Vulnerability in Oracle Agile Product Lifecycle Management for Process

CVE-2026-101602

What is CVE-2026-101602?

An access control vulnerability has been identified in Oracle's Agile Product Lifecycle Management for Process, specifically within the Product Quality Management component. This vulnerability can be exploited by an attacker with low privileges who has network access via HTTP, enabling them to potentially compromise the system. Although successful exploitation necessitates some level of human interaction, the implications include unauthorized takeover of the Agile Product Lifecycle Management system. It’s crucial for organizations to mitigate this risk to safeguard the integrity and confidentiality of their product lifecycle management processes.

References