CVE-2026-101573

Vulnerability in the Helidon product of Oracle Fusion Middleware component: helidon-security-providers-http-auth. Supported versions that are affected are 3.0.0-3.2.21, 4.0.0-4.5.5 and 27.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to...

CVE-2026-101574

Vulnerability in the Helidon product of Oracle Fusion Middleware component: OIDC. Supported versions that are affected are 4.0.0-4.5.5 and 27.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful attacks require huma...

CVE-2026-101576

Vulnerability in the Helidon product of Oracle Fusion Middleware component: LRA. Supported versions that are affected are 4.0.0-4.5.5. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful attacks of this vulnerability ca...

CVE-2026-101575

Vulnerability in the Helidon product of Oracle Fusion Middleware component: LRA. Supported versions that are affected are 4.0.0-4.5.5. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. While the vulnerability is in Helidon,...

CVE-2026-101569

Vulnerability in the Helidon product of Oracle Fusion Middleware component: helidon-common-concurrency-limits. Supported versions that are affected are 4.0.0-4.5.5 and 27.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon...

CVE-2026-101568

Vulnerability in the Helidon product of Oracle Fusion Middleware component: helidon-health. Supported versions that are affected are 3.0.0-3.2.21, 4.0.0-4.5.5 and 27.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successfu...

CVE-2026-101515

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Centralized Thirdparty Jars. Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network acces...

CVE-2026-101499

Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware component: WebCenter Sites. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

CVE-2026-91617

A vulnerability exists in the Remote Diagnostic Agent component of Oracle Middleware Common Libraries and Tools within Oracle Fusion Middleware . Affected versions include 12.2.1.4.0 , 14.1.1.0.0 , 14.1.2.0.0 , and 15.1.1.0.0 . A low-privileged attacker with local access to the infrastructure can...

CVE-2026-91616

A vulnerability exists in the Remote Diagnostic Agent component of Oracle Middleware Common Libraries and Tools within Oracle Fusion Middleware (versions 12.2.1.4.0 and 14.1.1.0.0 ). An unauthenticated attacker with network access via HTTP can exploit this difficulty-to-exploit vulnerability to g...

CVE-2026-91552

A vulnerability exists in the Oracle WebCenter Sites component of Oracle Fusion Middleware, affecting versions 12.2.1.4.0 and 14.1.2.0.0 . An unauthenticated attacker with network access via HTTP can easily exploit this flaw to compromise the system. Successful exploitation may lead to unauthoriz...

CVE-2026-91542

A vulnerability exists in the Oracle WebCenter Sites component of Oracle Fusion Middleware (specifically versions 12.2.1.4.0 and 14.1.2.0.0 ). An unauthenticated attacker with network access via HTTP can easily exploit this vulnerability to compromise the product. Successful exploitation may resu...

CVE-2026-91536

A vulnerability exists in the Fabric Layer component of Oracle SOA Suite (Oracle Fusion Middleware) affecting versions 12.2.1.4.0 and 14.1.2.0.0 . A low-privileged attacker with network access via HTTPS can exploit this difficult-to-exploit vulnerability to compromise the suite. Successful exploi...

CVE-2026-91473

A vulnerability exists in the Web Listener component of the Oracle HTTP Server product within Oracle Fusion Middleware (affected version 12.2.1.4.0 ). A low-privileged attacker with logon access to the underlying infrastructure can easily exploit this flaw to compromise the Oracle HTTP Server, po...

CVE-2026-91467

A vulnerability exists in the Framework component of Oracle Fusion Middleware Control (affected versions 12.2.1.4.0 and 14.1.2.0.0 ). The flaw allows an attacker with physical access to compromise the product, requiring human interaction from a third party. Successful exploitation can lead to a t...

CVE-2026-91407

A vulnerability exists in the REST WebServices component of the Oracle Identity Manager product within Oracle Fusion Middleware. Affected versions include 12.2.1.4.0 and 14.1.2.1.0 . A low-privileged attacker with network access via HTTP can exploit this flaw to compromise the Oracle Identity Man...

CVE-2026-91355

A vulnerability exists in the Outside In Clean Content SDK component of the Oracle Outside In Technology product within Oracle Fusion Middleware (affected version 8.5.8 ). An unauthenticated attacker with local access to the infrastructure where the software executes can exploit this vulnerabilit...

CVE-2026-91352

A vulnerability exists in the Outside In Clean Content SDK component of Oracle Outside In Technology (part of Oracle Fusion Middleware), specifically affecting version 8.5.8 . An unauthenticated attacker with network access via HTTP can exploit this vulnerability to cause a partial denial of serv...

CVE-2026-91322

A vulnerability exists in the Oracle JDeveloper component of Oracle Fusion Middleware , affecting versions 12.2.1.4.0 and 14.1.2.0.0 . A low-privileged attacker with access to the underlying infrastructure can exploit this flaw to compromise the application, potentially resulting in unauthorized ...

CVE-2026-91320

A vulnerability exists in the Oracle JDeveloper product of Oracle Fusion Middleware , specifically affecting versions 12.2.1.4.0 and 14.1.2.0.0 . A high-privileged attacker with local access to the infrastructure where the software executes can exploit this issue to compromise the product. Succes...