High WID-SEC-2026-4085 50 CVEs

Oracle Supply Chain: Mehrere Schwachstellen

Published Oct 20, 2026 · Updated Oct 20, 2026 · de-DE

Vendor: Oracle Product: Supply Chain Platform: Linux Platform: Windows

Summary

Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Oracle Supply Chain ausnutzen, um die Vertraulichkeit, Integrität und Verfügbarkeit zu gefährden.

Product

Die Oracle Supply Chain ist eine Sammlung von Applikationen für verschiedene Zwecke.

Vulnerabilities 50

Critical 9.3

CVE-2026-91622

Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: P…

Oracle Oracle Agile Product Lifecycle Management for Process

Oct 20, 2026
Critical 9.1

CVE-2026-91624

Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: P…

Oracle Oracle Agile Product Lifecycle Management for Process

Oct 20, 2026
High 8.8

CVE-2026-101594

Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: P…

Oracle Oracle Agile Product Lifecycle Management for Process

Oct 20, 2026
High 8.8

CVE-2026-101596

Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: P…

Oracle Oracle Agile Product Lifecycle Management for Process

Oct 20, 2026
High 8.8

CVE-2026-91520

Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: P…

Oracle Oracle Agile Product Lifecycle Management for Process

Oct 20, 2026
High 8.8

CVE-2026-91521

Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: P…

Oracle Oracle Agile Product Lifecycle Management for Process

Oct 20, 2026
High 8.8

CVE-2026-91550

Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: P…

Oracle Oracle Agile Product Lifecycle Management for Process

Oct 20, 2026
High 8.4

CVE-2026-101744

Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Engineering Co…

Oracle Oracle Agile Engineering Data Management

Oct 20, 2026
High 8.3

CVE-2026-101593

Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: P…

Oracle Oracle Agile Product Lifecycle Management for Process

Oct 20, 2026
High 8.2

CVE-2026-91573

Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: P…

Oracle Oracle Agile Product Lifecycle Management for Process

Oct 20, 2026
High 8.2

CVE-2026-91625

Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: P…

Oracle Oracle Agile Product Lifecycle Management for Process

Oct 20, 2026
High 8.1

CVE-2026-101473

Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: P…

Oracle Oracle Agile Product Lifecycle Management for Process

Oct 20, 2026
High 8.1

CVE-2026-54512 Public exploit

jackson-databind: PolymorphicTypeValidator bypass via generic type parameters allows arbitrary class instantiation

jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor. From 2.10.0 until 2.18.8, 2.21.4, and 3.1.4, jackson-databind's PolymorphicTypeValidator (PTV) is the primary safety mechanism guarding polymor…

FasterXML jackson-databind druid thingsboard-tb-node Debian Ubuntu Wolfi Maven

Jun 23, 2026
High 8.1

CVE-2026-68569

Apache Tomcat: Principal lookup can fail open in some cases

Improper Authentication vulnerability in Apache Tomcat meant that in some circumstances (e.g. CLIENT-CERT, SPNEGO) that a user would be authenticated even if the user did not exist in the DataSourceRealm. This issue affects Apache Tomcat: from 11.0.0-M1 throu…

Apache Software Foundation Apache Tomcat tomcat8 tomcat9 Debian Ubuntu

Aug 25, 2026
High 8.0

CVE-2026-101602

Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: P…

Oracle Oracle Agile Product Lifecycle Management for Process

Oct 20, 2026
High 7.5

CVE-2022-34169 Public exploit EPSS 82%

Apache Xalan Java XSLT library is vulnerable to an integer truncation issue when processing malicious XSLT stylesheets

The Apache Xalan Java XSLT library is vulnerable to an integer truncation issue when processing malicious XSLT stylesheets. This can be used to corrupt Java class files generated by the internal XSLTC compiler and execute arbitrary Java bytecode. Users are re…

Apache Software Foundation Apache Xalan-J openjdk-8 openjdk-lts Debian Ubuntu Alpine Maven

Jul 19, 2022
High 7.5

CVE-2026-101469

Vulnerability in the Oracle Product Lifecycle Analytics product of Oracle Supply Chain (component: Installation Issues)…

Oracle Oracle Product Lifecycle Analytics

Oct 20, 2026
High 7.5

CVE-2026-101562

Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Acollect). The supported version that …

Oracle Oracle Agile PLM

Oct 20, 2026
High 7.5

CVE-2026-101719

Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Application Server). The supported ver…

Oracle Oracle Agile PLM

Oct 20, 2026
High 7.5

CVE-2026-91515

Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: P…

Oracle Oracle Agile Product Lifecycle Management for Process

Oct 20, 2026
High 7.5

CVE-2026-91604

Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: P…

Oracle Oracle Agile Product Lifecycle Management for Process

Oct 20, 2026
High 7.4

CVE-2026-91623

Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: P…

Oracle Oracle Agile Product Lifecycle Management for Process

Oct 20, 2026
High 7.3

CVE-2026-101746

Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Install). The …

Oracle Oracle Agile Engineering Data Management

Oct 20, 2026
High 7.2

CVE-2026-91512

Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: P…

Oracle Oracle Agile Product Lifecycle Management for Process

Oct 20, 2026
High 7.0

CVE-2026-101739

Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Engineering Co…

Oracle Oracle Agile Engineering Data Management

Oct 20, 2026
Medium 6.8

CVE-2026-83394

Vulnerability in the Oracle Demand Planning product of Oracle Supply Chain (component: Internal Operations). Supported …

Oracle Oracle Demand Planning

Oct 20, 2026
Medium 6.7

CVE-2026-101723

Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply Chain (component: CAX Client). The suppor…

Oracle Oracle Agile PLM MCAD Connector

Oct 20, 2026
Medium 6.5

CVE-2026-101715

Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Application Server). The supported ver…

Oracle Oracle Agile PLM

Oct 20, 2026
Medium 6.5

CVE-2026-101718

Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Application Server). The supported ver…

Oracle Oracle Agile PLM

Oct 20, 2026
Medium 6.5

CVE-2026-87362

Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Folders, Files & Attachments). The sup…

Oracle Oracle Agile PLM

Oct 20, 2026
Medium 6.4

CVE-2026-101717

Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Security). The supported version that …

Oracle Oracle Agile PLM

Oct 20, 2026
Medium 6.4

CVE-2026-91565

Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: P…

Oracle Oracle Agile Product Lifecycle Management for Process

Oct 20, 2026
Medium 6.2

CVE-2026-101565

Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Import). The supported version that is…

Oracle Oracle Agile PLM

Oct 20, 2026
Medium 6.1

CVE-2026-101471

Vulnerability in the Oracle Product Lifecycle Analytics product of Oracle Supply Chain (component: Installation Issues)…

Oracle Oracle Product Lifecycle Analytics

Oct 20, 2026
Medium 6.1

CVE-2026-101547

Vulnerability in the Oracle Demand Planning product of Oracle Supply Chain (component: Internal Operations). Supported …

Oracle Oracle Demand Planning

Oct 20, 2026
Medium 6.1

CVE-2026-101714

Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Web Client). The supported version tha…

Oracle Oracle Agile PLM

Oct 20, 2026
Medium 6.0

CVE-2026-101470

Vulnerability in the Oracle Product Lifecycle Analytics product of Oracle Supply Chain (component: Installation Issues)…

Oracle Oracle Product Lifecycle Analytics

Oct 20, 2026
Medium 5.9

CVE-2026-101474

Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: P…

Oracle Oracle Agile Product Lifecycle Management for Process

Oct 20, 2026
Medium 5.9

CVE-2026-101564

Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Acollect). The supported version that …

Oracle Oracle Agile PLM

Oct 20, 2026
Medium 5.5

CVE-2026-101472

Vulnerability in the Oracle Product Lifecycle Analytics product of Oracle Supply Chain (component: Installation Issues)…

Oracle Oracle Product Lifecycle Analytics

Oct 20, 2026
Medium 5.4

CVE-2026-101592

Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: P…

Oracle Oracle Agile Product Lifecycle Management for Process

Oct 20, 2026
Medium 5.4

CVE-2026-101595

Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: S…

Oracle Oracle Agile Product Lifecycle Management for Process

Oct 20, 2026
Medium 5.4

CVE-2026-101713

Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Application Server). The supported ver…

Oracle Oracle Agile PLM

Oct 20, 2026
Medium 5.3

CVE-2026-101716

Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Web Client). The supported version tha…

Oracle Oracle Agile PLM

Oct 20, 2026
Medium 5.3

CVE-2026-101741

Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Engineering Co…

Oracle Oracle Agile Engineering Data Management

Oct 20, 2026
Medium 5.3

CVE-2026-101745

Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Engineering Co…

Oracle Oracle Agile Engineering Data Management

Oct 20, 2026
Medium 4.3

CVE-2026-101591

Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: P…

Oracle Oracle Agile Product Lifecycle Management for Process

Oct 20, 2026
Medium 4.3

CVE-2026-101734

Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Engineering Co…

Oracle Oracle Agile Engineering Data Management

Oct 20, 2026
Low 3.6

CVE-2026-101740

Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Engineering Co…

Oracle Oracle Agile Engineering Data Management

Oct 20, 2026
Low 3.1

CVE-2026-101738

Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Engineering Co…

Oracle Oracle Agile Engineering Data Management

Oct 20, 2026

Revision history

2026-10-20 #1
Initiale Fassung

References

Oracle Critical Patch Update Advisory - October 2026 - Appendix Oracle Supply Chain vom 2026-10-20
https://www.oracle.com/security-alerts/cpuoct2026.html#AppendixSCP