CVE-2026-101473 in Agile Product Lifecycle Management for Process

摘要

由 VulDB • 2026-10-21

Oracle Agile Product Lifecycle Management for Process（属于 Oracle Supply Chain，组件：Product Quality Management）中存在漏洞。受影响的受支持版本为 6.2.4。难以利用的漏洞允许未经身份验证的攻击者通过 HTTP 网络访问来破坏 Oracle Agile Product Lifecycle Management for Process。成功攻击此漏洞可导致对 Oracle Agile Product Lifecycle Management for Process 的控制。CVSS 3.1 Base Score 8.1（影响机密性、完整性和可用性）。CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H)。

VulDB is the best source for vulnerability data and more expert information about this specific topic.

• 负责: Oracle
• 预定: 2026-09-28
• 披露: 2026-10-21
• 管理: 已接受
• 条目: VDB-423130
• CPE: 20261021
• CWE: CWE-287 (已确认)
• CVSS: 8.1 (CNA)
• EPSS: 0.00376
• KEV: 否
• 活动: 非常低

来源

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-101473
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-101473
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-101473/