Unauthenticated Access Vulnerability in Oracle Agile Product Lifecycle Management for Process
CVE-2026-61185

7.4HIGH

What is CVE-2026-61185?

This vulnerability affects Oracle's Agile Product Lifecycle Management for Process, specifically the version 6.2.4. An unauthenticated attacker with physical access to the communication segment may exploit this vulnerability to gain unauthorized access to sensitive data. While the impact is primarily on the Agile Product Lifecycle Management product, the ramifications could extend to related applications and systems. Attackers could potentially access critical or sensitive data stored within the system, posing severe security risks to organizations relying on this software.

Affected Version(s)

Oracle Agile Product Lifecycle Management for Process 6.2.4

References

CVSS V3.1

Score:
7.4
Severity:
HIGH
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.