Threat Intelligence Database

CVE-2026-61185 is a high-severity vulnerability in Oracle Agile Product Lifecycle Management for Process version 6.2.4. It allows an unauthenticated attacker with access to the physical communication segment of the hardware running the product to compromise the system. Successful exploitation can lead to unauthorized access to critical or all accessible data within the product. The vulnerability has a CVSS 3.1 base score of 7.4, indicating significant confidentiality impact with no integrity or availability impact. The vulnerability may also affect additional Oracle products due to scope change. Oracle has published a Critical Patch Update advisory in July 2026 covering multiple vulnerabilities but does not explicitly confirm a patch for this specific issue in the advisory content provided.

CVE-2026-61184 is a critical vulnerability in Oracle Agile Product Lifecycle Management for Process version 6.2.4. It allows an unauthenticated attacker with network access via HTTP to compromise the product, potentially resulting in unauthorized creation, deletion, or modification of critical or all accessible data. The vulnerability has a CVSS 3.1 base score of 9.1, indicating high confidentiality and integrity impacts without affecting availability.

CVE-2026-61183 is a critical vulnerability in Oracle Agile Product Lifecycle Management for Process version 6.2.4. It allows an unauthenticated attacker with network access via HTTP to fully compromise the affected product, resulting in complete takeover. The vulnerability impacts confidentiality, integrity, and availability with a CVSS 3.1 base score of 9.8. Oracle has acknowledged this issue in their July 2026 Critical Patch Update advisory but has not explicitly stated patch availability for this specific version in the provided advisory content.

CVE-2026-61182 is a vulnerability in Oracle Agile Product Lifecycle Management for Process version 6.2.4 affecting the Data Import component. It allows a high privileged attacker with logon access to the infrastructure to compromise the product, potentially leading to full takeover. The CVSS 3.1 base score is 6.7, indicating a medium severity with high confidentiality, integrity, and availability impacts. Oracle has included this vulnerability in its July 2026 Critical Patch Update advisory but has not explicitly stated a patch or fix for this specific version in the advisory content provided.

CVE-2026-61181 is a high-severity vulnerability in Oracle Agile Product Lifecycle Management for Process version 6.2.4. It allows a low privileged attacker with network access via HTTP to compromise the product, requiring user interaction from another person. Successful exploitation can lead to unauthorized access to critical data and unauthorized modification of some data within the product. The vulnerability has a CVSS 3.1 base score of 7.6, indicating significant confidentiality and integrity impacts. The vulnerability may also affect additional Oracle products due to scope change. Oracle has published a Critical Patch Update advisory referencing this vulnerability but does not explicitly confirm patch availability for this specific version.

CVE-2026-61180 is a high-severity vulnerability in Oracle Agile Product Lifecycle Management for Process version 6.2.4. It allows a low privileged attacker with network access via HTTP to compromise the product, potentially leading to full takeover. The vulnerability impacts confidentiality, integrity, and availability with a CVSS 3.1 base score of 8.8. Oracle has published a Critical Patch Update advisory referencing this vulnerability but does not explicitly confirm patch availability for this specific version in the provided advisory content.

CVE-2026-61179 is a high-severity vulnerability in Oracle Agile Product Lifecycle Management for Process version 6.2.4. It allows a low privileged attacker with network access via HTTP to compromise the product, potentially leading to full takeover. The vulnerability impacts confidentiality, integrity, and availability with a CVSS 3.1 base score of 8.8. Oracle has acknowledged the issue in their July 2026 Critical Patch Update advisory but has not explicitly detailed a patch for this specific version in the provided advisory content.

CVE-2026-61178 is a critical vulnerability in Oracle Agile Product Lifecycle Management for Process version 6.2.4. It allows an unauthenticated attacker with network access via TCP to fully compromise the affected product, resulting in complete takeover. The vulnerability has a CVSS 3.1 base score of 9.8, indicating high impact on confidentiality, integrity, and availability. Oracle has included this vulnerability in its July 2026 Critical Patch Update advisory, but specific patch details for this version are not explicitly stated in the advisory content.