CVE-2026-61183: Critical severity Oracle Agile Product Lifecycle Management for Process vulnerability
Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Reporting). The supported version that is affected is 6.2.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Agile Product Lifecycle Management for Process. Successful attacks of this vulnerability can result in takeover of Oracle Agile Product Lifecycle Management for Process. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-61183?
The severity of CVE-2026-61183 is critical with a CVSS score of 9.8.
What is the risk associated with CVE-2026-61183?
CVE-2026-61183 has a risk rating of 86, indicating it is a significant threat.
Which version of Oracle Agile Product Lifecycle Management for Process is affected by CVE-2026-61183?
CVE-2026-61183 affects version 6.2.4 of Oracle Agile Product Lifecycle Management for Process.
How can an attacker exploit CVE-2026-61183?
An unauthenticated attacker can exploit CVE-2026-61183 with network access via HTTP.
What are the consequences of a successful exploit of CVE-2026-61183?
Successful exploitation of CVE-2026-61183 can compromise the integrity, confidentiality, and availability of Oracle Agile.