CVE-2026-101374

A vulnerability exists in Oracle REST Data Services (component: Backend-as-a-Service ) affecting supported versions 24.2.0-26.1.0 . An unauthenticated attacker with network access via HTTP can exploit this difficult-to-exploit vulnerability to compromise the service. Successful exploitation may l...

CVE-2026-101373

A vulnerability exists in Oracle REST Data Services (component: Core ) in supported versions 24.2.0-26.1.0 . A high-privileged attacker with network access via HTTP can compromise the service, but the attack requires human interaction from a third party. Successful exploitation can result in unau...

CVE-2026-101372

A vulnerability exists in the Oracle REST Data Services (component: Core ) affecting versions 24.2.0-26.1.0 . An unauthenticated attacker with network access via HTTP can exploit this difficulty-to-exploit vulnerability to compromise the service. Successful exploitation may lead to unauthorized r...

CVE-2026-101371

A vulnerability exists in the Core component of Oracle REST Data Services affecting versions 24.2.0-26.1.0 . A high privileged attacker with network access via HTTP can compromise the service, though the attack is difficult to exploit and requires human interaction from a person other than the at...

CVE-2026-101370

A vulnerability exists in the Core component of Oracle REST Data Services , affecting versions 24.2.0-26.1.0 . This high-complexity vulnerability allows an unauthenticated attacker with network access via HTTP to compromise the service, though it requires human interaction from a user other than ...

CVE-2026-101369

A vulnerability exists in the Oracle REST Data Services (component: Backend-as-a-Service ) affecting supported versions 24.2.0-26.1.0 . An unauthenticated attacker with network access via HTTP can exploit this flaw to compromise the service, requiring human interaction from a user other than the ...

CVE-2026-101367

A vulnerability exists in Oracle REST Data Services (component: ADP ) affecting supported versions 24.2.0-26.1.0 . A low privileged attacker with network access via HTTP can easily exploit this flaw to compromise the service. Successful exploitation allows for unauthorized read access to a subset...

CVE-2026-101368

A vulnerability exists in the Backend-as-a-Service component of Oracle REST Data Services affecting versions 24.2.0-26.1.0 . An unauthenticated attacker with network access via HTTP can exploit this issue, although successful execution requires human interaction from a third party. The impact inc...

CVE-2026-101364

A vulnerability exists in Oracle REST Data Services (component: Database Actions ) affecting versions 24.2.0-26.1.0 . A low-privileged attacker with network access via HTTP can exploit this flaw to compromise the service, though the attack requires human interaction from another person. Due to a ...

CVE-2026-101365

A vulnerability exists in Oracle REST Data Services (component: Database Actions ) affecting versions 24.2.0-26.1.0 . A high-privileged attacker with network access via HTTP can exploit this flaw to compromise the service. Impact includes unauthorized read, update, insert, or delete access to acc...

CVE-2026-101366

A vulnerability exists in the Oracle REST Data Services (component: ADP ) affecting supported versions 24.2.0-26.1.0 . A low-privileged attacker with network access via HTTP can easily exploit this flaw to compromise the service. Successful exploitation results in unauthorized read access to a su...

CVE-2026-101361

A vulnerability exists in the Oracle REST Data Services (component: Core ) affecting supported versions 24.2.0-26.1.0 . A low-privileged attacker with network access via HTTP can exploit this difficult-to-exploit vulnerability to compromise the service. Successful exploitation may lead to unautho...

CVE-2026-101363

A vulnerability exists in the Graph QL component of Oracle REST Data Services affecting supported versions 24.2.0-26.1.0 . An unauthenticated attacker with network access via HTTP can exploit this flaw to compromise the service, potentially resulting in unauthorized read access to a subset of acc...

CVE-2026-101362

A vulnerability exists in the Core component of Oracle REST Data Services (affected versions 24.2.0-26.1.0 ). An unauthenticated attacker with network access via HTTP can exploit this difficult to exploit vulnerability, though it requires human interaction from a person other than the attacker. S...

CVE-2026-101360

A vulnerability exists in the Oracle REST Data Services (component: Core ) affecting versions 24.2.0-26.1.0 . A low-privileged attacker with network access via HTTP can exploit this flaw to compromise the service, potentially gaining unauthorized read , update , insert , or delete access to some ...

CVE-2026-101359

A vulnerability exists in the Oracle REST Data Services (Core component) in versions 24.2.0-26.1.0 . An unauthenticated attacker with network access via HTTP can exploit this vulnerability to compromise the service. Successful exploitation can lead to unauthorized update, insert, or delete access...

PT-2026-119182

Vulnerability in Oracle REST Data Services component: Core. Supported versions that are affected are 24.2.0-26.2.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle REST Data Services. While the vulnerability is in Oracle REST Data...

PT-2026-119051

Vulnerability in Oracle REST Data Services component: Graph QL. Supported versions that are affected are 24.2.0-26.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle REST Data Services. Successful attacks of this vulnerability c...

PT-2026-119065

Vulnerability in Oracle REST Data Services component: Database Actions. Supported versions that are affected are 24.2.0-26.1.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle REST Data Services. Successful attacks of this...

PT-2026-119067

Vulnerability in Oracle REST Data Services component: ADP. Supported versions that are affected are 24.2.0-26.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle REST Data Services. Successful attacks of this vulnerability can...