CVE-2026-60869

A vulnerability exists in the Application Data Sets component of Oracle PeopleSoft (Enterprise PeopleTools) affecting versions 8.61-8.63 . A low-privileged attacker with network access via HTTP can exploit this difficulty-to-exploit vulnerability to gain unauthorized access to create, delete, or ...

CVE-2026-101841

A vulnerability exists in the Global Order Promising product of Oracle E-Business Suite , specifically within the Web Service component. Affected supported versions include 12.2.3 through 12.2.15 . This difficult-to-exploit vulnerability allows a low-privileged attacker with network access via HT...

CVE-2026-101831

A vulnerability exists in the Internal Operations component of the Oracle Quality product within Oracle E-Business Suite versions 12.2.3-12.2.15 . A low-privileged attacker with network access via HTTP can exploit this flaw to compromise Oracle Quality, potentially gaining unauthorized access to ...

CVE-2026-101812

The Oracle E-Business Suite product Oracle Complex Maintenance, Repair and Overhaul (specifically the LOV component) is vulnerable in versions 12.2.3-12.2.15 . A low-privileged attacker with network access via HTTP can exploit this difficulty-to-exploit vulnerability to compromise the product. Su...

CVE-2026-101806

A vulnerability exists in the Connector/ODBC component of the Oracle MySQL MySQL Connectors product (affected version 26.7.1 ). A low-privileged attacker with network access via multiple protocols can exploit this difficult to exploit vulnerability to compromise MySQL Connectors. Successful explo...

CVE-2026-101765

A vulnerability in the Oracle Communications Billing and Revenue Management product (component: BRM Server ) affects supported versions 15.0.0.0.0 , 15.0.1.0.0 , 15.1.0.0.0 , and 15.2.0.0.0 . An unauthenticated attacker with network access via HTTP can easily exploit this flaw to compromise the s...

CVE-2026-101746

The Oracle Agile Engineering Data Management product (component: Install ) is affected by a vulnerability in version 6.2.1 . An unauthenticated attacker with access to the physical communication segment of the hardware can compromise the system, provided they can trigger human interaction from a ...

CVE-2026-101736

A vulnerability exists in the Core component of the Primavera Unifier product by Oracle Construction and Engineering, affecting versions 21.12.0-21.12.17 . An unauthenticated attacker with network access via HTTP can exploit this difficult-to-exploit vulnerability to compromise the system. Succes...

CVE-2026-101735

A vulnerability exists in the Project Control component of Oracle Construction and Engineering's Primavera Unifier product, affecting supported versions 23.12.0-23.12.16 . A low-privileged attacker with network access via HTTP can exploit this flaw to compromise the system. Successful exploitatio...

CVE-2026-101710

The Oracle Payroll product within Oracle E-Business Suite (component: Internal Operations ) is affected by a vulnerability in versions 12.2.3-12.2.15 . A low privileged attacker with network access via HTTP can exploit this flaw, which is characterized as difficult to exploit. Successful exploita...

CVE-2026-101705

A vulnerability exists in the Oracle Common Applications product of Oracle E-Business Suite (component: Role Summary ), specifically affecting versions 12.2.3-12.2.15 . This high-complexity vulnerability allows a high-privileged attacker with network access via HTTP to compromise Oracle Common Ap...

CVE-2026-101669

A vulnerability exists in the Regression Testing component of the Oracle Public Sector Human Resources product within Oracle E-Business Suite. Affected versions include 12.2.3-12.2.15 . A low-privileged attacker with network access via HTTP could exploit this difficult-to-exploit vulnerability to...

CVE-2026-101665

A vulnerability exists in the Admin UI component of the Oracle Mobile Field Service product within Oracle E-Business Suite (affected versions 12.2.3-12.2.15 ). A low-privileged attacker with network access via HTTP can exploit this flaw to compromise the service, potentially leading to unauthoriz...

CVE-2026-101643

A vulnerability exists in the Internal Operations component of the Oracle Sales Online product within Oracle E-Business Suite (versions 12.2.3-12.2.15 ). A low-privileged attacker with network access via HTTP can exploit this flaw to compromise the product. Successful exploitation may lead to una...

CVE-2026-101637

A vulnerability exists in the InnoDB component of Oracle MySQL Server and MySQL Cluster products. Affected versions include MySQL Server 9.7.0-9.7.3 and 26.7.0-26.7.1 , as well as MySQL Cluster versions 9.7.0-9.7.3 and 26.7.0-26.7.1 . A high-privileged attacker with network access via multiple pr...

CVE-2026-101470

A vulnerability exists in the Installation Issues component of the Oracle Product Lifecycle Analytics product within Oracle Supply Chain, specifically affecting version 3.6.1 . A high-privileged attacker with logon access to the execution infrastructure can easily exploit this flaw to compromise ...

CVE-2026-101467

A vulnerability exists in the Portal Framework component of Oracle Siebel CRM End User (affected versions 17.0-26.9 ). A difficult-to-exploit flaw allows an unauthenticated attacker with network access via HTTPS to compromise the system. Successful exploitation can lead to unauthorized creation, ...

CVE-2026-101465

A vulnerability exists in the Server Infrastructure component of Oracle Siebel CRM Deployment (supported versions 17.0-26.9 ). A low-privileged attacker with logon access to the infrastructure where the product executes can exploit this difficult to exploit vulnerability to compromise the deploym...

CVE-2026-101464

A vulnerability exists in the Server Infrastructure component of Oracle Siebel CRM Deployment (affected versions 17.0-26.9 ). A low-privileged attacker with local access to the infrastructure can exploit this to compromise the deployment, potentially gaining unauthorized access to, or the ability...

CVE-2026-101456

A vulnerability exists in the Configuration Tools component of Oracle Siebel CRM Development (affected versions 17.0-26.9 ). A high-privileged attacker with access to the infrastructure where the software executes can exploit this flaw to compromise the system. Successful exploitation may lead to...