# Oracle Agile PLM vulnerabilities Source: https://junglewise.ai/threats/technologies/agile-plm Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats Updated: 9 November 2026, 03:07 UTC. Rebuilt every hour. Data: https://junglewise.ai/threats/technologies/agile-plm.json License: CC BY 4.0 with a link back Junglewise Threat Intelligence has tracked 37 vulnerabilities in Oracle Agile PLM: 0 in the last 7 days and 27 in the last 90 days, 5 of them critical and 0 exploited in the wild. The most recent, CVE-2026-87362, was published on 20 October 2026. 11 vulnerabilities in the last four weeks, up 38% on the four before (8). 0 critical against 1. ## Counts - Last 7 days: 0 - Last 30 days: 11 - Last 90 days: 27 - All time: 37 (5 critical, 0 exploited in the wild) ## About Oracle Agile PLM Oracle Agile PLM is enterprise product lifecycle management software. ## Latest Oracle Agile PLM vulnerabilities - [CVE-2026-87362: Oracle Agile PLM unauthorized data access in Folders, Files & Attachments](https://junglewise.ai/threats/cve-2026-87362-vulnerability-in-the-oracle-agile-plm-product-of-oracle-supply) (medium, CVSS 6.5, published 20 Oct 2026) - [CVE-2026-101719: Oracle Agile PLM privilege escalation in Application Server](https://junglewise.ai/threats/cve-2026-101719-vulnerability-in-the-oracle-agile-plm-product-of-oracle-supply) (high, CVSS 7.5, published 20 Oct 2026) - [CVE-2026-101718: Oracle Agile PLM authentication bypass in Application Server](https://junglewise.ai/threats/cve-2026-101718-vulnerability-in-the-oracle-agile-plm-product-of-oracle-supply) (medium, CVSS 6.5, published 20 Oct 2026) - [CVE-2026-101717: Oracle Agile PLM privilege escalation in Security component](https://junglewise.ai/threats/cve-2026-101717-vulnerability-in-the-oracle-agile-plm-product-of-oracle-supply) (medium, CVSS 6.4, published 20 Oct 2026) - [CVE-2026-101716: Oracle Agile PLM information disclosure in Web Client](https://junglewise.ai/threats/cve-2026-101716-vulnerability-in-the-oracle-agile-plm-product-of-oracle-supply) (medium, CVSS 5.3, published 20 Oct 2026) - [CVE-2026-101715: Oracle Agile PLM unauthorized data access in Application Server](https://junglewise.ai/threats/cve-2026-101715-vulnerability-in-the-oracle-agile-plm-product-of-oracle-supply) (medium, CVSS 6.5, published 20 Oct 2026) - [CVE-2026-101714: Oracle Agile PLM CSRF vulnerability in Web Client](https://junglewise.ai/threats/cve-2026-101714-vulnerability-in-the-oracle-agile-plm-product-of-oracle-supply) (medium, CVSS 6.1, published 20 Oct 2026) - [CVE-2026-101713: Oracle Agile PLM privilege escalation in Application Server](https://junglewise.ai/threats/cve-2026-101713-vulnerability-in-the-oracle-agile-plm-product-of-oracle-supply) (medium, CVSS 5.4, published 20 Oct 2026) - [CVE-2026-101565: Oracle Agile PLM privilege escalation in Import](https://junglewise.ai/threats/cve-2026-101565-vulnerability-in-the-oracle-agile-plm-product-of-oracle-supply) (medium, CVSS 6.2, published 20 Oct 2026) - [CVE-2026-101564: Oracle Agile PLM unauthorized data access in Acollect](https://junglewise.ai/threats/cve-2026-101564-vulnerability-in-the-oracle-agile-plm-product-of-oracle-supply) (medium, CVSS 5.9, published 20 Oct 2026) - [CVE-2026-101562: Oracle Agile PLM unauthorized data access in Acollect](https://junglewise.ai/threats/cve-2026-101562-vulnerability-in-the-oracle-agile-plm-product-of-oracle-supply) (high, CVSS 7.5, published 20 Oct 2026) - [CVE-2026-87266: Oracle Agile PLM authentication bypass in Application Server](https://junglewise.ai/threats/cve-2026-87266-oracle-agile-plm-authentication-bypass-in-application-server) (high, CVSS 8.2, published 15 Sep 2026) - [CVE-2026-87258: Oracle Agile PLM authorization bypass in Folders, Files & Attachments](https://junglewise.ai/threats/cve-2026-87258-oracle-agile-plm-authorization-bypass-in-folders-files) (high, CVSS 7.6, published 15 Sep 2026) - [CVE-2026-87257: Oracle Agile PLM unauthorized data access in SDK](https://junglewise.ai/threats/cve-2026-87257-oracle-agile-plm-unauthorized-data-access-in-sdk) (high, CVSS 7.7, published 15 Sep 2026) - [CVE-2026-87256: Oracle Agile PLM authorization bypass in Application Server](https://junglewise.ai/threats/cve-2026-87256-oracle-agile-plm-authorization-bypass-in-application-server) (high, CVSS 7.7, published 15 Sep 2026) - [CVE-2026-87254: Oracle Agile PLM authentication bypass in Folders, Files & Attachments](https://junglewise.ai/threats/cve-2026-87254-oracle-agile-plm-authentication-bypass-in-folders-files) (high, CVSS 7.5, published 15 Sep 2026) - [CVE-2026-87253: Oracle Agile PLM cross-site scripting in Web Client](https://junglewise.ai/threats/cve-2026-87253-oracle-agile-plm-cross-site-scripting-in-web-client) (medium, CVSS 6.1, published 15 Sep 2026) - [CVE-2026-87252: Oracle Agile PLM unauthorized data access via adjacent network](https://junglewise.ai/threats/cve-2026-87252-oracle-agile-plm-unauthorized-data-access-via-adjacent-network) (medium, CVSS 6.8, published 15 Sep 2026) - [CVE-2026-83260: Oracle Agile PLM remote code execution in Event Java PX](https://junglewise.ai/threats/cve-2026-83260-oracle-agile-plm-remote-code-execution-in-event-java-px) (critical, CVSS 9.1, published 15 Sep 2026) - [CVE-2026-71046: Oracle Agile PLM privilege escalation in Security component](https://junglewise.ai/threats/cve-2026-71046-oracle-agile-plm-privilege-escalation-in-security-component) (high, CVSS 8.8, published 18 Aug 2026) - [CVE-2026-71045: Oracle Agile PLM security component vulnerability](https://junglewise.ai/threats/cve-2026-71045-oracle-agile-plm-security-component-vulnerability) (high, CVSS 8.8, published 18 Aug 2026) - [CVE-2026-71044: Oracle Agile PLM privilege escalation in Export component](https://junglewise.ai/threats/cve-2026-71044-oracle-agile-plm-privilege-escalation-in-export-component) (high, CVSS 8.8, published 18 Aug 2026) - [CVE-2026-71043: Oracle Agile PLM authentication bypass in Security component](https://junglewise.ai/threats/cve-2026-71043-oracle-agile-plm-authentication-bypass-in-security-component) (high, CVSS 7.5, published 18 Aug 2026) - [CVE-2026-71042: Oracle Agile PLM privilege escalation in Excel Plugin](https://junglewise.ai/threats/cve-2026-71042-oracle-agile-plm-privilege-escalation-in-excel-plugin) (high, CVSS 8.1, published 18 Aug 2026) - [CVE-2026-71041: Oracle Agile PLM privilege escalation in Gantt Chart](https://junglewise.ai/threats/cve-2026-71041-oracle-agile-plm-privilege-escalation-in-gantt-chart) (high, CVSS 7, published 18 Aug 2026) ## Most severe Oracle Agile PLM vulnerabilities - [CVE-2026-46859: Oracle Agile PLM improper authentication in Security component](https://junglewise.ai/threats/cve-2026-46859-oracle-agile-plm-improper-authentication-in-security-component) (critical, CVSS 9.8, published 17 Jun 2026) - [CVE-2026-71040: Oracle Agile PLM authentication bypass in Security component](https://junglewise.ai/threats/cve-2026-71040-oracle-agile-plm-authentication-bypass-in-security-component) (critical, CVSS 9.8, published 18 Aug 2026) - [CVE-2026-61167: Oracle Agile PLM security bypass in Security component](https://junglewise.ai/threats/cve-2026-61167-oracle-agile-plm-security-bypass-in-security-component) (critical, CVSS 9.8, published 21 Jul 2026) - [CVE-2026-83260: Oracle Agile PLM remote code execution in Event Java PX](https://junglewise.ai/threats/cve-2026-83260-oracle-agile-plm-remote-code-execution-in-event-java-px) (critical, CVSS 9.1, published 15 Sep 2026) - [CVE-2026-61171: Oracle Agile PLM security bypass in Security component](https://junglewise.ai/threats/cve-2026-61171-oracle-agile-plm-security-bypass-in-security-component) (critical, CVSS 9.1, published 21 Jul 2026) - [CVE-2026-71044: Oracle Agile PLM privilege escalation in Export component](https://junglewise.ai/threats/cve-2026-71044-oracle-agile-plm-privilege-escalation-in-export-component) (high, CVSS 8.8, published 18 Aug 2026) - [CVE-2026-71039: Oracle Agile PLM privilege escalation in Application Server](https://junglewise.ai/threats/cve-2026-71039-oracle-agile-plm-privilege-escalation-in-application-server) (high, CVSS 8.8, published 18 Aug 2026) - [CVE-2026-71045: Oracle Agile PLM security component vulnerability](https://junglewise.ai/threats/cve-2026-71045-oracle-agile-plm-security-component-vulnerability) (high, CVSS 8.8, published 18 Aug 2026) - [CVE-2026-71046: Oracle Agile PLM privilege escalation in Security component](https://junglewise.ai/threats/cve-2026-71046-oracle-agile-plm-privilege-escalation-in-security-component) (high, CVSS 8.8, published 18 Aug 2026) - [CVE-2026-61168: Oracle Agile PLM security bypass in Security component](https://junglewise.ai/threats/cve-2026-61168-oracle-agile-plm-security-bypass-in-security-component) (high, CVSS 8.8, published 21 Jul 2026) ## Vulnerabilities per week 11 vulnerabilities in the last four weeks, up 38% on the four before (8). 0 critical against 1. | Week of | Vulns | Critical | Exploited | | --- | --- | --- | --- | | 17 Aug 2026 | 8 | 1 | 0 | | 24 Aug 2026 | 0 | 0 | 0 | | 31 Aug 2026 | 0 | 0 | 0 | | 7 Sep 2026 | 0 | 0 | 0 | | 14 Sep 2026 | 8 | 1 | 0 | | 21 Sep 2026 | 0 | 0 | 0 | | 28 Sep 2026 | 0 | 0 | 0 | | 5 Oct 2026 | 0 | 0 | 0 | | 12 Oct 2026 | 0 | 0 | 0 | | 19 Oct 2026 | 11 | 0 | 0 | | 26 Oct 2026 | 0 | 0 | 0 | | 2 Nov 2026 | 0 | 0 | 0 | | 9 Nov 2026 | 0 | 0 | 0 | ## Other Oracle technologies - [Oracle MySQL Server](https://junglewise.ai/threats/technologies/mysql-server): 163 vulnerabilities - [Oracle Hyperion Financial Management](https://junglewise.ai/threats/technologies/hyperion-financial-management): 142 vulnerabilities - [Oracle Helidon](https://junglewise.ai/threats/technologies/helidon): 130 vulnerabilities - [Oracle MySQL Cluster](https://junglewise.ai/threats/technologies/mysql-cluster): 129 vulnerabilities - [Oracle Coherence](https://junglewise.ai/threats/technologies/coherence): 113 vulnerabilities - [Oracle E-Business Suite](https://junglewise.ai/threats/technologies/e-business-suite): 110 vulnerabilities - [Oracle WebCenter Content](https://junglewise.ai/threats/technologies/webcenter-content): 110 vulnerabilities - [Oracle Commerce Guided Search](https://junglewise.ai/threats/technologies/commerce-guided-search): 104 vulnerabilities - [Oracle Commerce Experience Manager](https://junglewise.ai/threats/technologies/commerce-experience-manager): 102 vulnerabilities - [Oracle JD Edwards EnterpriseOne Tools](https://junglewise.ai/threats/technologies/jd-edwards-enterpriseone-tools): 101 vulnerabilities - [Oracle PeopleSoft Enterprise PeopleTools](https://junglewise.ai/threats/technologies/peopletools): 101 vulnerabilities - [Oracle Java SE](https://junglewise.ai/threats/technologies/java-se): 92 vulnerabilities ## Sources NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "Oracle Agile PLM vulnerabilities", https://junglewise.ai/threats/technologies/agile-plm, 9 November 2026.