# Privilege escalation.

Gaining rights a user or process shouldn’t have. Every Advisory and CVE whose weakness (CWE) is one of these, newest first.

## Records, newest first (an older page)

- [Missing authentication in Oracle Corporation Oracle HRMS (UK)](https://agentprime.io/advisories/CVE-2026-61121.md)
  `CVE-2026-61121` · CVE record: Oracle Corporation Oracle HRMS (UK) · CVSS 8.8 High · Not analysed yet · Published 21 Jul 2026 · Tags: Privilege escalation, Broken access control, Authentication bypass
- [Improper privilege management in Oracle Corporation Oracle HRMS (US)](https://agentprime.io/advisories/CVE-2026-61120.md)
  `CVE-2026-61120` · CVE record: Oracle Corporation Oracle HRMS (US) · CVSS 7.0 High · Not analysed yet · Published 21 Jul 2026 · Tags: Privilege escalation
- [Improper privilege management in Oracle Corporation Oracle Application Object Library](https://agentprime.io/advisories/CVE-2026-61114.md)
  `CVE-2026-61114` · CVE record: Oracle Corporation Oracle Application Object Library · CVSS 7.5 High · Not analysed yet · Published 21 Jul 2026 · Tags: Privilege escalation
- [Missing authentication in Oracle Corporation Oracle Applications DBA](https://agentprime.io/advisories/CVE-2026-61110.md)
  `CVE-2026-61110` · CVE record: Oracle Corporation Oracle Applications DBA · CVSS 8.8 High · Not analysed yet · Published 21 Jul 2026 · Tags: Privilege escalation, Authentication bypass
- [Improper privilege management in Oracle Corporation Oracle Applications DBA](https://agentprime.io/advisories/CVE-2026-61107.md)
  `CVE-2026-61107` · CVE record: Oracle Corporation Oracle Applications DBA · CVSS 7.2 High · Not analysed yet · Published 21 Jul 2026 · Tags: Privilege escalation
- [Missing authentication in Oracle Corporation Oracle WebCenter Enterprise Capture](https://agentprime.io/advisories/CVE-2026-61099.md)
  `CVE-2026-61099` · CVE record: Oracle Corporation Oracle WebCenter Enterprise Capture · CVSS 8.8 High · Not analysed yet · Published 21 Jul 2026 · Tags: Privilege escalation, Broken access control, Authentication bypass
- [Missing authentication in Oracle Corporation Oracle WebCenter Enterprise Capture](https://agentprime.io/advisories/CVE-2026-61098.md)
  `CVE-2026-61098` · CVE record: Oracle Corporation Oracle WebCenter Enterprise Capture · CVSS 8.8 High · Not analysed yet · Published 21 Jul 2026 · Tags: Privilege escalation, Broken access control, Authentication bypass
- [Improper privilege management in Oracle Corporation MySQL Server and others](https://agentprime.io/advisories/CVE-2026-61094.md)
  `CVE-2026-61094` · CVE record: Oracle Corporation MySQL Server and 1 more · CVSS 7.2 High · Not analysed yet · Published 21 Jul 2026 · Tags: Privilege escalation, Broken access control, Authentication bypass
- [Improper privilege management in Oracle Corporation Oracle Communications Billing and Revenue Management](https://agentprime.io/advisories/CVE-2026-61091.md)
  `CVE-2026-61091` · CVE record: Oracle Corporation Oracle Communications Billing and Revenue Management · CVSS 7.8 High · Not analysed yet · Published 21 Jul 2026 · Tags: Privilege escalation
- [Improper privilege management in Oracle Corporation Oracle Project Foundation](https://agentprime.io/advisories/CVE-2026-61090.md)
  `CVE-2026-61090` · CVE record: Oracle Corporation Oracle Project Foundation · CVSS 7.8 High · Not analysed yet · Published 21 Jul 2026 · Tags: Privilege escalation
- [Improper privilege management in Oracle Corporation PeopleSoft Enterprise HCM Talent Acquisition Manager](https://agentprime.io/advisories/CVE-2026-61076.md)
  `CVE-2026-61076` · CVE record: Oracle Corporation PeopleSoft Enterprise HCM Talent Acquisition Manager · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 21 Jul 2026 · Tags: Privilege escalation
- [Improper privilege management in Oracle Corporation Oracle iRecruitment](https://agentprime.io/advisories/CVE-2026-61064.md)
  `CVE-2026-61064` · CVE record: Oracle Corporation Oracle iRecruitment · CVSS 5.4 Medium · Not analysed yet · Published 21 Jul 2026 · Tags: Privilege escalation
- [Improper privilege management in Oracle Corporation PeopleSoft Enterprise SCM Supplier Contract Management](https://agentprime.io/advisories/CVE-2026-61063.md)
  `CVE-2026-61063` · CVE record: Oracle Corporation PeopleSoft Enterprise SCM Supplier Contract Management · CVSS 8.8 High · Not analysed yet · Published 21 Jul 2026 · Tags: Privilege escalation
- [Improper privilege management in Oracle Corporation PeopleSoft Enterprise FIN Cash Management](https://agentprime.io/advisories/CVE-2026-61062.md)
  `CVE-2026-61062` · CVE record: Oracle Corporation PeopleSoft Enterprise FIN Cash Management · CVSS 8.8 High · Not analysed yet · Published 21 Jul 2026 · Tags: Privilege escalation, Broken access control
- [Improper privilege management in Oracle Corporation Oracle JDeveloper](https://agentprime.io/advisories/CVE-2026-61061.md)
  `CVE-2026-61061` · CVE record: Oracle Corporation Oracle JDeveloper · CVSS 7.0 High · Not analysed yet · Published 21 Jul 2026 · Tags: Privilege escalation
- [Improper privilege management in Oracle Corporation PeopleSoft Enterprise SCM Order Management](https://agentprime.io/advisories/CVE-2026-61055.md)
  `CVE-2026-61055` · CVE record: Oracle Corporation PeopleSoft Enterprise SCM Order Management · CVSS 7.8 High · Not analysed yet · Published 21 Jul 2026 · Tags: Privilege escalation, Broken access control
- [Improper privilege management in Oracle Corporation Oracle Communications BRM - Elastic Charging Engine](https://agentprime.io/advisories/CVE-2026-61053.md)
  `CVE-2026-61053` · CVE record: Oracle Corporation Oracle Communications BRM - Elastic Charging Engine · CVSS 7.8 High · Not analysed yet · Published 21 Jul 2026 · Tags: Privilege escalation
- [Improper privilege management in Oracle Corporation Oracle Inventory Management](https://agentprime.io/advisories/CVE-2026-61023.md)
  `CVE-2026-61023` · CVE record: Oracle Corporation Oracle Inventory Management · CVSS 6.4 Medium · Not analysed yet · Published 21 Jul 2026 · Tags: Privilege escalation
- [Improper access control in Oracle Corporation Oracle Time and Labor](https://agentprime.io/advisories/CVE-2026-61013.md)
  `CVE-2026-61013` · CVE record: Oracle Corporation Oracle Time and Labor · CVSS 6.6 Medium · Not analysed yet · Published 21 Jul 2026 · Tags: Privilege escalation, Broken access control
- [Missing authentication in Oracle Corporation Oracle Process Manufacturing Systems](https://agentprime.io/advisories/CVE-2026-61010.md)
  `CVE-2026-61010` · CVE record: Oracle Corporation Oracle Process Manufacturing Systems · CVSS 8.8 High · Not analysed yet · Published 21 Jul 2026 · Tags: Privilege escalation, Broken access control, Authentication bypass
- [Improper privilege management in Oracle Corporation Oracle Process Manufacturing Logistics](https://agentprime.io/advisories/CVE-2026-61006.md)
  `CVE-2026-61006` · CVE record: Oracle Corporation Oracle Process Manufacturing Logistics · CVSS 7.2 High · Not analysed yet · Published 21 Jul 2026 · Tags: Privilege escalation
- [Missing authentication in Oracle Corporation Oracle Advanced Collections](https://agentprime.io/advisories/CVE-2026-60989.md)
  `CVE-2026-60989` · CVE record: Oracle Corporation Oracle Advanced Collections · CVSS 8.8 High · Not analysed yet · Published 21 Jul 2026 · Tags: Privilege escalation, Broken access control, Authentication bypass
- [Missing authentication in Oracle Corporation Oracle Project Portfolio Analysis](https://agentprime.io/advisories/CVE-2026-60988.md)
  `CVE-2026-60988` · CVE record: Oracle Corporation Oracle Project Portfolio Analysis · CVSS 7.5 High · Not analysed yet · Published 21 Jul 2026 · Tags: Privilege escalation, Broken access control, Authentication bypass
- [Improper privilege management in Oracle Corporation Oracle E-Business Tax](https://agentprime.io/advisories/CVE-2026-60973.md)
  `CVE-2026-60973` · CVE record: Oracle Corporation Oracle E-Business Tax · CVSS 7.8 High · Not analysed yet · Published 21 Jul 2026 · Tags: Privilege escalation
- [Open redirect in Oracle Corporation Oracle Transportation Execution](https://agentprime.io/advisories/CVE-2026-60957.md)
  `CVE-2026-60957` · CVE record: Oracle Corporation Oracle Transportation Execution · CVSS 5.4 Medium · Not analysed yet · Published 21 Jul 2026 · Tags: Privilege escalation, Broken access control, Cross-site request forgery (CSRF), Open redirect
- [Missing authentication in Oracle Corporation Oracle Transportation Execution](https://agentprime.io/advisories/CVE-2026-60952.md)
  `CVE-2026-60952` · CVE record: Oracle Corporation Oracle Transportation Execution · CVSS 8.8 High · Not analysed yet · Published 21 Jul 2026 · Tags: Privilege escalation, Authentication bypass
- [Improper privilege management in Oracle Corporation Oracle Service Fulfillment Manager](https://agentprime.io/advisories/CVE-2026-60943.md)
  `CVE-2026-60943` · CVE record: Oracle Corporation Oracle Service Fulfillment Manager · CVSS 7.5 High · Not analysed yet · Published 21 Jul 2026 · Tags: Privilege escalation
- [Improper access control in Oracle Corporation Oracle Service Fulfillment Manager](https://agentprime.io/advisories/CVE-2026-60941.md)
  `CVE-2026-60941` · CVE record: Oracle Corporation Oracle Service Fulfillment Manager · CVSS 8.7 High · Not analysed yet · Published 21 Jul 2026 · Tags: Privilege escalation, Broken access control
- [Improper privilege management in Oracle Corporation Oracle Labor Distribution](https://agentprime.io/advisories/CVE-2026-60938.md)
  `CVE-2026-60938` · CVE record: Oracle Corporation Oracle Labor Distribution · CVSS 4.1 Medium · Not analysed yet · Published 21 Jul 2026 · Tags: Privilege escalation
- [Missing authentication in Oracle Corporation Oracle Labor Distribution](https://agentprime.io/advisories/CVE-2026-60932.md)
  `CVE-2026-60932` · CVE record: Oracle Corporation Oracle Labor Distribution · CVSS 8.8 High · Not analysed yet · Published 21 Jul 2026 · Tags: Privilege escalation, Authentication bypass
- [Missing authentication in Oracle Corporation Oracle Public Sector Financials](https://agentprime.io/advisories/CVE-2026-60931.md)
  `CVE-2026-60931` · CVE record: Oracle Corporation Oracle Public Sector Financials · CVSS 7.5 High · Not analysed yet · Published 21 Jul 2026 · Tags: Privilege escalation, Broken access control, Authentication bypass
- [Missing authentication in Oracle Corporation Oracle Public Sector Financials](https://agentprime.io/advisories/CVE-2026-60927.md)
  `CVE-2026-60927` · CVE record: Oracle Corporation Oracle Public Sector Financials · CVSS 7.5 High · Not analysed yet · Published 21 Jul 2026 · Tags: Privilege escalation, Broken access control, Authentication bypass
- [Missing authentication in Oracle Corporation Oracle Public Sector Payroll](https://agentprime.io/advisories/CVE-2026-60925.md)
  `CVE-2026-60925` · CVE record: Oracle Corporation Oracle Public Sector Payroll · CVSS 7.2 High · Not analysed yet · Published 21 Jul 2026 · Tags: Privilege escalation, Broken access control, Authentication bypass
- [Missing authentication in Oracle Corporation Oracle Public Sector Payroll](https://agentprime.io/advisories/CVE-2026-60924.md)
  `CVE-2026-60924` · CVE record: Oracle Corporation Oracle Public Sector Payroll · CVSS 8.8 High · Not analysed yet · Published 21 Jul 2026 · Tags: Privilege escalation, Authentication bypass
- [Missing authentication in Oracle Corporation Oracle Customer Care](https://agentprime.io/advisories/CVE-2026-60920.md)
  `CVE-2026-60920` · CVE record: Oracle Corporation Oracle Customer Care · CVSS 8.8 High · Not analysed yet · Published 21 Jul 2026 · Tags: Privilege escalation, Authentication bypass
- [Missing authentication in Oracle Corporation Oracle Shipping Execution](https://agentprime.io/advisories/CVE-2026-60918.md)
  `CVE-2026-60918` · CVE record: Oracle Corporation Oracle Shipping Execution · CVSS 7.2 High · Not analysed yet · Published 21 Jul 2026 · Tags: Privilege escalation, Broken access control, Authentication bypass
- [Missing authentication in Oracle Corporation Oracle Project Intelligence](https://agentprime.io/advisories/CVE-2026-60901.md)
  `CVE-2026-60901` · CVE record: Oracle Corporation Oracle Project Intelligence · CVSS 8.8 High · Not analysed yet · Published 21 Jul 2026 · Tags: Privilege escalation, Broken access control, Authentication bypass
- [Improper privilege management in Oracle Corporation Oracle HCM Configuration Workbench](https://agentprime.io/advisories/CVE-2026-60900.md)
  `CVE-2026-60900` · CVE record: Oracle Corporation Oracle HCM Configuration Workbench · CVSS 7.2 High · Not analysed yet · Published 21 Jul 2026 · Tags: Privilege escalation
- [Missing authentication in Oracle Corporation Oracle Warehouse Management](https://agentprime.io/advisories/CVE-2026-60898.md)
  `CVE-2026-60898` · CVE record: Oracle Corporation Oracle Warehouse Management · CVSS 8.8 High · Not analysed yet · Published 21 Jul 2026 · Tags: Privilege escalation, Broken access control, Authentication bypass
- [Missing authentication in Oracle Corporation Oracle Payroll](https://agentprime.io/advisories/CVE-2026-60897.md)
  `CVE-2026-60897` · CVE record: Oracle Corporation Oracle Payroll · CVSS 8.8 High · Not analysed yet · Published 21 Jul 2026 · Tags: Privilege escalation, Broken access control, Authentication bypass
- [Missing authentication in Oracle Corporation Oracle Payroll](https://agentprime.io/advisories/CVE-2026-60894.md)
  `CVE-2026-60894` · CVE record: Oracle Corporation Oracle Payroll · CVSS 7.5 High · Not analysed yet · Published 21 Jul 2026 · Tags: Privilege escalation, Broken access control, Authentication bypass
- [Missing authentication in Oracle Corporation Oracle Payroll](https://agentprime.io/advisories/CVE-2026-60890.md)
  `CVE-2026-60890` · CVE record: Oracle Corporation Oracle Payroll · CVSS 8.8 High · Not analysed yet · Published 21 Jul 2026 · Tags: Privilege escalation, Broken access control, Authentication bypass
- [Improper authorization in Oracle Corporation Oracle Work in Process](https://agentprime.io/advisories/CVE-2026-60886.md)
  `CVE-2026-60886` · CVE record: Oracle Corporation Oracle Work in Process · CVSS 7.6 High · Not analysed yet · Published 21 Jul 2026 · Tags: Information disclosure, Privilege escalation, Broken access control, Cross-site request forgery (CSRF)
- [Missing authentication in Oracle Corporation Oracle Order Management](https://agentprime.io/advisories/CVE-2026-60872.md)
  `CVE-2026-60872` · CVE record: Oracle Corporation Oracle Order Management · CVSS 8.8 High · Not analysed yet · Published 21 Jul 2026 · Tags: Privilege escalation, Broken access control, Authentication bypass
- [Missing authentication in Oracle Corporation Oracle Advanced Pricing](https://agentprime.io/advisories/CVE-2026-60863.md)
  `CVE-2026-60863` · CVE record: Oracle Corporation Oracle Advanced Pricing · CVSS 8.8 High · Not analysed yet · Published 21 Jul 2026 · Tags: Privilege escalation, Broken access control, Authentication bypass
- [Missing authentication in Oracle Corporation Oracle Quoting](https://agentprime.io/advisories/CVE-2026-60859.md)
  `CVE-2026-60859` · CVE record: Oracle Corporation Oracle Quoting · CVSS 7.5 High · Not analysed yet · Published 21 Jul 2026 · Tags: Privilege escalation, Broken access control, Authentication bypass
- [Missing authentication in Oracle Corporation Oracle Quality](https://agentprime.io/advisories/CVE-2026-60855.md)
  `CVE-2026-60855` · CVE record: Oracle Corporation Oracle Quality · CVSS 7.5 High · Not analysed yet · Published 21 Jul 2026 · Tags: Privilege escalation, Broken access control, Authentication bypass
- [Improper access control in Oracle Corporation Oracle Quality](https://agentprime.io/advisories/CVE-2026-60854.md)
  `CVE-2026-60854` · CVE record: Oracle Corporation Oracle Quality · CVSS 8.2 High · Not analysed yet · Published 21 Jul 2026 · Tags: Privilege escalation, Broken access control
- [Improper access control in Oracle Corporation Oracle Order Entry](https://agentprime.io/advisories/CVE-2026-60847.md)
  `CVE-2026-60847` · CVE record: Oracle Corporation Oracle Order Entry · CVSS 3.4 Low · Not analysed yet · Published 21 Jul 2026 · Tags: Privilege escalation, Broken access control
- [Improper access control in Oracle Corporation Oracle Price Protection](https://agentprime.io/advisories/CVE-2026-60837.md)
  `CVE-2026-60837` · CVE record: Oracle Corporation Oracle Price Protection · CVSS 8.4 High · Not analysed yet · Published 21 Jul 2026 · Tags: Privilege escalation, Broken access control
- [Improper privilege management in Oracle Corporation Oracle HCM Common Architecture](https://agentprime.io/advisories/CVE-2026-60836.md)
  `CVE-2026-60836` · CVE record: Oracle Corporation Oracle HCM Common Architecture · CVSS 7.2 High · Not analysed yet · Published 21 Jul 2026 · Tags: Privilege escalation
- [Improper privilege management in Oracle Corporation Oracle Solaris](https://agentprime.io/advisories/CVE-2026-60833.md)
  `CVE-2026-60833` · CVE record: Oracle Corporation Oracle Solaris · CVSS 7.0 High · Not analysed yet · Published 21 Jul 2026 · Tags: Privilege escalation
- [Improper access control in Oracle Corporation Oracle BI Publisher](https://agentprime.io/advisories/CVE-2026-60719.md)
  `CVE-2026-60719` · CVE record: Oracle Corporation Oracle BI Publisher · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 21 Jul 2026 · Tags: Privilege escalation, Broken access control, Denial of service, CWE-20
- [Missing authentication in Oracle Corporation Oracle General Ledger](https://agentprime.io/advisories/CVE-2026-60678.md)
  `CVE-2026-60678` · CVE record: Oracle Corporation Oracle General Ledger · CVSS 8.8 High · Not analysed yet · Published 21 Jul 2026 · Tags: Privilege escalation, Authentication bypass
- [Improper access control in Oracle Corporation Oracle WebCenter Content](https://agentprime.io/advisories/CVE-2026-60663.md)
  `CVE-2026-60663` · CVE record: Oracle Corporation Oracle WebCenter Content · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 21 Jul 2026 · Tags: Privilege escalation, Broken access control
- [Improper privilege management in Oracle Corporation Oracle Solaris](https://agentprime.io/advisories/CVE-2026-60661.md)
  `CVE-2026-60661` · CVE record: Oracle Corporation Oracle Solaris · CVSS 7.8 High · Not analysed yet · Published 21 Jul 2026 · Tags: Privilege escalation
- [Missing authentication in Oracle Corporation Oracle WebCenter Content](https://agentprime.io/advisories/CVE-2026-60654.md)
  `CVE-2026-60654` · CVE record: Oracle Corporation Oracle WebCenter Content · CVSS 8.8 High · Not analysed yet · Published 21 Jul 2026 · Tags: Privilege escalation, Broken access control, Authentication bypass
- [Improper privilege management in Oracle Corporation Oracle Data Integrator](https://agentprime.io/advisories/CVE-2026-60625.md)
  `CVE-2026-60625` · CVE record: Oracle Corporation Oracle Data Integrator · CVSS 7.8 High · Not analysed yet · Published 21 Jul 2026 · Tags: Privilege escalation
- [Missing authentication in Oracle Corporation JD Edwards EnterpriseOne HCM Foundation](https://agentprime.io/advisories/CVE-2026-60619.md)
  `CVE-2026-60619` · CVE record: Oracle Corporation JD Edwards EnterpriseOne HCM Foundation · CVSS 7.5 High · Not analysed yet · Published 21 Jul 2026 · Tags: Privilege escalation, Broken access control, Authentication bypass
- [Missing authentication in Oracle Corporation Oracle Transportation Management](https://agentprime.io/advisories/CVE-2026-60583.md)
  `CVE-2026-60583` · CVE record: Oracle Corporation Oracle Transportation Management · CVSS 8.8 High · Not analysed yet · Published 21 Jul 2026 · Tags: Privilege escalation, Broken access control, Authentication bypass

Newest: <https://agentprime.io/advisories/tag/privilege-escalation.md>
Older: <https://agentprime.io/advisories/tag/privilege-escalation.md?cursor=WyIyMDI2LTA3LTIxVDIxOjM2OjAwLjA4MjAwMFoiLCJDVkUtMjAyNi02MDU4MyJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=privilege-escalation&cursor=WyIyMDI2LTA3LTIxVDIxOjM4OjE4Ljc1NDAwMFoiLCJDVkUtMjAyNi02MTEyNiJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/privilege-escalation/?cursor=WyIyMDI2LTA3LTIxVDIxOjM4OjE4Ljc1NDAwMFoiLCJDVkUtMjAyNi02MTEyNiJd>. Everything for agents: <https://agentprime.io/llms.txt>.