top of page
perceptive_background_267k.jpg

Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Supplier Portal). The supported version …

Published:

19 January 2026 at 23:00:00

Alert date:

20 January 2026 at 23:02:09

Source:

nvd.nist.gov

Click to open the original link from this advisory

Enterprise Applications

Critical vulnerability in Oracle Agile Product Lifecycle Management for Process version 6.2.4 affecting the Supplier Portal component. The vulnerability allows unauthenticated attackers with network access via HTTP to completely compromise the system. This easily exploitable flaw can result in full takeover of the Oracle Agile PLM system. The vulnerability has a CVSS 3.1 Base Score of 9.8, indicating critical severity with high impact on confidentiality, integrity, and availability. The attack vector is network-based with low complexity and requires no privileges or user interaction.

Technical details

Mitigation steps:

Affected products:

Oracle Agile Product Lifecycle Management for Process

Related links:

Related CVE's:

Related threat actors:

IOC's:

This article was created with the assistance of AI technology by Perceptive.

© 2025 by Perceptive Security. All rights reserved.

email: info@perceptivesecurity.com

Disclaimer: Deze website toont informatie afkomstig van externe bronnen. Perceptive aanvaardt geen verantwoordelijkheid voor de inhoud, juistheid of volledigheid van deze informatie.

bottom of page