CVE-2026-91261

The Oracle WebCenter Content product (specifically the Content Server component) in version 14.1.2.0.0 is affected by a vulnerability. A low-privileged attacker with network access via HTTP can exploit this difficult-to-exploit flaw to compromise the product, potentially resulting in unauthorized...

CVE-2026-91259

A vulnerability exists in the OIM Legacy UI component of the Oracle Identity Manager product within Oracle Fusion Middleware. Affected versions include 12.2.1.4.0 and 14.1.2.1.0 . A low-privileged attacker with network access via HTTP can easily exploit this vulnerability to compromise the Oracle...

CVE-2026-91251

The Oracle SOA Suite product of Oracle Fusion Middleware (specifically the Adapters component) is affected by a critical vulnerability in versions 12.2.1.4.0 and 14.1.2.0.0 . A low privileged attacker with network access via HTTP can easily exploit this flaw to compromise the Oracle SOA Suite, po...

CVE-2026-91246

A vulnerability exists in the Oracle WebCenter Portal product of Oracle Fusion Middleware, specifically within the Runtime Tools component. Affected versions include 12.2.1.4.0 and 14.1.2.0.0 . An unauthenticated attacker with network access via HTTP can compromise the portal, though successful e...

CVE-2026-91240

A vulnerability exists in the Oracle WebCenter Sites component of Oracle Fusion Middleware (versions 12.2.1.4.0 and 14.1.2.0.0 ). An unauthenticated attacker with network access via HTTP can exploit this difficult-to-exploit vulnerability to compromise the product. Successful exploitation may lea...

CVE-2026-91232

The Oracle SOA Suite product (specifically the Fabric Layer component) of Oracle Fusion Middleware is affected by a critical vulnerability in versions 12.2.1.4.0 and 14.1.2.0.0 . A low privileged attacker with network access via HTTP can exploit this issue to compromise the Oracle SOA Suite. Succ...

CVE-2026-91229

A vulnerability exists in the Fabric Layer component of the Oracle SOA Suite product within Oracle Fusion Middleware. Affected versions include 12.2.1.4.0 and 14.1.2.0.0 . A low privileged attacker with network access via HTTP can exploit this difficult to exploit vulnerability to compromise the ...

CVE-2026-91227

The Oracle SOA Suite product within Oracle Fusion Middleware (specifically the Fabric Layer component) is vulnerable in versions 12.2.1.4.0 and 14.1.2.0.0 . A low-privileged attacker with network access via HTTP can exploit this high-complexity vulnerability to compromise the Oracle SOA Suite, po...

CVE-2026-91226

A vulnerability exists in the Fabric Layer component of the Oracle SOA Suite product within Oracle Fusion Middleware . Affected versions include 12.2.1.4.0 and 14.1.2.0.0 . This high-complexity vulnerability allows a low-privileged attacker with network access via HTTP to compromise the Oracle SO...

CVE-2026-91228

A vulnerability exists in the Fabric Layer component of the Oracle SOA Suite product within Oracle Fusion Middleware. Specifically, versions 12.2.1.4.0 and 14.1.2.0.0 are affected. A low-privileged attacker with network access via HTTP can exploit this vulnerability to compromise the Oracle SOA S...

CVE-2026-91224

A vulnerability exists in the Fabric Layer component of the Oracle SOA Suite product within Oracle Fusion Middleware, specifically affecting versions 12.2.1.4.0 and 14.1.2.0.0 . A low-privileged attacker with network access via HTTP can easily exploit this flaw to compromise the Oracle SOA Suite,...

CVE-2026-91222

A vulnerability exists in the Oracle Business Process Management Suite product of Oracle Fusion Middleware , specifically within the Human Workflow (11g+) component. Affected versions include 12.2.1.4.0 and 14.1.2.0.0 . A low-privileged attacker with network access via SOAP can easily exploit thi...

CVE-2026-91218

A vulnerability exists in the Fabric Layer component of Oracle SOA Suite within Oracle Fusion Middleware (affected versions 12.2.1.4.0 and 14.1.2.0.0 ). A low-privileged attacker with network access via HTTP can exploit this to compromise the Oracle SOA Suite, potentially gaining unauthorized cre...

CVE-2026-91215

A vulnerability exists in the Fabric Layer component of Oracle SOA Suite (part of Oracle Fusion Middleware), specifically affecting versions 12.2.1.4.0 and 14.1.2.0.0 . A low-privileged attacker with network access via HTTP can easily exploit this flaw to compromise the Oracle SOA Suite, potentia...

CVE-2026-91210

A vulnerability exists in the Content Server component of Oracle WebCenter Content (specifically version 14.1.2.0.0 ) within the Oracle Fusion Middleware suite. A low-privileged attacker with network access via HTTP can exploit this high-complexity vulnerability to compromise the system, though i...

CVE-2026-87419

A vulnerability exists in the Oracle Service Bus product within Oracle Fusion Middleware (component: Core ), specifically affecting versions 12.2.1.4.0 and 14.1.2.0.0 . A low-privileged attacker with network access via HTTP can exploit this vulnerability to compromise the Oracle Service Bus, pote...

CVE-2026-87400

A vulnerability exists in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server ), specifically affecting version 14.1.2.0.0 . An unauthenticated attacker with network access via HTTP can exploit this high-complexity vulnerability to compromise the system, pr...

CVE-2026-87398

A vulnerability exists in the Outside In Core component of Oracle Outside In Technology (part of Oracle Fusion Middleware) in version 8.5.8 . This easily exploitable flaw allows an unauthenticated attacker with network access via HTTP to cause a hang or a frequently repeatable crash, resulting in...

CVE-2026-87395

A vulnerability exists in the Outside In Core component of the Oracle Outside In Technology product within Oracle Fusion Middleware (specifically version 8.5.8 ). An unauthenticated attacker with network access via HTTP can exploit this vulnerability to cause a hang or a frequently repeatable cra...

CVE-2026-87392

A vulnerability exists in the WebCenter Content: Imaging product of Oracle Fusion Middleware (component: Core ), specifically affecting version 14.1.2.0.0 . A low-privileged attacker with network access via SOAP can easily exploit this flaw to compromise the system. Successful exploitation may re...