CVE-2026-91541

A vulnerability exists in the PeopleSoft Enterprise FIN Common Objects Brazil product (specifically the Common Objects component) in version 9.1 . An unauthenticated attacker with network access via HTTP can exploit this vulnerability to compromise the system. Successful exploitation may lead to ...

CVE-2026-91536

A vulnerability exists in the Fabric Layer component of Oracle SOA Suite (Oracle Fusion Middleware) affecting versions 12.2.1.4.0 and 14.1.2.0.0 . A low-privileged attacker with network access via HTTPS can exploit this difficult-to-exploit vulnerability to compromise the suite. Successful exploi...

CVE-2026-91534

A vulnerability exists in the Analytics Web General component of Oracle Business Intelligence Enterprise Edition (versions 8.2.0.0.0, 12.2.1.4.0, and 26.01.0.0.0). An unauthenticated attacker with network access via HTTP can exploit this issue to cause a complete Denial of Service (DoS) by trigge...

CVE-2026-91528

A vulnerability exists in the BI Platform Security component of the Oracle BI Publisher product within Oracle Analytics, specifically affecting version 12.2.1.4.0 . A low-privileged attacker with network access via HTTPS can exploit this flaw to gain unauthorized read access to a subset of access...

CVE-2026-91530

A vulnerability exists in the Oracle GoldenGate Admin Client Executable affecting versions 23.4-23.26.2.0.0 . A high-privileged attacker with network access via HTTP can exploit this difficult-to-exploit flaw to compromise Oracle GoldenGate. Successful exploitation may result in unauthorized acce...

CVE-2026-91526

A vulnerability exists in the Web Server component of Oracle BI Publisher (part of Oracle Analytics) affecting versions 8.2.0.0.0 , 12.2.1.4.0 , and 26.01.0.0.0 . This high-complexity vulnerability allows an unauthenticated attacker with network access via HTTP to compromise the product, though i...

CVE-2026-91523

A vulnerability exists in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics, specifically within the Analytics Web General component. Affected versions include 8.2.0.0.0, 12.2.1.4.0, and 26.01.0.0.0 . A low-privileged attacker with network access via HTTP can exploit...

CVE-2026-91519

A vulnerability exists in the Report Distribution component of Oracle PeopleSoft Enterprise PeopleTools (affected versions 8.61-8.63 ). This easily exploitable flaw allows a low-privileged attacker with network access via HTTP to compromise the system. Successful exploitation can result in unauth...

CVE-2026-91520

The Oracle Agile Product Lifecycle Management for Process product (specifically the Product Quality Management component) is vulnerable in version 6.2.4 . A low-privileged attacker with network access via HTTP can exploit this vulnerability to compromise the system. Successful exploitation may re...

CVE-2026-91521

The Oracle Agile Product Lifecycle Management for Process product (specifically the Product Quality Management component) in version 6.2.4 is affected by a vulnerability. A low-privileged attacker with network access via HTTP can easily exploit this flaw to compromise the system. Successful explo...

CVE-2026-91518

A vulnerability exists in the BI Publisher Security component of the Oracle BI Publisher product (Oracle Analytics). Affected versions include 8.2.0.0.0 , 12.2.1.4.0 , and 26.01.0.0.0 . A low-privileged attacker with network access via HTTP can exploit this flaw to compromise the product, potenti...

CVE-2026-91514

A vulnerability exists in the Web Server component of the Oracle BI Publisher product within Oracle Analytics. Affected versions include 8.2.0.0.0 , 12.2.1.4.0 , and 26.01.0.0.0 . A low-privileged attacker with network access via HTTP can exploit this vulnerability to compromise the product, pote...

CVE-2026-91512

The Oracle Agile Product Lifecycle Management for Process product (part of Oracle Supply Chain), specifically the Product Quality Management component in version 6.2.4 , is vulnerable to a high-severity flaw. A high privileged attacker with network access via HTTP can exploit this vulnerability t...

CVE-2026-91505

A vulnerability exists in the Porting component of Oracle PeopleSoft Enterprise PeopleTools (versions 8.61 and 8.62 ). A high-privileged attacker with access to the execution infrastructure can exploit this flaw to compromise the product. Successful exploitation may lead to unauthorized creation,...

CVE-2026-91511

A vulnerability exists in the Internal Operations component of the Oracle Purchasing product within Oracle E-Business Suite versions 12.2.3-12.2.15 . A low-privileged attacker with network access via HTTP can exploit this difficult-to-exploit vulnerability to compromise Oracle Purchasing. Due to ...

CVE-2026-91503

A vulnerability exists in the VPD component of Oracle Database Server affecting versions 19.3-19.32 , 21.3-21.23 , and 23.4.0-23.26.3 . A low-privileged attacker with Create Table privileges and network access via Oracle Net can exploit this flaw to compromise the VPD. Successful exploitation may...

CVE-2026-91502

The Oracle WebLogic Server (component: Core ) is affected by a vulnerability in versions 12.2.1.4.0 , 14.1.1.0.0 , 14.1.2.0.0 , and 15.1.1.0.0 . An unauthenticated attacker with network access via TLS can exploit this issue to compromise the server. Successful exploitation can lead to unauthorize...

CVE-2026-91501

A vulnerability exists in the Installer component of the Oracle Identity Manager product within Oracle Fusion Middleware . Affected versions include 12.2.1.4.0 and 14.1.2.1.0 . A low-privileged attacker with logon access to the underlying infrastructure can exploit this flaw to compromise Oracle ...

CVE-2026-91497

Oracle PeopleSoft Enterprise PeopleTools (component: Updates Environment Mgmt ) versions 8.61-8.63 are affected by a vulnerability that allows an unauthenticated attacker with network access via HTTP to compromise the product. Successful exploitation can result in unauthorized update, insert, or ...

CVE-2026-91494

The Oracle Identity Manager Connector product within Oracle Fusion Middleware is vulnerable in versions 12.2.1.4.0 and 14.1.2.1.0 . Specifically, the LDAP Gateway component contains a vulnerability that allows an unauthenticated attacker with network access via TCP to compromise the system. This ...