Oracle Supply Chain Products Suite vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Oracle Supply Chain Products Suite: 1 record(s), with affected versions and fixes.
cpe:2.3:a:oracle:supply_chain_products_suite

CVE-2026-21940 High · 7.5 CWE-200 Jan 20, 2026

Exposure of Sensitive Information in Oracle Supply Chain Products Suite

Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: User and User Group). The supported version that is affected is 9.3.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Agile PLM. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Agile PLM accessible data. CVSS 3.1 Base Score 7.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N).