CVE-2026-101602

Vulnerability in Oracle Agile Product Lifecycle Management for Process (component: Product Quality Management) affects version 6.2.4. A low-privileged attacker with network access via HTTP can easily exploit this vulnerability, leading to takeover of the application.

Vulnerability in Oracle Agile Product Lifecycle Management for Process (Supply Chain Relationship Mgmt component) affects version 6.2.4. An easily exploitable network attack by a low-privileged user requires human interaction and can result in unauthorized update, insert or delete access to some data and read access to a subset of data, with possible impact on additional products (scope change).

Vulnerability in Oracle Agile Product Lifecycle Management for Process (component Product Quality Management) version 6.2.4. Easily exploitable by a low-privileged attacker with network access via HTTP, leading to takeover of the system.

Vulnerability in Oracle Agile Product Lifecycle Management for Process (Product Quality Management component) affects version 6.2.4. An easily exploitable network attack by a low-privileged user requires human interaction and can result in unauthorized update, insert or delete access to some data and read access to a subset of data, with possible impact on additional products (scope change).

Vulnerability in Oracle Agile Product Lifecycle Management for Process (Product Quality Management component) affects version 6.2.4. An easily exploitable network attack by a low-privileged user can result in unauthorized read access to a subset of data.

Vulnerability in Oracle Agile Product Lifecycle Management for Process (Product Quality Management component) version 6.2.4. A difficult-to-exploit HTTP attack by an unauthenticated attacker can lead to takeover of the component.

Vulnerability in Oracle Agile Product Lifecycle Management for Process (Product Quality Management component) affecting version 6.2.4. An unauthenticated attacker with network access via HTTP can create, delete, or modify critical data and gain unauthorized access to it. CVSS 9.1.

Vulnerability in Oracle Agile Product Lifecycle Management for Process (Product Quality Management component) affecting version 6.2.4. An unauthenticated attacker with network access via HTTP, requiring user interaction, can create, delete, or modify critical data and gain unauthorized access to it. CVSS 9.3.

Vulnerability in Oracle Agile Product Lifecycle Management for Process (Product Quality Management component) allows an unauthenticated attacker via HTTP to unauthorizedly create, delete, or modify critical data and gain full access to all data.

Vulnerability in Oracle Agile Product Lifecycle Management for Process (component: Reporting). Affected version is 6.2.4. Easily exploitable by unauthenticated attacker with network access via HTTP, potentially leading to takeover of Oracle Agile Product Lifecycle Management for Process. CVSS 9.8.