{"document":{"aggregate_severity":{"text":"hoch"},"category":"csaf_base","csaf_version":"2.0","distribution":{"tlp":{"label":"WHITE","url":"https://www.first.org/tlp/"}},"lang":"de-DE","notes":[{"category":"legal_disclaimer","text":"Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen."},{"category":"description","text":"Die Oracle Supply Chain ist eine Sammlung von Applikationen für verschiedene Zwecke.","title":"Produktbeschreibung"},{"category":"summary","text":"Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Oracle Supply Chain ausnutzen, um die Vertraulichkeit, Integrität und Verfügbarkeit zu gefährden.","title":"Angriff"},{"category":"general","text":"- Linux\n- UNIX\n- Windows","title":"Betroffene Betriebssysteme"}],"publisher":{"category":"other","contact_details":"csaf-provider@cert-bund.de","name":"Bundesamt für Sicherheit in der Informationstechnik","namespace":"https://www.bsi.bund.de"},"references":[{"category":"self","summary":"WID-SEC-W-2026-4085 - CSAF Version","url":"https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-4085.json"},{"category":"self","summary":"WID-SEC-2026-4085 - Portal Version","url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-4085"},{"category":"external","summary":"Oracle Critical Patch Update Advisory - October 2026 - Appendix Oracle Supply Chain vom 2026-10-20","url":"https://www.oracle.com/security-alerts/cpuoct2026.html#AppendixSCP"}],"source_lang":"en-US","title":"Oracle Supply Chain: Mehrere Schwachstellen","tracking":{"current_release_date":"2026-10-20T22:00:00.000+00:00","generator":{"date":"2026-10-21T11:30:57.996+00:00","engine":{"name":"BSI-WID","version":"1.6.0"}},"id":"WID-SEC-W-2026-4085","initial_release_date":"2026-10-20T22:00:00.000+00:00","revision_history":[{"date":"2026-10-20T22:00:00.000+00:00","number":"1","summary":"Initiale Fassung"}],"status":"final","version":"1"}},"product_tree":{"branches":[{"branches":[{"branches":[{"category":"product_version","name":"3.6","product":{"name":"Oracle Supply Chain 3.6","product_id":"T019049","product_identification_helper":{"cpe":"cpe:/a:oracle:supply_chain:3.6"}}},{"category":"product_version","name":"9.3.6","product":{"name":"Oracle Supply Chain 9.3.6","product_id":"T019052","product_identification_helper":{"cpe":"cpe:/a:oracle:supply_chain:9.3.6"}}},{"category":"product_version","name":"12.1","product":{"name":"Oracle Supply Chain 12.1","product_id":"T019054","product_identification_helper":{"cpe":"cpe:/a:oracle:supply_chain:12.1"}}},{"category":"product_version","name":"12.2","product":{"name":"Oracle Supply Chain 12.2","product_id":"T019055","product_identification_helper":{"cpe":"cpe:/a:oracle:supply_chain:12.2"}}},{"category":"product_version","name":"3.6.1","product":{"name":"Oracle Supply Chain 3.6.1","product_id":"T021722","product_identification_helper":{"cpe":"cpe:/a:oracle:supply_chain:3.6.1"}}},{"category":"product_version","name":"6.2.1","product":{"name":"Oracle Supply Chain 6.2.1","product_id":"T040481","product_identification_helper":{"cpe":"cpe:/a:oracle:supply_chain:6.2.1"}}},{"category":"product_version","name":"6.2.4","product":{"name":"Oracle Supply Chain 6.2.4","product_id":"T050158","product_identification_helper":{"cpe":"cpe:/a:oracle:supply_chain:6.2.4"}}},{"category":"product_version","name":"2.6","product":{"name":"Oracle Supply Chain 2.6","product_id":"T061538","product_identification_helper":{"cpe":"cpe:/a:oracle:supply_chain:2.6"}}}],"category":"product_name","name":"Supply Chain"}],"category":"vendor","name":"Oracle"}]},"vulnerabilities":[{"cve":"CVE-2022-34169","product_status":{"known_affected":["T019049","T040481","T021722","T061538","T019052","T050158","T019054","T019055"]},"release_date":"2026-10-20T22:00:00.000+00:00","title":"CVE-2022-34169"},{"cve":"CVE-2026-101469","product_status":{"known_affected":["T019049","T040481","T021722","T061538","T019052","T050158","T019054","T019055"]},"release_date":"2026-10-20T22:00:00.000+00:00","title":"CVE-2026-101469"},{"cve":"CVE-2026-101470","product_status":{"known_affected":["T019049","T040481","T021722","T061538","T019052","T050158","T019054","T019055"]},"release_date":"2026-10-20T22:00:00.000+00:00","title":"CVE-2026-101470"},{"cve":"CVE-2026-101471","product_status":{"known_affected":["T019049","T040481","T021722","T061538","T019052","T050158","T019054","T019055"]},"release_date":"2026-10-20T22:00:00.000+00:00","title":"CVE-2026-101471"},{"cve":"CVE-2026-101472","product_status":{"known_affected":["T019049","T040481","T021722","T061538","T019052","T050158","T019054","T019055"]},"release_date":"2026-10-20T22:00:00.000+00:00","title":"CVE-2026-101472"},{"cve":"CVE-2026-101473","product_status":{"known_affected":["T019049","T040481","T021722","T061538","T019052","T050158","T019054","T019055"]},"release_date":"2026-10-20T22:00:00.000+00:00","title":"CVE-2026-101473"},{"cve":"CVE-2026-101474","product_status":{"known_affected":["T019049","T040481","T021722","T061538","T019052","T050158","T019054","T019055"]},"release_date":"2026-10-20T22:00:00.000+00:00","title":"CVE-2026-101474"},{"cve":"CVE-2026-101547","product_status":{"known_affected":["T019049","T040481","T021722","T061538","T019052","T050158","T019054","T019055"]},"release_date":"2026-10-20T22:00:00.000+00:00","title":"CVE-2026-101547"},{"cve":"CVE-2026-101562","product_status":{"known_affected":["T019049","T040481","T021722","T061538","T019052","T050158","T019054","T019055"]},"release_date":"2026-10-20T22:00:00.000+00:00","title":"CVE-2026-101562"},{"cve":"CVE-2026-101564","product_status":{"known_affected":["T019049","T040481","T021722","T061538","T019052","T050158","T019054","T019055"]},"release_date":"2026-10-20T22:00:00.000+00:00","title":"CVE-2026-101564"},{"cve":"CVE-2026-101565","product_status":{"known_affected":["T019049","T040481","T021722","T061538","T019052","T050158","T019054","T019055"]},"release_date":"2026-10-20T22:00:00.000+00:00","title":"CVE-2026-101565"},{"cve":"CVE-2026-101591","product_status":{"known_affected":["T019049","T040481","T021722","T061538","T019052","T050158","T019054","T019055"]},"release_date":"2026-10-20T22:00:00.000+00:00","title":"CVE-2026-101591"},{"cve":"CVE-2026-101592","product_status":{"known_affected":["T019049","T040481","T021722","T061538","T019052","T050158","T019054","T019055"]},"release_date":"2026-10-20T22:00:00.000+00:00","title":"CVE-2026-101592"},{"cve":"CVE-2026-101593","product_status":{"known_affected":["T019049","T040481","T021722","T061538","T019052","T050158","T019054","T019055"]},"release_date":"2026-10-20T22:00:00.000+00:00","title":"CVE-2026-101593"},{"cve":"CVE-2026-101594","product_status":{"known_affected":["T019049","T040481","T021722","T061538","T019052","T050158","T019054","T019055"]},"release_date":"2026-10-20T22:00:00.000+00:00","title":"CVE-2026-101594"},{"cve":"CVE-2026-101595","product_status":{"known_affected":["T019049","T040481","T021722","T061538","T019052","T050158","T019054","T019055"]},"release_date":"2026-10-20T22:00:00.000+00:00","title":"CVE-2026-101595"},{"cve":"CVE-2026-101596","product_status":{"known_affected":["T019049","T040481","T021722","T061538","T019052","T050158","T019054","T019055"]},"release_date":"2026-10-20T22:00:00.000+00:00","title":"CVE-2026-101596"},{"cve":"CVE-2026-101602","product_status":{"known_affected":["T019049","T040481","T021722","T061538","T019052","T050158","T019054","T019055"]},"release_date":"2026-10-20T22:00:00.000+00:00","title":"CVE-2026-101602"},{"cve":"CVE-2026-101713","product_status":{"known_affected":["T019049","T040481","T021722","T061538","T019052","T050158","T019054","T019055"]},"release_date":"2026-10-20T22:00:00.000+00:00","title":"CVE-2026-101713"},{"cve":"CVE-2026-101714","product_status":{"known_affected":["T019049","T040481","T021722","T061538","T019052","T050158","T019054","T019055"]},"release_date":"2026-10-20T22:00:00.000+00:00","title":"CVE-2026-101714"},{"cve":"CVE-2026-101715","product_status":{"known_affected":["T019049","T040481","T021722","T061538","T019052","T050158","T019054","T019055"]},"release_date":"2026-10-20T22:00:00.000+00:00","title":"CVE-2026-101715"},{"cve":"CVE-2026-101716","product_status":{"known_affected":["T019049","T040481","T021722","T061538","T019052","T050158","T019054","T019055"]},"release_date":"2026-10-20T22:00:00.000+00:00","title":"CVE-2026-101716"},{"cve":"CVE-2026-101717","product_status":{"known_affected":["T019049","T040481","T021722","T061538","T019052","T050158","T019054","T019055"]},"release_date":"2026-10-20T22:00:00.000+00:00","title":"CVE-2026-101717"},{"cve":"CVE-2026-101718","product_status":{"known_affected":["T019049","T040481","T021722","T061538","T019052","T050158","T019054","T019055"]},"release_date":"2026-10-20T22:00:00.000+00:00","title":"CVE-2026-101718"},{"cve":"CVE-2026-101719","product_status":{"known_affected":["T019049","T040481","T021722","T061538","T019052","T050158","T019054","T019055"]},"release_date":"2026-10-20T22:00:00.000+00:00","title":"CVE-2026-101719"},{"cve":"CVE-2026-101723","product_status":{"known_affected":["T019049","T040481","T021722","T061538","T019052","T050158","T019054","T019055"]},"release_date":"2026-10-20T22:00:00.000+00:00","title":"CVE-2026-101723"},{"cve":"CVE-2026-101734","product_status":{"known_affected":["T019049","T040481","T021722","T061538","T019052","T050158","T019054","T019055"]},"release_date":"2026-10-20T22:00:00.000+00:00","title":"CVE-2026-101734"},{"cve":"CVE-2026-101738","product_status":{"known_affected":["T019049","T040481","T021722","T061538","T019052","T050158","T019054","T019055"]},"release_date":"2026-10-20T22:00:00.000+00:00","title":"CVE-2026-101738"},{"cve":"CVE-2026-101739","product_status":{"known_affected":["T019049","T040481","T021722","T061538","T019052","T050158","T019054","T019055"]},"release_date":"2026-10-20T22:00:00.000+00:00","title":"CVE-2026-101739"},{"cve":"CVE-2026-101740","product_status":{"known_affected":["T019049","T040481","T021722","T061538","T019052","T050158","T019054","T019055"]},"release_date":"2026-10-20T22:00:00.000+00:00","title":"CVE-2026-101740"},{"cve":"CVE-2026-101741","product_status":{"known_affected":["T019049","T040481","T021722","T061538","T019052","T050158","T019054","T019055"]},"release_date":"2026-10-20T22:00:00.000+00:00","title":"CVE-2026-101741"},{"cve":"CVE-2026-101744","product_status":{"known_affected":["T019049","T040481","T021722","T061538","T019052","T050158","T019054","T019055"]},"release_date":"2026-10-20T22:00:00.000+00:00","title":"CVE-2026-101744"},{"cve":"CVE-2026-101745","product_status":{"known_affected":["T019049","T040481","T021722","T061538","T019052","T050158","T019054","T019055"]},"release_date":"2026-10-20T22:00:00.000+00:00","title":"CVE-2026-101745"},{"cve":"CVE-2026-101746","product_status":{"known_affected":["T019049","T040481","T021722","T061538","T019052","T050158","T019054","T019055"]},"release_date":"2026-10-20T22:00:00.000+00:00","title":"CVE-2026-101746"},{"cve":"CVE-2026-54512","product_status":{"known_affected":["T019049","T040481","T021722","T061538","T019052","T050158","T019054","T019055"]},"release_date":"2026-10-20T22:00:00.000+00:00","title":"CVE-2026-54512"},{"cve":"CVE-2026-68569","product_status":{"known_affected":["T019049","T040481","T021722","T061538","T019052","T050158","T019054","T019055"]},"release_date":"2026-10-20T22:00:00.000+00:00","title":"CVE-2026-68569"},{"cve":"CVE-2026-83394","product_status":{"known_affected":["T019049","T040481","T021722","T061538","T019052","T050158","T019054","T019055"]},"release_date":"2026-10-20T22:00:00.000+00:00","title":"CVE-2026-83394"},{"cve":"CVE-2026-87362","product_status":{"known_affected":["T019049","T040481","T021722","T061538","T019052","T050158","T019054","T019055"]},"release_date":"2026-10-20T22:00:00.000+00:00","title":"CVE-2026-87362"},{"cve":"CVE-2026-91512","product_status":{"known_affected":["T019049","T040481","T021722","T061538","T019052","T050158","T019054","T019055"]},"release_date":"2026-10-20T22:00:00.000+00:00","title":"CVE-2026-91512"},{"cve":"CVE-2026-91515","product_status":{"known_affected":["T019049","T040481","T021722","T061538","T019052","T050158","T019054","T019055"]},"release_date":"2026-10-20T22:00:00.000+00:00","title":"CVE-2026-91515"},{"cve":"CVE-2026-91520","product_status":{"known_affected":["T019049","T040481","T021722","T061538","T019052","T050158","T019054","T019055"]},"release_date":"2026-10-20T22:00:00.000+00:00","title":"CVE-2026-91520"},{"cve":"CVE-2026-91521","product_status":{"known_affected":["T019049","T040481","T021722","T061538","T019052","T050158","T019054","T019055"]},"release_date":"2026-10-20T22:00:00.000+00:00","title":"CVE-2026-91521"},{"cve":"CVE-2026-91550","product_status":{"known_affected":["T019049","T040481","T021722","T061538","T019052","T050158","T019054","T019055"]},"release_date":"2026-10-20T22:00:00.000+00:00","title":"CVE-2026-91550"},{"cve":"CVE-2026-91565","product_status":{"known_affected":["T019049","T040481","T021722","T061538","T019052","T050158","T019054","T019055"]},"release_date":"2026-10-20T22:00:00.000+00:00","title":"CVE-2026-91565"},{"cve":"CVE-2026-91573","product_status":{"known_affected":["T019049","T040481","T021722","T061538","T019052","T050158","T019054","T019055"]},"release_date":"2026-10-20T22:00:00.000+00:00","title":"CVE-2026-91573"},{"cve":"CVE-2026-91604","product_status":{"known_affected":["T019049","T040481","T021722","T061538","T019052","T050158","T019054","T019055"]},"release_date":"2026-10-20T22:00:00.000+00:00","title":"CVE-2026-91604"},{"cve":"CVE-2026-91622","product_status":{"known_affected":["T019049","T040481","T021722","T061538","T019052","T050158","T019054","T019055"]},"release_date":"2026-10-20T22:00:00.000+00:00","title":"CVE-2026-91622"},{"cve":"CVE-2026-91623","product_status":{"known_affected":["T019049","T040481","T021722","T061538","T019052","T050158","T019054","T019055"]},"release_date":"2026-10-20T22:00:00.000+00:00","title":"CVE-2026-91623"},{"cve":"CVE-2026-91624","product_status":{"known_affected":["T019049","T040481","T021722","T061538","T019052","T050158","T019054","T019055"]},"release_date":"2026-10-20T22:00:00.000+00:00","title":"CVE-2026-91624"},{"cve":"CVE-2026-91625","product_status":{"known_affected":["T019049","T040481","T021722","T061538","T019052","T050158","T019054","T019055"]},"release_date":"2026-10-20T22:00:00.000+00:00","title":"CVE-2026-91625"}]}