CVE-2026-91625

The Oracle Agile Product Lifecycle Management for Process product (specifically the Product Quality Management component) is vulnerable in version 6.2.4 . An unauthenticated attacker with network access via HTTP can easily exploit this vulnerability to compromise the system. Successful exploitati...

CVE-2026-91623

A vulnerability exists in the Product Quality Management component of Oracle Agile Product Lifecycle Management for Process (specifically version 6.2.4 ). This difficult to exploit vulnerability allows an unauthenticated attacker with network access via HTTP to compromise the system. Successful e...

CVE-2026-91624

The Oracle Agile Product Lifecycle Management for Process product (Oracle Supply Chain), specifically the Product Quality Management component in version 6.2.4 , contains a critical vulnerability. An unauthenticated attacker with network access via HTTP can easily exploit this flaw to compromise ...

CVE-2026-91616

A vulnerability exists in the Remote Diagnostic Agent component of Oracle Middleware Common Libraries and Tools within Oracle Fusion Middleware (versions 12.2.1.4.0 and 14.1.1.0.0 ). An unauthenticated attacker with network access via HTTP can exploit this difficulty-to-exploit vulnerability to g...

CVE-2026-91608

A vulnerability exists in the Web Server component of the Oracle BI Publisher product within Oracle Analytics. Affected versions include 8.2.0.0.0 , 12.2.1.4.0 , and 26.01.0.0.0 . An unauthenticated attacker with network access via HTTP can easily exploit this flaw to compromise the product, pote...

CVE-2026-91582

A vulnerability exists in the Oracle Business Intelligence Enterprise Edition product within the BI Search component, specifically affecting version 12.2.1.4.0 . An unauthenticated attacker with network access via HTTP can exploit this difficult-to-exploit vulnerability to cause a partial denial ...

CVE-2026-91579

A vulnerability exists in the Oracle BI Publisher product of Oracle Analytics, specifically within the BI Platform Security component. Affected versions include 8.2.0.0.0 , 12.2.1.4.0 , and 26.01.0.0.0 . An unauthenticated attacker with network access via HTTP can exploit this vulnerability to co...

CVE-2026-91573

A vulnerability exists in the Product Quality Management component of Oracle Agile Product Lifecycle Management for Process (version 6.2.4 ). An unauthenticated attacker with network access via HTTP can easily exploit this flaw to compromise the system. Successful exploitation may result in unaut...

CVE-2026-91555

The Oracle BI Publisher product of Oracle Analytics (specifically the Web Server component) is vulnerable in versions 8.2.0.0.0 , 12.2.1.4.0 , and 26.01.0.0.0 . An unauthenticated attacker with network access via HTTP can exploit this vulnerability to compromise the product, though successful att...

CVE-2026-91554

The Oracle BI Publisher product within Oracle Analytics (specifically the Web Server component) is affected by a vulnerability in version 12.2.1.4.0 . An unauthenticated attacker with network access via HTTP can exploit this flaw to compromise the system. Successful exploitation can result in una...

sparx_hack

Multiple vulnerabilities in Sparx Pro Cloud Server and Enterprise Architect Exploit code for executing arbitrary SQL command in Sparx PCS server without authentication. NOTE: the key is NOT correct to prevent s|rIpt kIddi3 from easy hacking ;- Full writeup:...

CVE-2026-91552

A vulnerability exists in the Oracle WebCenter Sites component of Oracle Fusion Middleware, affecting versions 12.2.1.4.0 and 14.1.2.0.0 . An unauthenticated attacker with network access via HTTP can easily exploit this flaw to compromise the system. Successful exploitation may lead to unauthoriz...

CVE-2026-91549

A vulnerability exists in the Analytics Server component of Oracle Business Intelligence Enterprise Edition (versions 8.2.0.0.0 and 12.2.1.4.0 ). An unauthenticated attacker with access to the infrastructure can exploit this vulnerability to compromise the product. While the attack is considered ...

CVE-2026-91546

A high-severity vulnerability affects the BI Foundation component of Oracle Business Intelligence Enterprise Edition (Oracle Analytics) in version 12.2.1.4.0 . This difficult-to-exploit flaw allows an unauthenticated attacker with network access via HTTP to compromise the system, potentially lead...

CVE-2026-91545

A vulnerability exists in the Platform Security component of Oracle Business Intelligence Enterprise Edition (Oracle Analytics), specifically affecting versions 8.2.0.0.0 and 12.2.1.4.0 . An unauthenticated attacker with infrastructure access can exploit this flaw to compromise the product, poten...

CVE-2026-91542

A vulnerability exists in the Oracle WebCenter Sites component of Oracle Fusion Middleware (specifically versions 12.2.1.4.0 and 14.1.2.0.0 ). An unauthenticated attacker with network access via HTTP can easily exploit this vulnerability to compromise the product. Successful exploitation may resu...

CVE-2026-91541

A vulnerability exists in the PeopleSoft Enterprise FIN Common Objects Brazil product (specifically the Common Objects component) in version 9.1 . An unauthenticated attacker with network access via HTTP can exploit this vulnerability to compromise the system. Successful exploitation may lead to ...

CVE-2026-91534

A vulnerability exists in the Analytics Web General component of Oracle Business Intelligence Enterprise Edition (versions 8.2.0.0.0, 12.2.1.4.0, and 26.01.0.0.0). An unauthenticated attacker with network access via HTTP can exploit this issue to cause a complete Denial of Service (DoS) by trigge...

CVE-2026-91526

A vulnerability exists in the Web Server component of Oracle BI Publisher (part of Oracle Analytics) affecting versions 8.2.0.0.0 , 12.2.1.4.0 , and 26.01.0.0.0 . This high-complexity vulnerability allows an unauthenticated attacker with network access via HTTP to compromise the product, though i...

CVE-2026-91517

A vulnerability exists in the Oracle Management Pack for Oracle GoldenGate product (specifically the EM Plugin component) affecting supported versions 13.4.1.0.1-13.5.2.0.6 . An unauthenticated attacker with access to the physical communication segment attached to the hardware where the software ...