.4. Easily exploitable vulnerability allows unauthenticated attacker with network

• 9.3 Critical severity

  Oracle Product Lifecycle Analytics: Exposure of Sensitive Information to an Unauthorized Actor

  CVE-2026-61175Jul 21, 2026Oracle

  Vulnerability in the Oracle Product Lifecycle Analytics product of Oracle Supply Chain (component: Installation Issues). The supported version that is affected is 3.6.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via H

• 9.0 Critical severity

  Oracle Product Lifecycle Analytics: Improper Access Control

  CVE-2026-61174Jul 21, 2026Oracle

  Vulnerability in the Oracle Product Lifecycle Analytics product of Oracle Supply Chain (component: Installation Issues). The supported version that is affected is 3.6.1. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrast

• 7.4 High severity

  Oracle Agile PLM: Improper Access Control

  CVE-2026-61173Jul 21, 2026Oracle

  Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Security). The supported version that is affected is 9.3.6. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Ag

• 7.5 High severity

  Oracle Agile PLM: Improper Access Control

  CVE-2026-61172Jul 21, 2026Oracle

  Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Security). The supported version that is affected is 9.3.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Agil

• 9.1 Critical severity

  Oracle Agile PLM: Improper Access Control

  CVE-2026-61171Jul 21, 2026Oracle

  Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Security). The supported version that is affected is 9.3.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Agil

• 8.1 High severity

  Oracle Agile PLM: Improper Access Control

  CVE-2026-61170Jul 21, 2026Oracle

  Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Security). The supported version that is affected is 9.3.6. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Ag

• 8.8 High severity

  Oracle Agile PLM: Improper Privilege Management

  CVE-2026-61168Jul 21, 2026Oracle

  Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Security). The supported version that is affected is 9.3.6. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Agile

• 9.8 Critical severity

  Oracle Agile PLM: Improper Access Control

  CVE-2026-61167Jul 21, 2026Oracle

  Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Security). The supported version that is affected is 9.3.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Agil

• 8.8 High severity

  Oracle Agile PLM: Improper Access Control

  CVE-2026-61166Jul 21, 2026Oracle

  Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: User and User Group). The supported version that is affected is 9.3.6. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise O

• 7.1 High severity

  Oracle Commerce Guided Search Platform Services: Exposure of Sensitive Information to an Unauthorized Actor

  CVE-2026-61165Jul 21, 2026Oracle

  Vulnerability in the Oracle Commerce Guided Search Platform Services product of Oracle Commerce (component: Forge). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP t

• 7.4 High severity

  Oracle Commerce Guided Search / Oracle…: Improper Access Control

  CVE-2026-61164Jul 21, 2026Oracle

  Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acquisition System). The supported version that is affected is 11.4.0. Difficult to exploit vulnerability allows unauthentica

• 8.1 High severity

  Oracle Commerce Guided Search / Oracle…: Improper Authentication

  CVE-2026-61163Jul 21, 2026Oracle

  Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Forge). The supported version that is affected is 11.4.0. Difficult to exploit vulnerability allows unauthenticated attacker with net

• 7.1 High severity

  Oracle Commerce Guided Search / Oracle…: Improper Access Control

  CVE-2026-61162Jul 21, 2026Oracle

  Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Application Controller). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows low privile

• 9.8 Critical severity

  Oracle Commerce Guided Search / Oracle…: Improper Access Control

  CVE-2026-61161Jul 21, 2026Oracle

  Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Application Controller). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthentic

• 8.1 High severity

  Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager…

  CVE-2026-61160Jul 21, 2026Oracle

  Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Manager). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows low privileged attacke

• 7.5 High severity

  Oracle Commerce Guided Search / Oracle…: Exposure of Sensitive Information to an Unauthorized Actor

  CVE-2026-61159Jul 21, 2026Oracle

  Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Manager). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attack

• 7.5 High severity

  Oracle Commerce Guided Search / Oracle…: Improper Access Control

  CVE-2026-61158Jul 21, 2026Oracle

  Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Manager). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attack

• 7.5 High severity

  Oracle Commerce Guided Search / Oracle…: Improper Access Control

  CVE-2026-61157Jul 21, 2026Oracle

  Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Manager). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attack

• 9.1 Critical severity

  Oracle Commerce Guided Search Platform Services: Improper Access Control

  CVE-2026-61156Jul 21, 2026Oracle

  Vulnerability in the Oracle Commerce Guided Search Platform Services product of Oracle Commerce (component: Forge). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS

• 9.1 Critical severity

  Oracle Commerce Guided Search Platform Services: Improper Access Control

  CVE-2026-61155Jul 21, 2026Oracle

  Vulnerability in the Oracle Commerce Guided Search Platform Services product of Oracle Commerce (component: Forge). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP

• 9.8 Critical severity

  Oracle Commerce Guided Search Platform Services: Improper Privilege Management

  CVE-2026-61154Jul 21, 2026Oracle

  Vulnerability in the Oracle Commerce Guided Search Platform Services product of Oracle Commerce (component: Forge). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP

• 9.1 Critical severity

  Oracle Commerce Guided Search / Oracle…: Improper Access Control

  CVE-2026-61153Jul 21, 2026Oracle

  Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Manager). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attack

• 7.1 High severity

  Oracle Commerce Guided Search / Oracle…: Improper Access Control

  CVE-2026-61151Jul 21, 2026Oracle

  Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Manager). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows low privileged attacke

• 8.1 High severity

  Oracle Commerce Guided Search / Oracle…: Improper Access Control

  CVE-2026-61150Jul 21, 2026Oracle

  Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Manager). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows low privileged attacke

• 8.8 High severity

  Oracle Commerce Guided Search / Oracle…: Improper Privilege Management

  CVE-2026-61149Jul 21, 2026Oracle

  Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Manager). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows low privileged attacke

• 8.8 High severity

  Oracle Commerce Guided Search / Oracle…: Improper Access Control

  CVE-2026-61148Jul 21, 2026Oracle

  Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Manager). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows low privileged attacke

• 9.9 Critical severity

  Oracle Commerce Guided Search / Oracle…: Improper Privilege Management

  CVE-2026-61146Jul 21, 2026Oracle

  Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acquisition System). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows low privileged

• 9.8 Critical severity

  Oracle Commerce Guided Search / Oracle…: Improper Access Control

  CVE-2026-61145Jul 21, 2026Oracle

  Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acquisition System). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticate

• 7.7 High severity

  Oracle Payroll: Improper Access Control

  CVE-2026-61142Jul 21, 2026Oracle

  Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to co

• 7.5 High severity

  Oracle Advanced Benefits: Improper Privilege Management

  CVE-2026-61141Jul 21, 2026Oracle

  Vulnerability in the Oracle Advanced Benefits product of Oracle E-Business Suite (component: Affordable Care Act). Supported versions that are affected are 12.2.7-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access vi

• 9.8 Critical severity

  Oracle WebCenter Sites: Improper Access Control

  CVE-2026-61140Jul 21, 2026Oracle

  Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). The supported version that is affected is 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to

• 7.5 High severity

  Oracle Complex Maintenance, Repair and Overhaul: Improper Access Control

  CVE-2026-61138Jul 21, 2026Oracle

  Vulnerability in the Oracle Complex Maintenance, Repair and Overhaul product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows unauthenticated attacke

• 8.1 High severity

  Oracle Commerce Platform: Improper Authentication

  CVE-2026-61137Jul 21, 2026Oracle

  Vulnerability in the Oracle Commerce Platform product of Oracle Commerce (component: Dynamo Application Framework). The supported version that is affected is 11.4.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTT

• 7.3 High severity

  Oracle Commerce Platform: Improper Access Control

  CVE-2026-61136Jul 21, 2026Oracle

  Vulnerability in the Oracle Commerce Platform product of Oracle Commerce (component: Dynamo Application Framework). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP

• 7.4 High severity

  Oracle Commerce Platform: Improper Access Control

  CVE-2026-61135Jul 21, 2026Oracle

  Vulnerability in the Oracle Commerce Platform product of Oracle Commerce (component: Dynamo Application Framework). The supported version that is affected is 11.4.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTT

• 7.5 High severity

  Oracle Commerce Platform: Exposure of Sensitive Information to an Unauthorized Actor

  CVE-2026-61133Jul 21, 2026Oracle

  Vulnerability in the Oracle Commerce Platform product of Oracle Commerce (component: Dynamo Application Framework). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via LDAP