CVE-2026-91281

A vulnerability exists in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure SEC ) affecting versions 9.2.0.0-9.2.26.5 . An unauthenticated attacker with network access via HTTP can exploit this flaw with human interaction to compromise the syste...

CVE-2026-91282

The JD Edwards EnterpriseOne Tools product (specifically the Portal SEC component) is vulnerable in versions 9.2.0.0-9.2.26.5 . A difficult-to-exploit vulnerability allows an unauthenticated attacker with network access via HTTP to compromise the system. Successful exploitation can lead to unauth...

CVE-2026-91280

A vulnerability exists in the Web Runtime SEC component of JD Edwards EnterpriseOne Tools (versions 9.2.0.0-9.2.26.5) from Oracle JD Edwards. An unauthenticated attacker with network access via HTTP can exploit this flaw to compromise the system, provided they can trigger the necessary human inte...

CVE-2026-91279

A vulnerability exists in the Web Runtime SEC component of Oracle JD Edwards EnterpriseOne Tools (versions 9.2.0.0-9.2.26.5). An unauthenticated attacker with network access via HTTP can exploit this flaw to compromise the tools, provided they can elicit human interaction from a user. Successful ...

CVE-2026-91272

A vulnerability exists in the Interoperability SEC component of Oracle JD Edwards EnterpriseOne Tools (affected versions 9.2.0.0-9.2.26.5). An unauthenticated attacker with network access via HTTPS can exploit this flaw to compromise the system. Successful exploitation may result in unauthorized ...

CVE-2026-91267

The JD Edwards EnterpriseOne Tools product by Oracle JD Edwards is affected by a vulnerability in the Interoperability SEC component, specifically impacting versions 9.2.0.0-9.2.26.5 . An unauthenticated attacker with network access via SOAP can exploit this flaw to compromise the tools, potentia...

CVE-2026-91265

The JD Edwards EnterpriseOne Tools product by Oracle JD Edwards is affected by a critical vulnerability in the Enterprise Infrastructure SEC component. This issue impacts supported versions 9.2.0.0 through 9.2.26.5 . An unauthenticated attacker with network access via HTTP can easily exploit this...

CVE-2026-91264

A vulnerability exists in the Security component of Oracle PeopleSoft Enterprise SCM Manufacturing version 9.2 . A difficult-to-exploit flaw allows an unauthenticated attacker with network access via HTTP to compromise the product. Successful exploitation can lead to unauthorized update, insert, ...

CVE-2026-91262

The Oracle WebCenter Content product (component: Content Server ) is affected by a vulnerability in version 14.1.2.0.0 . An unauthenticated attacker with network access via HTTP can exploit this flaw, though successful exploitation requires human interaction from a user other than the attacker. T...

CVE-2026-91246

A vulnerability exists in the Oracle WebCenter Portal product of Oracle Fusion Middleware, specifically within the Runtime Tools component. Affected versions include 12.2.1.4.0 and 14.1.2.0.0 . An unauthenticated attacker with network access via HTTP can compromise the portal, though successful e...

CVE-2026-91238

The Oracle SOA Suite product of Oracle Fusion Middleware is affected by a vulnerability in the Fabric Layer component. Specifically, versions 12.2.1.4.0 and 14.1.2.0.0 are impacted. A low-privileged attacker with network access via HTTP can exploit this vulnerability to gain unauthorized access t...

CVE-2026-91230

A vulnerability exists in the Fabric Layer component of Oracle SOA Suite within Oracle Fusion Middleware, specifically affecting versions 12.2.1.4.0 and 14.1.2.0.0 . An unauthenticated attacker with network access via HTTP can exploit this flaw to compromise the system. Successful exploitation ca...

CVE-2026-91225

A vulnerability exists in the Oracle SOA Suite product of Oracle Fusion Middleware (specifically within the Adapters component). Affected versions include 12.2.1.4.0 and 14.1.2.0.0 . An unauthenticated attacker with network access via HTTP can exploit this vulnerability to compromise the system. ...

CVE-2026-91212

The Oracle Identity Manager Connector product of Oracle Fusion Middleware is affected by a vulnerability in the Generic REST component. This issue impacts supported versions 12.2.1.4.0 and 14.1.2.1.0 . An unauthenticated attacker with network access via HTTP can easily exploit this vulnerability ...

CVE-2026-91209

A vulnerability exists in the X Window System component of Oracle Solaris version 11.4 . This is a difficult-to-exploit flaw that allows a low-privileged attacker with local infrastructure access to compromise the system, provided they can trigger human interaction from another person. Successful...

CVE-2026-87423

A vulnerability exists in the X Window System component of Oracle Solaris version 11.4 . A low-privileged attacker with local access to the infrastructure can exploit this difficult-to-exploit flaw to compromise the system. Successful exploitation may lead to unauthorized read, update, insert, or...

CVE-2026-87422

A vulnerability exists in the Services component of Oracle Solaris version 11.4 . This difficult-to-exploit vulnerability allows an unauthenticated attacker with access to the underlying infrastructure to compromise the system. The attack requires human interaction from a user other than the atta...

CVE-2026-87421

The Image Packaging System component in Oracle Solaris version 11.4 is vulnerable to an easily exploitable flaw. An unauthenticated attacker with network access via HTTP can compromise the system, though the attack requires human interaction from a user. Successful exploitation can result in unau...

CVE-2026-87417

A vulnerability exists in the Image Packaging System component of Oracle Solaris version 11.4 . An unauthenticated attacker with network access via HTTP can easily exploit this flaw to compromise the system. Successful exploitation may lead to unauthorized access to critical data or complete acce...

CVE-2026-87399

A vulnerability exists in the Oracle WebCenter Content product (component: Content Server ) within Oracle Fusion Middleware, specifically affecting version 14.1.2.0.0 . A low-privileged attacker with network access via HTTP can exploit this vulnerability to compromise the system, provided there i...