High WID-SEC-2026-2899 46 CVEs

Oracle Supply Chain: Mehrere Schwachstellen

Published Aug 18, 2026 · Updated Aug 18, 2026 · de-DE

Vendor: Oracle Product: Supply Chain Platform: Linux Platform: Windows

Summary

Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Oracle Supply Chain ausnutzen, um die Vertraulichkeit, Integrität und Verfügbarkeit zu gefährden.

Product

Die Oracle Supply Chain ist eine Sammlung von Applikationen für verschiedene Zwecke.

Vulnerabilities 46

Critical 9.8

CVE-2022-37434 Public exploit EPSS 19%

zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip heade…

openjpeg2 rsync fltk gdal Debian Ubuntu Azure Linux Alpine Wolfi

Aug 5, 2022
Critical 9.8

CVE-2026-71040

Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Security). The supported version that …

Oracle Oracle Agile PLM

Aug 18, 2026
Critical 9.6

CVE-2026-70846

Vulnerability in the Oracle Demand Planning product of Oracle Supply Chain (component: Internal Operations). Supported …

Oracle Oracle Demand Planning

Aug 18, 2026
High 8.8

CVE-2026-71039

Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Application Server). The supported ver…

Oracle Oracle Agile PLM

Aug 18, 2026
High 8.8

CVE-2026-71044

Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Export). The supported version that is…

Oracle Oracle Agile PLM

Aug 18, 2026
High 8.8

CVE-2026-71045

Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Security). The supported version that …

Oracle Oracle Agile PLM

Aug 18, 2026
High 8.8

CVE-2026-71046

Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Security). The supported version that …

Oracle Oracle Agile PLM

Aug 18, 2026
High 8.8

CVE-2026-71051

Vulnerability in the Oracle Product Lifecycle Analytics product of Oracle Supply Chain (component: Installation Issues)…

Oracle Oracle Product Lifecycle Analytics

Aug 18, 2026
High 8.8

CVE-2026-71052

Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Web Services S…

Oracle Oracle Agile Engineering Data Management

Aug 18, 2026
High 8.8

CVE-2026-71067

Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply Chain (component: CAX Client). The suppor…

Oracle Oracle Agile PLM MCAD Connector

Aug 18, 2026
High 8.7

CVE-2026-71050

Vulnerability in the Oracle Product Lifecycle Analytics product of Oracle Supply Chain (component: Installation Issues)…

Oracle Oracle Product Lifecycle Analytics

Aug 18, 2026
High 8.5

CVE-2026-71049

Vulnerability in the Oracle Product Lifecycle Analytics product of Oracle Supply Chain (component: Installation Issues)…

Oracle Oracle Product Lifecycle Analytics

Aug 18, 2026
High 8.4

CVE-2024-10095

Progress UI for WPF format provider unsafe deserialization vulnerability

In Progress Telerik UI for WPF versions prior to 2024 Q4 (2024.4.1213), a code execution attack is possible through an insecure deserialization vulnerability.

Progress Software Telerik UI for WPF

Dec 16, 2024
High 8.2

CVE-2026-70703

Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Engineering Co…

Oracle Oracle Agile Engineering Data Management

Aug 18, 2026
High 8.2

CVE-2026-70852

Vulnerability in the Oracle Demand Planning product of Oracle Supply Chain (component: Internal Operations). Supported …

Oracle Oracle Demand Planning

Aug 18, 2026
High 8.1

CVE-2026-71042

Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: PGC / Excel Plugin). The supported ver…

Oracle Oracle Agile PLM

Aug 18, 2026
High 8.1

CVE-2026-71053

Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Web Services S…

Oracle Oracle Agile Engineering Data Management

Aug 18, 2026
High 8.1

CVE-2026-71068

Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply Chain (component: CAX Client). The suppor…

Oracle Oracle Agile PLM MCAD Connector

Aug 18, 2026
High 7.6

CVE-2026-71048

Vulnerability in the Oracle Product Lifecycle Analytics product of Oracle Supply Chain (component: Installation Issues)…

Oracle Oracle Product Lifecycle Analytics

Aug 18, 2026
High 7.5

CVE-2026-70691

Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Engineering Co…

Oracle Oracle Agile Engineering Data Management

Aug 18, 2026
High 7.5

CVE-2026-71043

Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Security). The supported version that …

Oracle Oracle Agile PLM

Aug 18, 2026
High 7.5

CVE-2026-71069

Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply Chain (component: CAX Client). The suppor…

Oracle Oracle Agile PLM MCAD Connector

Aug 18, 2026
High 7.0

CVE-2026-70697

Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Engineering Co…

Oracle Oracle Agile Engineering Data Management

Aug 18, 2026
High 7.0

CVE-2026-71041

Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Gantt Chart). The supported version th…

Oracle Oracle Agile PLM

Aug 18, 2026
Medium 6.7

CVE-2026-70698

Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Install). The …

Oracle Oracle Agile Engineering Data Management

Aug 18, 2026
Medium 6.5

CVE-2022-40150

Stack Buffer Overflow in Jettison

Those using Jettison to parse untrusted XML or JSON data may be vulnerable to Denial of Service attacks (DOS). If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by Out of memory. This effect may su…

Jettison Jettison druid libjettison-java Debian Ubuntu Wolfi Maven

Sep 16, 2022
Medium 6.5

CVE-2022-40152 EPSS 18%

Stack Buffer Overflow in Woodstox

Those using Woodstox to parse XML data may be vulnerable to Denial of Service attacks (DOS) if DTD support is enabled. If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stackoverflow. This effec…

x-stream Woodstox libxstream-java sonarqube-10 Debian Ubuntu Wolfi Maven

Sep 16, 2022
Medium 6.5

CVE-2026-71070

Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply Chain (component: CAX Client). The suppor…

Oracle Oracle Agile PLM MCAD Connector

Aug 18, 2026
Medium 6.4

CVE-2026-70712

Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Install). The …

Oracle Oracle Agile Engineering Data Management

Aug 18, 2026
Medium 6.3

CVE-2026-34481

Apache Log4j JSON Template Layout: Improper serialization of non-finite floating-point values in JsonTemplateLayout

Apache Log4j's JsonTemplateLayout https://logging.apache.org/log4j/2.x/manual/json-template-layout.html , in versions up to and including 2.25.3, produces invalid JSON output when log events contain non-finite floating-point values (NaN, Infinity, or -Infinit…

Apache Software Foundation Apache Log4j JSON Template Layout spark-4.0-scala-2.13 spark-4.1-scala-2.13 Debian Ubuntu Wolfi Maven

Apr 10, 2026
Medium 6.3

CVE-2026-70693

Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Engineering Co…

Oracle Oracle Agile Engineering Data Management

Aug 18, 2026
Medium 5.9

CVE-2026-71075

Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply Chain (component: CAX Client). The suppor…

Oracle Oracle Agile PLM MCAD Connector

Aug 18, 2026
Medium 5.3

CVE-2026-71076

Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply Chain (component: CAX Client). The suppor…

Oracle Oracle Agile PLM MCAD Connector

Aug 18, 2026
Medium 5.3

CVE-2026-71077

Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply Chain (component: CAX Client). The suppor…

Oracle Oracle Agile PLM MCAD Connector

Aug 18, 2026
Medium 5.3

CVE-2026-71087

Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply Chain (component: CAX Client). The suppor…

Oracle Oracle Agile PLM MCAD Connector

Aug 18, 2026
Medium 4.8

CVE-2026-70709

Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Engineering Co…

Oracle Oracle Agile Engineering Data Management

Aug 18, 2026
Medium 4.8

CVE-2026-71088

Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply Chain (component: CAX Client). The suppor…

Oracle Oracle Agile PLM MCAD Connector

Aug 18, 2026
Medium 4.6

CVE-2026-71071

Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply Chain (component: CAX Client). The suppor…

Oracle Oracle Agile PLM MCAD Connector

Aug 18, 2026
Medium 4.5

CVE-2026-71066

Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply Chain (component: CAX Client). The suppor…

Oracle Oracle Agile PLM MCAD Connector

Aug 18, 2026
Medium 4.2

CVE-2026-71078

Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply Chain (component: CAX Client). The suppor…

Oracle Oracle Agile PLM MCAD Connector

Aug 18, 2026
Low 3.7

CVE-2026-71080

Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply Chain (component: CAX Client). The suppor…

Oracle Oracle Agile PLM MCAD Connector

Aug 18, 2026
Low 3.3

CVE-2026-71072

Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply Chain (component: CAX Client). The suppor…

Oracle Oracle Agile PLM MCAD Connector

Aug 18, 2026
Low 3.3

CVE-2026-71089

Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply Chain (component: CAX Client). The suppor…

Oracle Oracle Agile PLM MCAD Connector

Aug 18, 2026
Low 2.5

CVE-2026-71082

Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply Chain (component: CAX Client). The suppor…

Oracle Oracle Agile PLM MCAD Connector

Aug 18, 2026
Low 1.9

CVE-2026-71081

Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply Chain (component: CAX Client). The suppor…

Oracle Oracle Agile PLM MCAD Connector

Aug 18, 2026
Low 1.8

CVE-2026-71083

Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply Chain (component: CAX Client). The suppor…

Oracle Oracle Agile PLM MCAD Connector

Aug 18, 2026

Revision history

2026-08-18 #1
Initiale Fassung

References

Oracle Critical Security Patch Update Advisory - August 2026 - Appendix Oracle Supply Chain vom 2026-08-18
https://www.oracle.com/security-alerts/cspuaug2026.html#AppendixSCP