cve-2023-1874

CVE-2023-1874 Disclaimer THIS SCRIPT IS DESIGNED FOR WHITE HAT AND EDUCATIONAL PURPOSES ONLY. ANY USE OF THIS AGAINST A DEVICE YOU ARE NOT AUTHORIZED TO TEST ON OR DO NOT OWN IS YOUR OWN RESPONSIBILITY. THE AUTHOR OF THIS SCRIPT TAKES NO RESPONSIBILITY FOR ANYTHING YOU DO WITH THIS SCRIPT. YOUR...

CVE-2026-91642

A vulnerability exists in the Security component of Oracle Essbase version 21.8.3.0.0 . An unauthenticated attacker with network access via HTTP can exploit this flaw to compromise the system. Successful exploitation may lead to unauthorized read, update, insert, or delete access to a subset of a...

CVE-2026-91615

A vulnerability exists in the Java VM component of Oracle Database Server affecting versions 19.3-19.32 , 21.3-21.23 , and 23.4.0-23.26.3 . A low-privileged attacker with network access via SOCKS5 can exploit this difficulty-to-exploit flaw to compromise the Java VM. Successful exploitation may l...

CVE-2026-91588

A vulnerability exists in the BI Search component of Oracle Business Intelligence Enterprise Edition (Oracle Analytics), specifically affecting versions 8.2.0.0.0 and 12.2.1.4.0 . An unauthenticated attacker with network access via HTTP can exploit this flaw to compromise the system, although the...

CVE-2026-91555

The Oracle BI Publisher product of Oracle Analytics (specifically the Web Server component) is vulnerable in versions 8.2.0.0.0 , 12.2.1.4.0 , and 26.01.0.0.0 . An unauthenticated attacker with network access via HTTP can exploit this vulnerability to compromise the product, though successful att...

CVE-2026-91554

The Oracle BI Publisher product within Oracle Analytics (specifically the Web Server component) is affected by a vulnerability in version 12.2.1.4.0 . An unauthenticated attacker with network access via HTTP can exploit this flaw to compromise the system. Successful exploitation can result in una...

CVE-2026-91541

A vulnerability exists in the PeopleSoft Enterprise FIN Common Objects Brazil product (specifically the Common Objects component) in version 9.1 . An unauthenticated attacker with network access via HTTP can exploit this vulnerability to compromise the system. Successful exploitation may lead to ...

CVE-2026-91534

A vulnerability exists in the Analytics Web General component of Oracle Business Intelligence Enterprise Edition (versions 8.2.0.0.0, 12.2.1.4.0, and 26.01.0.0.0). An unauthenticated attacker with network access via HTTP can exploit this issue to cause a complete Denial of Service (DoS) by trigge...

CVE-2026-91526

A vulnerability exists in the Web Server component of Oracle BI Publisher (part of Oracle Analytics) affecting versions 8.2.0.0.0 , 12.2.1.4.0 , and 26.01.0.0.0 . This high-complexity vulnerability allows an unauthenticated attacker with network access via HTTP to compromise the product, though i...

CVE-2026-91497

Oracle PeopleSoft Enterprise PeopleTools (component: Updates Environment Mgmt ) versions 8.61-8.63 are affected by a vulnerability that allows an unauthenticated attacker with network access via HTTP to compromise the product. Successful exploitation can result in unauthorized update, insert, or ...

CVE-2026-91494

The Oracle Identity Manager Connector product within Oracle Fusion Middleware is vulnerable in versions 12.2.1.4.0 and 14.1.2.1.0 . Specifically, the LDAP Gateway component contains a vulnerability that allows an unauthenticated attacker with network access via TCP to compromise the system. This ...

CVE-2026-91492

A vulnerability exists in the Oracle Identity Manager Connector product within Oracle Fusion Middleware (specifically the SAP ERP+ component). The issue affects supported versions 12.2.1.4.0 and 14.1.2.1.0 . It is a difficult to exploit vulnerability that allows an unauthenticated attacker with n...

CVE-2026-91490

The Oracle Identity Manager Connector product within Oracle Fusion Middleware is impacted by a critical vulnerability in the LDAP Gateway component, specifically affecting versions 12.2.1.4.0 and 14.1.2.1.0 . An unauthenticated attacker with network access via LDAP can easily exploit this flaw to...

CVE-2026-91485

The PeopleSoft Enterprise FIN Cash Management product (version 9.2 ) is vulnerable to a high-complexity flaw. A high-privileged attacker with access to the execution infrastructure can compromise the system, provided they can obtain human interaction from another person. Exploitation may result i...

CVE-2026-91475

A vulnerability exists in the Oracle Outside In Technology product (component: Outside In Clean Content SDK ) of Oracle Fusion Middleware , specifically affecting version 8.5.8 . A low-privileged attacker with local access to the infrastructure can exploit this vulnerability to compromise the pro...

CVE-2026-91468

The PeopleSoft Enterprise PeopleTools product by Oracle PeopleSoft (specifically the QAS component) is vulnerable in supported versions 8.61-8.63 . An unauthenticated attacker with network access via HTTP can easily exploit this vulnerability to compromise the system. Successful exploitation may ...

CVE-2026-91462

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: JGSS. Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 an...

CVE-2026-91462

A vulnerability exists in the JGSS component of Oracle Java SE , Oracle GraalVM for JDK , and Oracle GraalVM Enterprise Edition . Affected versions include Oracle Java SE 8u503, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, and 27; Oracle GraalVM for JDK 17.0.20.1 and 21.0.12.1; and Oracle GraalVM E...

CVE-2026-91461

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: JSSE. Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 an...

CVE-2026-91461

A vulnerability exists in the JSSE component of Oracle Java SE , Oracle GraalVM for JDK , and Oracle GraalVM Enterprise Edition . Affected versions include Oracle Java SE (8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27), Oracle GraalVM for JDK (17.0.20.1, 21.0.12.1), and Oracle ...