High WID-SEC-2026-2450 38 CVEs

Oracle Supply Chain: Mehrere Schwachstellen

Published Jul 21, 2026 · Updated Jul 21, 2026 · de-DE

Vendor: Oracle Product: Supply Chain Platform: Linux Platform: Windows

Summary

Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Oracle Supply Chain ausnutzen, um die Vertraulichkeit, Integrität und Verfügbarkeit zu gefährden.

Product

Die Oracle Supply Chain ist eine Sammlung von Applikationen für verschiedene Zwecke.

Vulnerabilities 38

Critical 9.9

CVE-2026-61041

Vulnerability in the Oracle Demantra Demand Management product of Oracle Supply Chain (component: Product Security). Su…

Oracle Oracle Demantra Demand Management

Jul 21, 2026
Critical 9.8

CVE-2026-61167

Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Security). The supported version that …

Oracle Oracle Agile PLM

Jul 21, 2026
Critical 9.8

CVE-2026-61178

Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: I…

Oracle Oracle Agile Product Lifecycle Management for Process

Jul 21, 2026
Critical 9.8

CVE-2026-61183

Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: R…

Oracle Oracle Agile Product Lifecycle Management for Process

Jul 21, 2026
Critical 9.4

CVE-2026-61186

Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Install). The …

Oracle Oracle Agile Engineering Data Management

Jul 21, 2026
Critical 9.3

CVE-2026-61175

Vulnerability in the Oracle Product Lifecycle Analytics product of Oracle Supply Chain (component: Installation Issues)…

Oracle Oracle Product Lifecycle Analytics

Jul 21, 2026
Critical 9.1

CVE-2026-61171

Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Security). The supported version that …

Oracle Oracle Agile PLM

Jul 21, 2026
Critical 9.1

CVE-2026-61184

Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: P…

Oracle Oracle Agile Product Lifecycle Management for Process

Jul 21, 2026
Critical 9.0

CVE-2026-61174

Vulnerability in the Oracle Product Lifecycle Analytics product of Oracle Supply Chain (component: Installation Issues)…

Oracle Oracle Product Lifecycle Analytics

Jul 21, 2026
High 8.8

CVE-2026-60583

Vulnerability in the Oracle Transportation Management product of Oracle Supply Chain (component: Install). The supporte…

Oracle Oracle Transportation Management

Jul 21, 2026
High 8.8

CVE-2026-61166

Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: User and User Group). The supported ve…

Oracle Oracle Agile PLM

Jul 21, 2026
High 8.8

CVE-2026-61168

Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Security). The supported version that …

Oracle Oracle Agile PLM

Jul 21, 2026
High 8.8

CVE-2026-61179

Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: P…

Oracle Oracle Agile Product Lifecycle Management for Process

Jul 21, 2026
High 8.8

CVE-2026-61180

Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: P…

Oracle Oracle Agile Product Lifecycle Management for Process

Jul 21, 2026
High 8.8

CVE-2026-62516

Vulnerability in the Oracle Demantra Demand Management product of Oracle Supply Chain (component: Product Security). Su…

Oracle Oracle Demantra Demand Management

Jul 21, 2026
High 8.1

CVE-2026-61170

Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Security). The supported version that …

Oracle Oracle Agile PLM

Jul 21, 2026
High 7.6

CVE-2026-60584

Vulnerability in the Oracle Transportation Management product of Oracle Supply Chain (component: CSV Management). The s…

Oracle Oracle Transportation Management

Jul 21, 2026
High 7.6

CVE-2026-61181

Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: P…

Oracle Oracle Agile Product Lifecycle Management for Process

Jul 21, 2026
High 7.5

CVE-2026-34487

Apache Tomcat: Cloud membership for clustering component exposed the Kubernetes bearer token

Insertion of Sensitive Information into Log File vulnerability in the cloud membership for clustering component of Apache Tomcat exposed the Kubernetes bearer token. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.20, from 10.1.0-M1 through 10.1…

Apache Software Foundation Apache Tomcat thingsboard-tb-node thingsboard-tb-mqtt-transport Debian Ubuntu Wolfi Maven

Apr 9, 2026
High 7.5

CVE-2026-61172

Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Security). The supported version that …

Oracle Oracle Agile PLM

Jul 21, 2026
High 7.5

CVE-2026-61188

Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: I…

Oracle Oracle Agile Product Lifecycle Management for Process

Jul 21, 2026
High 7.4

CVE-2026-61173

Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Security). The supported version that …

Oracle Oracle Agile PLM

Jul 21, 2026
High 7.4

CVE-2026-61185

Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: I…

Oracle Oracle Agile Product Lifecycle Management for Process

Jul 21, 2026
Medium 6.7

CVE-2026-61176

Vulnerability in the Oracle Product Lifecycle Analytics product of Oracle Supply Chain (component: Installation Issues)…

Oracle Oracle Product Lifecycle Analytics

Jul 21, 2026
Medium 6.7

CVE-2026-61182

Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: D…

Oracle Oracle Agile Product Lifecycle Management for Process

Jul 21, 2026
Medium 6.5

CVE-2026-47009

Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Folders, Files & Attachments). The sup…

Oracle Oracle Agile PLM

Jul 21, 2026
Medium 6.5

CVE-2026-60433

Vulnerability in the Oracle Transportation Management product of Oracle Supply Chain (component: Integration). The supp…

Oracle Oracle Transportation Management

Jul 21, 2026
Medium 6.5

CVE-2026-61169

Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Security). The supported version that …

Oracle Oracle Agile PLM

Jul 21, 2026
Medium 6.5

CVE-2026-61189

Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Install). The …

Oracle Oracle Agile Engineering Data Management

Jul 21, 2026
Medium 6.5

CVE-2026-61194

Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Core). The sup…

Oracle Oracle Agile Engineering Data Management

Jul 21, 2026
Medium 6.5

CVE-2026-61195

Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Core). The sup…

Oracle Oracle Agile Engineering Data Management

Jul 21, 2026
Medium 6.4

CVE-2026-61190

Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Install). The …

Oracle Oracle Agile Engineering Data Management

Jul 21, 2026
Medium 6.3

CVE-2025-68161

Apache Log4j Core: Missing TLS hostname verification in Socket appender

The Socket Appender in Apache Log4j Core versions 2.0-beta9 through 2.25.2 does not perform TLS hostname verification of the peer certificate, even when the verifyHostName https://logging.apache.org/log4j/2.x/manual/appenders/network.html#SslConfiguration-att…

Apache Software Foundation Apache Log4j Core airflow-3 celeborn-0.6 Debian Ubuntu Wolfi Maven

Dec 18, 2025
Medium 6.3

CVE-2026-34481

Apache Log4j JSON Template Layout: Improper serialization of non-finite floating-point values in JsonTemplateLayout

Apache Log4j's JsonTemplateLayout https://logging.apache.org/log4j/2.x/manual/json-template-layout.html , in versions up to and including 2.25.3, produces invalid JSON output when log events contain non-finite floating-point values (NaN, Infinity, or -Infinit…

Apache Software Foundation Apache Log4j JSON Template Layout spark-4.0-scala-2.13 spark-4.1-scala-2.13 Debian Ubuntu Wolfi Maven

Apr 10, 2026
Medium 5.3

CVE-2026-61192

Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Install). The …

Oracle Oracle Agile Engineering Data Management

Jul 21, 2026
Medium 4.4

CVE-2026-61191

Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Document Manag…

Oracle Oracle Agile Engineering Data Management

Jul 21, 2026
Medium 4.3

CVE-2026-60434

Vulnerability in the Oracle Transportation Management product of Oracle Supply Chain (component: Authentication). The s…

Oracle Oracle Transportation Management

Jul 21, 2026
Low 2.8

CVE-2026-61187

Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Install). The …

Oracle Oracle Agile Engineering Data Management

Jul 21, 2026

Revision history

2026-07-21 #1
Initiale Fassung

References

Oracle Critical Patch Update Advisory - July 2026 - Appendix Oracle Supply Chain vom 2026-07-21
https://www.oracle.com/security-alerts/cpujul2026.html#AppendixSCP