{"cves":{"cve":{"cveNumber":"CVE-2026-91512","cveUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-91512"}},"description":"Oracle Agile Product Lifecycle Management for Process是Oracle专为流程制造行业打造的产品生命周期管理系统。\n\nOracle Agile Product Lifecycle Management for Process存在访问控制不当漏洞，该漏洞源于Product Quality Management组件，攻击者可利用该漏洞通过HTTP进行网络访问，从而接管Oracle Agile Product Lifecycle Management for Process。","formalWay":"目前厂商已发布升级程序修复该安全问题，详情见厂商官网:\r\nhttps://www.oracle.com/security-alerts/cpuoct2026.html","isEvent":"通用软硬件漏洞","number":"CNVD-2026-43385","openTime":"2026-10-30","patchDescription":"Oracle Agile Product Lifecycle Management for Process是Oracle专为流程制造行业打造的产品生命周期管理系统。\r\n\r\nOracle Agile Product Lifecycle Management for Process存在访问控制不当漏洞，该漏洞源于Product Quality Management组件，攻击者可利用该漏洞通过HTTP进行网络访问，从而接管Oracle Agile Product Lifecycle Management for Process。目前，供应商发布了安全公告及相关补丁信息，修复了此漏洞。","patchName":"Oracle Agile Product Lifecycle Management for Process访问控制不当漏洞（CNVD-2026-43385）的补丁","products":{"product":"Oracle Agile Product Lifecycle Management for Process 6.2.4"},"referenceLink":"https://nvd.nist.gov/vuln/detail/CVE-2026-91512","serverity":"高","submitTime":"2026-10-28","title":"Oracle Agile Product Lifecycle Management for Process访问控制不当漏洞（CNVD-2026-43385）"}