CVE-2026-91641

A vulnerability exists in the Security component of Oracle Essbase version 21.8.3.0.0 . A low-privileged attacker with network access via HTTP can easily exploit this flaw to compromise the system, potentially resulting in unauthorized read access to a subset of accessible data. Due to a scope ch...

CVE-2026-91634

A vulnerability exists in the Security component of Oracle Essbase version 21.8.3.0.0 . An unauthenticated attacker with network access via T3 or IIOP can exploit this flaw to compromise the system, potentially resulting in unauthorized read access to a subset of accessible data. This is categori...

CVE-2026-91631

A vulnerability in the Security component of Oracle Essbase version 21.8.3.0.0 allows a low-privileged attacker with network access via HTTP to compromise the system. Successful exploitation can result in unauthorized read access to a subset of accessible data within Oracle Essbase, with a potent...

CVE-2026-91616

A vulnerability exists in the Remote Diagnostic Agent component of Oracle Middleware Common Libraries and Tools within Oracle Fusion Middleware (versions 12.2.1.4.0 and 14.1.1.0.0 ). An unauthenticated attacker with network access via HTTP can exploit this difficulty-to-exploit vulnerability to g...

CVE-2026-91614

A vulnerability exists in the Security component of Oracle Communications Unified Inventory Management (affected versions: 7.5.0, 7.5.1, 7.6.0, 7.7.0, 7.8.0, and 8.0.1 ). A low-privileged attacker with logon access to the infrastructure where the software executes can easily exploit this flaw to ...

CVE-2026-91612

A vulnerability in the Security component of Oracle Communications Unified Inventory Management (affected versions: 7.5.0, 7.5.1, 7.6.0, 7.7.0, 7.8.0, and 8.0.1) allows a low-privileged attacker with local infrastructure access to compromise the product. Successful exploitation can result in unau...

CVE-2026-91613

A vulnerability exists in the Security component of the Oracle Communications Unified Inventory Management product, affecting versions 7.5.0, 7.5.1, 7.6.0, 7.7.0, 7.8.0, and 8.0.1. A low-privileged attacker with logon access to the infrastructure can exploit this vulnerability to compromise the s...

CVE-2026-91607

The Oracle Business Intelligence Enterprise Edition product within Oracle Analytics is affected by a vulnerability in the Analytics Server component. This issue impacts versions 8.2.0.0.0 and 26.01.0.0.0 . A low-privileged attacker with network access via HTTP can easily exploit this vulnerabilit...

CVE-2026-91598

The Oracle Business Intelligence Enterprise Edition product (component: Majel Mobile Service ) is vulnerable in versions 8.2.0.0.0 and 26.01.0.0.0 . A low-privileged attacker with network access via HTTP can easily exploit this vulnerability to compromise the system. Successful exploitation resul...

CVE-2026-91600

A vulnerability exists in the Visual Analyzer component of Oracle Business Intelligence Enterprise Edition (Oracle Analytics), specifically affecting version 26.01.0.0.0 . A low-privileged attacker with network access via HTTP can exploit this flaw to compromise the system, potentially resulting ...

CVE-2026-91528

A vulnerability exists in the BI Platform Security component of the Oracle BI Publisher product within Oracle Analytics, specifically affecting version 12.2.1.4.0 . A low-privileged attacker with network access via HTTPS can exploit this flaw to gain unauthorized read access to a subset of access...

CVE-2026-91477

Vulnerability in the Oracle JavaFX product of Oracle Java SE component: JavaFX. Supported versions that are affected are Oracle JavaFX: 25.0.4 and 27. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle JavaFX...

CVE-2026-91477

A vulnerability exists in the Oracle JavaFX component of Oracle Java SE (specifically versions 25.0.4 and 27 ). This flaw allows an unauthenticated attacker with network access via multiple protocols to compromise Oracle JavaFX, though exploitation is difficult and requires human interaction . Im...

CVE-2026-91476

The PeopleSoft Enterprise FIN Common Objects Brazil product (component: eProcurement ) is affected by a vulnerability in version 9.1 . An unauthenticated attacker with network access via HTTP can exploit this flaw to gain unauthorized read access to a subset of the product's accessible data. The ...

CVE-2026-91404

A vulnerability exists in the Outside In PDF Export SDK component of the Oracle Outside In Technology product (part of Oracle Fusion Middleware). The affected supported version is 8.5.8 . An unauthenticated attacker with local access to the infrastructure where the software executes can easily ex...

CVE-2026-91402

Vulnerability in the Oracle Java SE, Oracle JavaFX, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: JavaFX. Supported versions that are affected are Oracle Java SE: 8u503; Oracle JavaFX: 21.0.12, 25.0.4 and 27; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to...

CVE-2026-91402

A vulnerability exists in the JavaFX component of Oracle Java SE , Oracle JavaFX , and Oracle GraalVM Enterprise Edition . Affected versions include Oracle Java SE 8u503, Oracle JavaFX 21.0.12, 25.0.4, and 27, and Oracle GraalVM Enterprise Edition 21.3.19.1.1. This difficult to exploit vulnerabil...

CVE-2026-91402

Vulnerability in the Oracle Java SE, Oracle JavaFX, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: JavaFX. Supported versions that are affected are Oracle Java SE: 8u503; Oracle JavaFX: 21.0.12, 25.0.4 and 27; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to...

CVE-2026-91391

A vulnerability exists in the Siebel CRM End User product of Oracle Siebel CRM within the Open UI component, affecting supported versions 17.0-26.9 . This difficult-to-exploit vulnerability allows an unauthenticated attacker with network access via HTTP to compromise the product. Successful explo...

CVE-2026-91380

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Utility. Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1...