CVE-2026-91627

A vulnerability exists in the Platform component of Oracle Communications Billing and Revenue Management (versions 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0, and 15.2.0.0.0). A low privileged attacker with access to the underlying infrastructure can exploit this flaw to compromise the product, potential...

CVE-2026-91597

A vulnerability exists in the Platform Security component of Oracle Business Intelligence Enterprise Edition (part of Oracle Analytics) in versions 8.2.0.0.0 and 26.01.0.0.0 . An unauthenticated attacker with access to the physical communication segment attached to the hardware can exploit this d...

CVE-2026-91579

A vulnerability exists in the Oracle BI Publisher product of Oracle Analytics, specifically within the BI Platform Security component. Affected versions include 8.2.0.0.0 , 12.2.1.4.0 , and 26.01.0.0.0 . An unauthenticated attacker with network access via HTTP can exploit this vulnerability to co...

CVE-2026-91577

A vulnerability exists in the BI Platform Security component of Oracle Business Intelligence Enterprise Edition (affected version 12.2.1.4.0 ) within the Oracle Analytics suite. A low-privileged attacker with network access via HTTP can exploit this flaw to compromise the system. Successful explo...

CVE-2026-91545

A vulnerability exists in the Platform Security component of Oracle Business Intelligence Enterprise Edition (Oracle Analytics), specifically affecting versions 8.2.0.0.0 and 12.2.1.4.0 . An unauthenticated attacker with infrastructure access can exploit this flaw to compromise the product, poten...

CVE-2026-91528

A vulnerability exists in the BI Platform Security component of the Oracle BI Publisher product within Oracle Analytics, specifically affecting version 12.2.1.4.0 . A low-privileged attacker with network access via HTTPS can exploit this flaw to gain unauthorized read access to a subset of access...

CVE-2026-91455

A vulnerability exists in the JD Edwards EnterpriseOne Tools product from Oracle JD Edwards , specifically affecting the E1 Dev Platform Tech - UNIX component in versions 9.2.0.0-9.2.26.5 . An unauthenticated attacker with network access via HTTP can exploit this issue, though it requires human i...

CVE-2026-91284

The Oracle JD Edwards EnterpriseOne Tools product (specifically the E1 Dev Platform Tech - UNIX component) is vulnerable in versions 9.2.0.0-9.2.26.5 . A low-privileged attacker with network access via JDENET can exploit this vulnerability to cause a hang or a frequently repeatable crash, resulti...

CVE-2026-87356

A vulnerability exists in the Applications Platform Engineering product of Oracle E-Business Suite , specifically within the Valid Session component. This issue affects supported versions 12.2.3-12.2.15 . A low privileged attacker with logon access to the infrastructure where Applications Platfor...

CVE-2026-87331

A vulnerability exists in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards within the E1 Dev Platform Tech - UNIX component (versions 9.2.0.0-9.2.26.5 ). A high-privileged attacker with local infrastructure access can exploit this to compromise the system, potentially leading to un...

CVE-2026-87332

A vulnerability exists in Oracle JD Edwards EnterpriseOne Tools (component: E1 Dev Platform Tech - Cloud ) affecting versions 9.2.0.0-9.2.26.5 . This high-complexity vulnerability allows a high-privileged attacker with infrastructure access to compromise the product. Successful exploitation may l...

CVE-2026-87330

A vulnerability exists in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards , specifically within the E1 Dev Platform Tech - UNIX component. Affected versions include 9.2.0.0-9.2.26.5 . A high-privileged attacker with logon access to the infrastructure can exploit this flaw to compr...

CVE-2026-87320

A vulnerability exists in the JD Edwards EnterpriseOne Tools product (specifically the E1 Dev Platform Tech - UNIX component) from Oracle JD Edwards in versions 9.2.0.0-9.2.26.5 . This difficult-to-exploit flaw allows a low-privileged attacker with infrastructure access to compromise the system, ...

CVE-2026-87297

A vulnerability exists in the Platform component of Oracle Communications Billing and Revenue Management (versions 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0, and 15.2.0.0.0). A high-privileged attacker with access to the infrastructure where the software executes can exploit this vulnerability to compro...

CVE-2026-83406

A vulnerability exists in the Platform component of Oracle Communications Billing and Revenue Management affecting versions 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0, and 15.2.0.0.0 . A high-privileged attacker with access to the infrastructure where the software executes can exploit this vulnerability ...

CVE-2026-101680

A vulnerability exists in the Platform component of Oracle Communications Billing and Revenue Management affecting versions 15.0.0.0.0 , 15.0.1.0.0 , 15.1.0.0.0 , and 15.2.0.0.0 . An unauthenticated attacker with network access via TLS can exploit this difficult-to-exploit vulnerability to compro...

CVE-2026-101560

The Oracle Commerce Platform (component: Dynamo Commerce Server ) is affected by a vulnerability in version 11.4.0 . A low-privileged attacker with network access via HTTP can easily exploit this flaw to compromise the platform. Successful exploitation may lead to unauthorized creation, deletion,...

CVE-2026-101527

A vulnerability exists in the Enterprise Manager Install component of the Oracle Enterprise Manager Base Platform product, specifically affecting supported versions 13.5 and 24.1 . A low-privileged attacker with logon access to the underlying infrastructure can easily exploit this flaw to comprom...

CVE-2026-101524

A vulnerability exists in the Security Framework component of the Oracle Enterprise Manager Base Platform product, specifically affecting supported versions 13.5 and 24.1 . This difficult to exploit vulnerability allows an unauthenticated attacker with network access via HTTP to compromise the pl...

CVE-2026-101518

A vulnerability exists in the Agent Next Gen component of the Oracle Enterprise Manager Base Platform product, specifically affecting supported versions 13.5 and 24.1 . A low-privileged attacker with network access via HTTP can easily exploit this flaw to compromise the platform. Successful explo...