CVE-2026-101593

The record

Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Product Quality Management). The supported version that is affected is 6.2.4. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Agile Product Lifecycle Management for Process. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Agile Product Lifecycle Management for Process accessible data as well as unauthorized access to critical data or complete access to all Oracle Agile Product Lifecycle Management for Process accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Agile Product Lifecycle Management for Process. CVSS 3.1 Base Score 8.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L).

Affected packages

Related vulnerabilities

• CVE-2026-63341 Aedes is an MQTT broker that can run on any stream server. CWE-400
• CVE-2026-62300 Filecoin Pin is an IPFS Pinning Service API implementation that pins to Filecoin's PDP… CWE-400
• CVE-2026-62254 LibreDWG is a free C library to read and write DWG files. CWE-400
• CVE-2026-62250 LibreDWG is a free C library to read and write DWG files. CWE-400
• CVE-2026-62303 Pistache is a high-performance REST toolkit written in C++. CWE-400
• CVE-2026-62160 Daptin is a GraphQL/JSON-API headless CMS. CWE-400
• CVE-2026-61848 Crass is a Ruby CSS parser that's fully compliant with the CSS Syntax Level 3… CWE-400
• CVE-2026-61854 VoiceSentinel is a real-time voice moderation system for Minecraft servers. CWE-400