CVE-2026-71041: High severity Oracle Oracle Agile PLM (Gantt Chart) vulnerability
Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Gantt Chart). The supported version that is affected is 9.3.6. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Agile PLM executes to compromise Oracle Agile PLM. Successful attacks of this vulnerability can result in takeover of Oracle Agile PLM. CVSS 3.1 Base Score 7.0 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H).
Affected Software
Event History
Frequently Asked Questions
Who is exposed to this vulnerability?
Oracle Agile PLM deployments using the Gantt Chart component on supported version 9.3.6 are affected. Exploitation requires access to the infrastructure where Oracle Agile PLM is running.
What level of access does an attacker need?
An attacker must be able to log on to the Oracle Agile PLM infrastructure with low privileges. No user interaction is required, but exploitation is rated as difficult.
What is the potential impact of successful exploitation?
Successful exploitation can allow takeover of Oracle Agile PLM, with high impacts to confidentiality, integrity, and availability.