CVE-2026-91520

Vulnerability in Oracle Agile Product Lifecycle Management for Process (component: Product Quality Management) affecting version 6.2.4. An easily exploitable HTTP attack by an unauthenticated attacker allows unauthorized access to critical data and update, insert or delete some data.

Vulnerability in Oracle Agile Product Lifecycle Management for Process (Product Quality Management component) affecting version 6.2.4. A difficult-to-exploit HTTP attack allows an unauthenticated network attacker to create, delete or modify critical data and gain unauthorized access to data.

Vulnerability in Oracle Agile Product Lifecycle Management for Process (Product Quality Management component) affecting version 6.2.4. A difficult-to-exploit HTTP attack allows a low-privileged attacker to take over the system.

Vulnerability in Oracle Agile Product Lifecycle Management for Process (Product Quality Management component) affecting version 6.2.4. An easily exploitable HTTP attack allows an unauthenticated attacker to gain unauthorized access to critical data and to update, insert or delete some data.

Vulnerability in Oracle Agile Product Lifecycle Management for Process (version 6.2.4) allows a low-privileged attacker with network access via HTTP to take over the application. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts).

Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Product Quality Management), affecting version 6.2.4. An easily exploitable flaw allows a low-privileged attacker with HTTP network access to take over the application.

Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Product Quality Management), affecting version 6.2.4. A difficult-to-exploit flaw allows a low-privileged attacker with HTTP network access to take over the application.

Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Product Quality Management), affecting version 6.2.4. An easily exploitable flaw allows a high-privileged attacker with HTTP network access to take over the application.

Vulnerability in Oracle Agile Product Lifecycle Management for Process (Product Quality Management component) affecting version 6.2.4. An unauthenticated attacker with network access via HTTP can create, delete, or modify critical data and gain unauthorized access to it. CVSS 9.1.

Vulnerability in Oracle Agile Product Lifecycle Management for Process (Product Quality Management component) affecting version 6.2.4. An unauthenticated attacker with network access via HTTP, requiring user interaction, can create, delete, or modify critical data and gain unauthorized access to it. CVSS 9.3.