cnvd-2026-43378

cnvd

Description

Oracle Agile Product Lifecycle Management for Process是Oracle专为流程制造行业打造的产品生命周期管理系统。 Oracle Agile Product Lifecycle Management for Process存在缺少身份验证漏洞，该漏洞源于Product Quality Management组件，攻击者可利用该漏洞通过HTTP网络访问，未授权访问关键数据或全部可访问数据，以及未授权更新、插入或删除部分可访问数据。

Timeline

Published: unknown
Last Modified: unknown

CVSS Details

CVSS details not available.

Affected Products

No product information available.

References

No references available.

Linked Vulnerabilities

No linked vulnerabilities found.

{
  "cves": {
    "cve": {
      "cveNumber": "CVE-2026-91625",
      "cveUrl": "https://nvd.nist.gov/vuln/detail/CVE-2026-91625"
    }
  },
  "description": "Oracle Agile Product Lifecycle Management for Process是Oracle专为流程制造行业打造的产品生命周期管理系统。\n\nOracle Agile Product Lifecycle Management for Process存在缺少身份验证漏洞，该漏洞源于Product Quality Management组件，攻击者可利用该漏洞通过HTTP网络访问，未授权访问关键数据或全部可访问数据，以及未授权更新、插入或删除部分可访问数据。",
  "formalWay": "目前厂商已发布升级程序修复该安全问题，详情见厂商官网:\r\nhttps://www.oracle.com/security-alerts/cpuoct2026.html",
  "isEvent": "通用软硬件漏洞",
  "number": "CNVD-2026-43378",
  "openTime": "2026-10-30",
  "patchDescription": "Oracle Agile Product Lifecycle Management for Process是Oracle专为流程制造行业打造的产品生命周期管理系统。\r\n\r\nOracle Agile Product Lifecycle Management for Process存在缺少身份验证漏洞，该漏洞源于Product Quality Management组件，攻击者可利用该漏洞通过HTTP网络访问，未授权访问关键数据或全部可访问数据，以及未授权更新、插入或删除部分可访问数据。目前，供应商发布了安全公告及相关补丁信息，修复了此漏洞。",
  "patchName": "Oracle Agile Product Lifecycle Management for Process缺少身份验证漏洞的补丁",
  "products": {
    "product": "Oracle Agile Product Lifecycle Management for Process 6.2.4"
  },
  "referenceLink": "https://nvd.nist.gov/vuln/detail/CVE-2026-91625",
  "serverity": "高",
  "submitTime": "2026-10-28",
  "title": "Oracle Agile Product Lifecycle Management for Process缺少身份验证漏洞"
}

View JSON API Download JSON

cnvd-2026-43378

Raw JSON Data