CVE-2026-91351

A vulnerability exists in the Outside In Clean Content SDK component of the Oracle Outside In Technology product (part of Oracle Fusion Middleware), specifically affecting version 8.5.8 . A low-privileged attacker with logon access to the infrastructure where the software executes can exploit thi...

CVE-2026-91347

The iSupport product within Oracle E-Business Suite (specifically the Service Requests component) is vulnerable in versions 12.2.3-12.2.15 . A low-privileged attacker with network access via HTTP can exploit this vulnerability to compromise iSupport, potentially leading to unauthorized creation, ...

CVE-2026-91346

A vulnerability exists in the Outside In Clean Content SDK component of the Oracle Outside In Technology product (specifically version 8.5.8 ). An unauthenticated attacker with network access via HTTP can exploit this flaw, though it requires human interaction from a user other than the attacker....

CVE-2026-91342

The Outside In Clean Content SDK component of the Oracle Fusion Middleware product (version 8.5.8 ) is vulnerable to a security flaw. An unauthenticated attacker with network access via HTTP can exploit this vulnerability to compromise Oracle Outside In Technology . While the attack requires huma...

CVE-2026-91343

A vulnerability exists in the Outside In Clean Content SDK component of the Oracle Outside In Technology product within Oracle Fusion Middleware (affected version 8.5.8 ). An unauthenticated attacker with network access via HTTP can exploit this vulnerability to compromise the technology, potenti...

CVE-2026-91341

A critical vulnerability exists in the Outside In Clean Content SDK component of Oracle Fusion Middleware (specifically version 8.5.8 ). An unauthenticated attacker with network access via HTTP can exploit this flaw to gain unauthorized access to critical data, allowing for the creation, deletion...

CVE-2026-91338

The iSupport product of Oracle E-Business Suite (versions 12.2.3-12.2.15) contains a vulnerability in its Internal operations component. This flaw allows a low-privileged attacker with network access via HTTP to compromise iSupport. Successful exploitation can lead to unauthorized creation, delet...

CVE-2026-91333

A vulnerability exists in the Security component of Oracle Java SE affecting versions 21.0.12.1 , 25.0.4.1 , and 27 . An unauthenticated attacker with network access via multiple protocols can exploit this vulnerability, which is difficult to trigger. Successful exploitation can result in unautho...

CVE-2026-91333

Vulnerability in Oracle Java SE component: Security. Supported versions that are affected are Oracle Java SE: 21.0.12.1, 25.0.4.1 and 27. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE. Successful attacks ...

CVE-2026-91332

A vulnerability exists in the Networking component of Oracle Java SE , affecting versions 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, and 27 . It also impacts Oracle GraalVM for JDK (17.0.20.1, 21.0.12.1) and Oracle GraalVM Enterprise Edition (21.3.19.1.1). An unauthenticated attacker ...

CVE-2026-91332

Vulnerability in Oracle Java SE component: Networking. Supported versions that are affected are Oracle Java SE: 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and 21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Easily exploitable...

CVE-2026-91329

A vulnerability exists in the Installation Security component of JD Edwards EnterpriseOne Tools (versions 9.2.0.0-9.2.26.5 ) from Oracle JD Edwards . An unauthenticated attacker with logon to the infrastructure where the software executes could exploit this difficult to exploit vulnerability, tho...

CVE-2026-91325

A vulnerability exists in the Installation Security component of the JD Edwards EnterpriseOne Tools product by Oracle JD Edwards, affecting versions 9.2.0.0-9.2.26.5 . An unauthenticated attacker with network access via HTTP can easily exploit this flaw to compromise the tools. Successful exploit...

CVE-2026-91320

A vulnerability exists in the Oracle JDeveloper product of Oracle Fusion Middleware , specifically affecting versions 12.2.1.4.0 and 14.1.2.0.0 . A high-privileged attacker with local access to the infrastructure where the software executes can exploit this issue to compromise the product. Succes...

CVE-2026-91318

A vulnerability exists in the Security Framework component of the Oracle JDeveloper product within Oracle Fusion Middleware (specifically versions 12.2.1.4.0 and 14.1.2.0.0 ). An unauthenticated attacker with network access via HTTP can compromise the system, though the attack requires human inte...

CVE-2026-91309

The JD Edwards EnterpriseOne Tools product by Oracle JD Edwards is affected by a vulnerability in the Interoperability SEC component, specifically in versions 9.2.0.0-9.2.26.5 . An unauthenticated attacker with network access via HTTPS can exploit this difficult-to-exploit vulnerability to compro...

CVE-2026-91305

A vulnerability exists in the Installation Security component of Oracle JD Edwards EnterpriseOne Tools (versions 9.2.0.0-9.2.26.5 ). An unauthenticated attacker with network access via HTTPS can easily exploit this flaw to compromise the system. Successful exploitation may result in unauthorized ...

CVE-2026-91301

A vulnerability exists in the Monitoring and Diagnostics SEC component of Oracle JD Edwards EnterpriseOne Tools (versions 9.2.0.0-9.2.26.5). A low-privileged attacker with local access to the infrastructure can exploit this difficult-to-trigger vulnerability to compromise the software. Impact inc...

CVE-2026-91300

A vulnerability exists in the Web Runtime SEC component of Oracle JD Edwards EnterpriseOne Tools (versions 9.2.0.0-9.2.26.5 ). An unauthenticated attacker with network access via HTTP can exploit this difficult-to-exploit vulnerability to compromise the product, provided they can trigger the nece...

CVE-2026-91288

A vulnerability exists in the Interoperability SEC component of Oracle JD Edwards EnterpriseOne Tools (affected versions 9.2.0.0-9.2.26.5 ). An unauthenticated attacker with network access via JDENET can exploit this difficult-to-exploit vulnerability to compromise the product. Successful exploit...