CVE-2026-71049

Name of the Vulnerable Software and Affected Versions Oracle Product Lifecycle Analytics version 3.6.1

Description An issue in the Installation Issues component allows a low privileged attacker with network access via Oracle Net to compromise the system. This can lead to unauthorized access to critical data or complete access to all accessible data within the product, as well as unauthorized update, insert, or delete operations. The impact may extend beyond the primary product to affect additional systems due to a scope change.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.