Unauthorized Access Vulnerability in Oracle Agile Product Lifecycle Management for Process

CVE-2026-91565

What is CVE-2026-91565?

A vulnerability in Oracle Agile Product Lifecycle Management for Process could allow an attacker with low privileges and network access via HTTP to exploit critical security weaknesses. Successful exploitation may grant the attacker unauthorized access to sensitive data, enabling them to perform unauthorized operations such as updates, inserts, or deletions of accessible data. Additionally, this vulnerability may allow an attacker to partially disrupt the services of the application, which may impact the availability of the product.

References