CVE-2026-91269

A vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure SEC ) affects versions 9.2.0.0-9.2.26.5 . A low-privileged attacker with network access via HTTP can easily exploit this flaw to compromise the system. Successful exploitation ...

CVE-2026-91266

A vulnerability exists in the Monitoring and Diagnostics SEC component of Oracle JD Edwards EnterpriseOne Tools (versions 9.2.0.0-9.2.26.5 ). A low-privileged attacker with local infrastructure access can exploit this to compromise the tool, potentially gaining unauthorized creation, deletion, mo...

CVE-2026-91247

A vulnerability exists in the Runtime Tools component of Oracle WebCenter Portal (Oracle Fusion Middleware), specifically affecting versions 12.2.1.4.0 and 14.1.2.0.0 . An unauthenticated attacker with network access via HTTP can exploit this flaw, though the attack is considered difficult and re...

CVE-2026-91243

A vulnerability exists in the Fabric Layer component of the Oracle Business Process Management Suite (part of Oracle Fusion Middleware). Affected versions include 12.2.1.4.0 and 14.1.2.0.0 . A low-privileged attacker with network access via HTTP can easily exploit this flaw to compromise the suit...

CVE-2026-91242

A vulnerability exists in the Plugins component of Oracle Solaris version 11.4 . This easily exploitable flaw allows a high-privileged attacker with local access to the infrastructure to compromise the system. Successful exploitation requires human interaction from a user other than the attacker ...

CVE-2026-91211

The Oracle Identity Manager Connector (part of Oracle Fusion Middleware) is vulnerable in versions 12.2.1.4.0 and 14.1.2.1.0 . A high-privileged attacker with network access via SOAP can exploit this vulnerability to compromise the connector. Successful exploitation allows for unauthorized creati...

CVE-2026-87408

A vulnerability exists in the Oracle Applications Framework product of Oracle E-Business Suite , specifically within the Personalization component. Affected versions include 12.2.3-12.2.15 . A low-privileged attacker with network access via HTTP can exploit this flaw, which requires human interac...

CVE-2026-87403

A vulnerability exists in the Applications DBA product of Oracle E-Business Suite within the AD Utilities component, affecting supported versions 12.2.3-12.2.15 . A low-privileged attacker with local infrastructure access can exploit this to compromise the Applications DBA. Successful exploitatio...

CVE-2026-87377

The WebCenter Content: Imaging product of Oracle Fusion Middleware (specifically the Core component) is affected by a vulnerability in version 14.1.2.0.0 . This issue allows a low-privileged attacker with network access via SOAP to compromise the product. Successful exploitation can lead to unaut...

CVE-2026-87376

The WebCenter Content: Imaging product of Oracle Fusion Middleware (component: Core ) is affected by a vulnerability in version 14.1.2.0.0 . A low-privileged attacker with network access via HTTP can exploit this difficult-to-exploit flaw to compromise the system. Successful exploitation may lead...

CVE-2026-87374

A vulnerability exists in the Content Server component of Oracle WebCenter Content (part of Oracle Fusion Middleware) affecting versions 12.2.1.4.0 and 14.1.2.0.0 . A low-privileged attacker with network access via HTTP can exploit this difficulty-to-exploit flaw to compromise the product. Succes...

CVE-2026-87371

A vulnerability exists in the Content Server component of Oracle WebCenter Content (part of Oracle Fusion Middleware) affecting versions 12.2.1.4.0 and 14.1.2.0.0 . A difficult-to-exploit vulnerability allows an unauthenticated attacker with access to the physical communication segment attached t...

CVE-2026-87346

The Oracle HTTP Server product within Oracle Fusion Middleware (specifically the Oracle Weblogic Server Proxy Plug-in for Oracle HTTP Server component) is vulnerable in versions 12.2.1.4.0 and 14.1.2.0.0 . A difficult-to-exploit vulnerability allows an unauthenticated attacker with network access...

CVE-2026-87319

A vulnerability exists in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards , specifically within the Enterprise Infrastructure SEC component. Affected versions include 9.2.0.0-9.2.26.5 . A low privileged attacker with logon access to the infrastructure where the tools execute can e...

CVE-2026-87318

The JD Edwards EnterpriseOne Tools product by Oracle JD Edwards (specifically the Enterprise Infrastructure SEC component) is vulnerable in versions 9.2.0.0-9.2.26.5 . A low-privileged attacker with local access to the infrastructure where the tools execute can exploit this difficult-to-exploit v...

CVE-2026-87315

The Oracle JD Edwards EnterpriseOne Tools product, specifically the Enterprise Infrastructure SEC component, is affected by CVE-2026-87315 in versions 9.2.0.0-9.2.26.5 . An unauthenticated attacker with network access via HTTP can exploit this vulnerability to compromise the system. Successful ex...

CVE-2026-87308

A vulnerability exists in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards, specifically within the Enterprise Infrastructure SEC component. Affected versions range from 9.2.0.0 to 9.2.26.5 . A low-privileged attacker with logon access to the infrastructure where the tools execute ...

CVE-2026-83374

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Security. Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20....

CVE-2026-83374

A vulnerability exists in the Security component of Oracle Java SE , Oracle GraalVM for JDK , and Oracle GraalVM Enterprise Edition . Affected versions include Oracle Java SE 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27 ; Oracle GraalVM for JDK 17.0.20.1 and 21.0.12.1 ; and Or...

CVE-2026-83361

A vulnerability exists in the Award/PO component of Oracle Contract Lifecycle Management for Public Sector (Oracle E-Business Suite) affecting versions 12.2.3-12.2.15 . An attacker with low privileges and network access via HTTP can exploit this vulnerability to gain unauthorized access to critic...