CVE-2026-101448

A vulnerability exists in the Siebel Management Console component of Oracle Siebel CRM Deployment (versions 17.0-26.9 ). An unauthenticated attacker with network access via HTTP can exploit this issue to achieve unauthorized read access to a subset of accessible data. The vulnerability is classif...

CVE-2026-101449

A vulnerability exists in the Siebel Management Console component of the Oracle Siebel CRM Deployment product, affecting supported versions 17.0-26.9 . The flaw is easily exploitable via physical access , potentially allowing an attacker to gain unauthorized read access to a subset of accessible ...

CVE-2026-101442

A vulnerability exists in the Siebel Cloud Manager component of Oracle Siebel CRM Cloud Applications (affected versions 22.3-26.9 ). A low-privileged attacker with network access via HTTP can exploit this difficult to exploit vulnerability to achieve unauthorized read access to a subset of access...

CVE-2026-101433

The PeopleSoft Enterprise PeopleTools product, specifically the Test Framework component in versions 8.61-8.63 , is vulnerable to an easily exploitable security flaw. An unauthenticated attacker with network access via HTTP can compromise the system to gain unauthorized read access to a subset of...

CVE-2026-101425

A vulnerability exists in the SQR component of Oracle PeopleSoft Enterprise PeopleTools (affected versions 8.61-8.63 ). A low-privileged attacker with local access to the infrastructure can exploit this difficult-to-exploit vulnerability to compromise the product, potentially resulting in unautho...

CVE-2026-101423

A vulnerability exists in the Report Distribution component of Oracle PeopleSoft (PeopleTools) affecting versions 8.61-8.63 . A low-privileged attacker with network access via HTTP can exploit this flaw to gain unauthorized read access to a subset of accessible PeopleSoft Enterprise PeopleTools d...

CVE-2026-101417

A vulnerability exists in the Tuxedo component of Oracle PeopleSoft Enterprise PeopleTools (versions 8.61-8.63 ). An unauthenticated attacker with network access via HTTP can exploit this difficult-to-exploit vulnerability to gain unauthorized read access to a subset of accessible data. While no ...

CVE-2026-101406

A vulnerability exists in the Marketing component of Oracle Siebel CRM (Siebel Apps - Marketing) affecting supported versions 17.0-26.9 . An unauthenticated attacker with network access via HTTP can exploit this difficult-to-exploit vulnerability to gain unauthorized read access to a subset of ac...

CVE-2026-101397

A vulnerability exists in the Marketing component of Oracle Siebel CRM (Siebel Apps - Marketing) affecting supported versions 17.0-26.9 . A high-privileged attacker with network access via HTTP can exploit this difficult-to-exploit vulnerability to compromise the product, potentially resulting in...

CVE-2026-101386

A vulnerability exists in Oracle REST Data Services (component: Core ) affecting supported versions 24.2.0-26.1.0 . A low-privileged attacker with network access via HTTP can exploit this difficult-to-exploit flaw to compromise the service. Successful exploitation may result in unauthorized read ...

CVE-2026-101384

A vulnerability exists in the Core component of Oracle REST Data Services affecting versions 24.2.0-26.1.0 . A low-privileged attacker with network access via HTTP can exploit this to compromise the service, potentially impacting additional products due to a scope change . Successful exploitation...

CVE-2026-101381

A vulnerability exists in Oracle REST Data Services (component: ADP ) affecting supported versions 24.2.0-26.1.0 . A low-privileged attacker with network access via HTTP can exploit this flaw to compromise the service, potentially gaining unauthorized read , update , insert , or delete access to ...

CVE-2026-101379

A vulnerability exists in Oracle REST Data Services (component: ADP ) in supported versions 24.2.0-26.1.0 . An unauthenticated attacker with network access via HTTP can exploit this flaw to compromise the service, potentially resulting in unauthorized read access to a subset of accessible data. W...

CVE-2026-101376

A vulnerability exists in the Database Actions component of Oracle REST Data Services (affected versions 24.2.0-26.1.0 ). A high-privileged attacker with network access via HTTP can exploit this to compromise the service. Impact includes unauthorized read , update , insert , or delete access to a...

CVE-2026-101375

A vulnerability exists in Oracle REST Data Services (component: Database Actions ) affecting supported versions 24.2.0-26.1.0 . A low-privileged attacker with network access via HTTP can exploit this flaw to compromise the service. Successful exploitation may lead to unauthorized read, update, in...

CVE-2026-101372

A vulnerability exists in the Oracle REST Data Services (component: Core ) affecting versions 24.2.0-26.1.0 . An unauthenticated attacker with network access via HTTP can exploit this difficulty-to-exploit vulnerability to compromise the service. Successful exploitation may lead to unauthorized r...

CVE-2026-101371

A vulnerability exists in the Core component of Oracle REST Data Services affecting versions 24.2.0-26.1.0 . A high privileged attacker with network access via HTTP can compromise the service, though the attack is difficult to exploit and requires human interaction from a person other than the at...

CVE-2026-101370

A vulnerability exists in the Core component of Oracle REST Data Services , affecting versions 24.2.0-26.1.0 . This high-complexity vulnerability allows an unauthenticated attacker with network access via HTTP to compromise the service, though it requires human interaction from a user other than ...

CVE-2026-101367

A vulnerability exists in Oracle REST Data Services (component: ADP ) affecting supported versions 24.2.0-26.1.0 . A low privileged attacker with network access via HTTP can easily exploit this flaw to compromise the service. Successful exploitation allows for unauthorized read access to a subset...

CVE-2026-101366

A vulnerability exists in the Oracle REST Data Services (component: ADP ) affecting supported versions 24.2.0-26.1.0 . A low-privileged attacker with network access via HTTP can easily exploit this flaw to compromise the service. Successful exploitation results in unauthorized read access to a su...