CVE-2026-101438

Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM component: Siebel Cloud Manager. Supported versions that are affected are 22.3-26.9. Difficult to exploit vulnerability allows unauthenticated attacker with access to the physical communication segment attached to the...

CVE-2026-101422

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft component: Report Distribution. Supported versions that are affected are 8.61-8.63. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise...

CVE-2026-101426

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft component: SQR. Supported versions that are affected are 8.61-8.63. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where PeopleSoft Enterprise PeopleTools...

CVE-2026-101420

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft component: SQR. Supported versions that are affected are 8.61-8.63. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Whi...

CVE-2026-101362

Vulnerability in Oracle REST Data Services component: Core. Supported versions that are affected are 24.2.0-26.1.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle REST Data Services. Successful attacks require human interaction...

CVE-2026-91625

The Oracle Agile Product Lifecycle Management for Process product (specifically the Product Quality Management component) is vulnerable in version 6.2.4 . An unauthenticated attacker with network access via HTTP can easily exploit this vulnerability to compromise the system. Successful exploitati...

CVE-2026-91623

A vulnerability exists in the Product Quality Management component of Oracle Agile Product Lifecycle Management for Process (specifically version 6.2.4 ). This difficult to exploit vulnerability allows an unauthenticated attacker with network access via HTTP to compromise the system. Successful e...

CVE-2026-91624

The Oracle Agile Product Lifecycle Management for Process product (Oracle Supply Chain), specifically the Product Quality Management component in version 6.2.4 , contains a critical vulnerability. An unauthenticated attacker with network access via HTTP can easily exploit this flaw to compromise ...

CVE-2026-91505

A vulnerability exists in the Porting component of Oracle PeopleSoft Enterprise PeopleTools (versions 8.61 and 8.62 ). A high-privileged attacker with access to the execution infrastructure can exploit this flaw to compromise the product. Successful exploitation may lead to unauthorized creation,...

CVE-2026-91489

A vulnerability exists in the LDAP Gateway component of the Oracle Identity Manager Connector product within Oracle Fusion Middleware , affecting supported versions 12.2.1.4.0 and 14.1.2.1.0 . A low privileged attacker with access to the infrastructure where the software executes can exploit this...

CVE-2026-91488

The Oracle Identity Manager Connector product within Oracle Fusion Middleware (specifically the Generic REST component) is vulnerable in versions 12.2.1.4.0 and 14.1.2.1.0 . A low-privileged attacker with local access to the infrastructure can exploit this vulnerability to compromise the connecto...

CVE-2026-91484

A vulnerability exists in the Java plugin component of Oracle Java SE versions 8u503 and 8u503-perf . A low-privileged attacker with local access to the infrastructure can exploit this difficult-to-exploit flaw to compromise Oracle Java SE. This vulnerability specifically impacts Java deployments...

CVE-2026-91474

A vulnerability exists in the eProcurement component of Oracle PeopleSoft Enterprise FIN Common Objects Brazil (version 9.1 ). This easily exploitable flaw allows a high-privileged attacker with access to the physical communication segment attached to the hardware to compromise the product. Succe...

CVE-2026-91437

A vulnerability exists in the Server Infrastructure component of Oracle Siebel CRM Deployment (supported versions 17.0-26.9 ). A high-privileged attacker with network access via HTTP can exploit this flaw to compromise the deployment, potentially gaining unauthorized access to, or modification of...

CVE-2026-91423

The Siebel CRM Deployment product of Oracle Siebel CRM (specifically the Server Infrastructure component) is affected by a vulnerability in versions 17.0-26.9 . A high-privileged attacker with local access to the infrastructure can exploit this to compromise the deployment, potentially gaining un...

CVE-2026-91364

A vulnerability exists in the Siebel Cloud Manager component of Oracle Siebel CRM Cloud Applications (affected versions 22.3-26.9 ). This difficult-to-exploit vulnerability allows an unauthenticated attacker with access to the physical communication segment of the hardware to compromise the appli...

CVE-2026-91336

A vulnerability exists in the Utility component of Oracle Solaris version 11.4 . This easily exploitable flaw allows a low-privileged attacker with local access to the infrastructure to compromise the system. Successful exploitation can lead to unauthorized creation, deletion, or modification of ...

CVE-2026-91319

A vulnerability exists in the Java Business Objects component of the Oracle JDeveloper product within Oracle Fusion Middleware, specifically affecting versions 12.2.1.4.0 and 14.1.2.0.0 . This difficult-to-exploit flaw allows an unauthenticated attacker with network access via HTTP to compromise ...

CVE-2026-91287

The JD Edwards EnterpriseOne Tools product (component: Enterprise Infrastructure SEC ) is vulnerable in versions 9.2.0.0-9.2.26.5 . An unauthenticated attacker with access to the physical communication segment of the hardware can exploit this vulnerability to compromise the system. Successful exp...

CVE-2026-91271

The JD Edwards EnterpriseOne Tools product by Oracle JD Edwards is affected by a vulnerability in the Monitoring and Diagnostics SEC component, specifically in versions 9.2.0.0-9.2.26.5 . A low-privileged attacker with network access via HTTP can exploit this to compromise the system, potentially...