CVE-2026-101592

A vulnerability exists in the Oracle Agile Product Lifecycle Management for Process product (specifically the Product Quality Management component) version 6.2.4 . A low-privileged attacker with network access via HTTP can exploit this vulnerability to compromise the system, though the attack req...

CVE-2026-101589

The Oracle Utilities Network Management System product (component: System Wide ) is affected by a vulnerability in versions 2.6.0.1.0-2.6.0.1.12 , 2.6.0.2.0-2.6.0.2.10 , and 25.12.0.0.0-25.12.0.0.2 . An unauthenticated attacker with network access via HTTPS can exploit this issue to gain unauthor...

CVE-2026-101586

The Helidon product of Oracle Fusion Middleware is affected by a vulnerability in the helidon-webclient component. Impacted versions include 4.0.0-4.5.5 and 27.0.0 . An unauthenticated attacker with network access via HTTP can exploit this flaw to gain unauthorized read access to a subset of Heli...

CVE-2026-101588

A vulnerability exists in the WebSocket component of the Helidon product within Oracle Fusion Middleware . Affected versions include 4.0.0-4.5.5 and 27.0.0 . An unauthenticated attacker with network access via HTTP can easily exploit this flaw to compromise Helidon, potentially resulting in unaut...

CVE-2026-101582

The Helidon product of Oracle Fusion Middleware (specifically the helidon-integrations-vault component) is vulnerable in versions 4.0.0-4.5.5 . An unauthenticated attacker with network access via HTTP can exploit this flaw to achieve unauthorized read access to a subset of Helidon accessible data...

CVE-2026-101580

A vulnerability exists in the helidon-security-providers-jwt component of the Oracle Fusion Middleware Helidon product. Affected versions include 4.0.0-4.5.5 and 27.0.0 . An unauthenticated attacker with network access via HTTP can exploit this vulnerability to gain unauthorized read access to a ...

CVE-2026-101576

The Helidon product of Oracle Fusion Middleware (specifically the LRA component) is affected by a vulnerability in versions 4.0.0-4.5.5 . An unauthenticated attacker with network access via HTTP can exploit this vulnerability to gain unauthorized read access to a subset of Helidon accessible data...

CVE-2026-101578

A vulnerability exists in the Helidon product of Oracle Fusion Middleware, specifically within the helidon-security-providers-google-login component. Affected versions include 4.0.0-4.5.5 . An unauthenticated attacker with network access via HTTP can exploit this vulnerability to gain unauthorize...

CVE-2026-101568

A vulnerability exists in the helidon-health component of the Oracle Fusion Middleware Helidon product. Affected versions include 3.0.0-3.2.21 , 4.0.0-4.5.5 , and 27.0.0 . An unauthenticated attacker with network access via HTTP can exploit this flaw to gain unauthorized read access to a subset o...

CVE-2026-101516

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Libraries. Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20...

CVE-2026-101511

A vulnerability exists in the Metadata Plugin component of the Oracle Enterprise Manager Base Platform (Oracle Enterprise Manager) affecting versions 13.5 and 24.1 . A low-privileged attacker with network access via HTTP can exploit this flaw to compromise the platform, potentially leading to una...

CVE-2026-101493

A vulnerability exists in the Core component of Oracle REST Data Services affecting versions 24.2.0-26.2.1 . A low-privileged attacker with network access via HTTP can exploit this issue to gain unauthorized read , update , insert , or delete access to some of the accessible data within Oracle RE...

CVE-2026-101491

The PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (specifically the Query component) is affected by CVE-2026-101491 in versions 8.61-8.63 . A low-privileged attacker with network access via HTTP can exploit this vulnerability to gain unauthorized read access to a subset of access...

CVE-2026-101489

A vulnerability exists in the Portal component of Oracle PeopleSoft Enterprise PeopleTools (affected versions 8.61-8.63 ). A low-privileged attacker with network access via HTTP can easily exploit this flaw to gain unauthorized read access to a subset of accessible data within the product. While ...

CVE-2026-101488

Oracle PeopleSoft PeopleTools is vulnerable in the Business Interlink component within versions 8.61-8.63 . An unauthenticated attacker with network access via HTTP can exploit this vulnerability to gain unauthorized read access to a subset of accessible data and cause a partial denial of service...

CVE-2026-101480

A vulnerability exists in the NDMP daemon component of Oracle Secure Backup affecting versions 19.1.0.0.0 and 19.1.0.1.0 . An unauthenticated attacker with network access via TCP can exploit this issue to compromise the system, potentially resulting in unauthorized read access to a subset of acce...

CVE-2026-101449

A vulnerability exists in the Siebel Management Console component of the Oracle Siebel CRM Deployment product, affecting supported versions 17.0-26.9 . The flaw is easily exploitable via physical access , potentially allowing an attacker to gain unauthorized read access to a subset of accessible ...

CVE-2026-101448

A vulnerability exists in the Siebel Management Console component of Oracle Siebel CRM Deployment (versions 17.0-26.9 ). An unauthenticated attacker with network access via HTTP can exploit this issue to achieve unauthorized read access to a subset of accessible data. The vulnerability is classif...

CVE-2026-101442

A vulnerability exists in the Siebel Cloud Manager component of Oracle Siebel CRM Cloud Applications (affected versions 22.3-26.9 ). A low-privileged attacker with network access via HTTP can exploit this difficult to exploit vulnerability to achieve unauthorized read access to a subset of access...

CVE-2026-101433

The PeopleSoft Enterprise PeopleTools product, specifically the Test Framework component in versions 8.61-8.63 , is vulnerable to an easily exploitable security flaw. An unauthenticated attacker with network access via HTTP can compromise the system to gain unauthorized read access to a subset of...