CVE-2026-91353

A vulnerability exists in the Outside In Clean Content SDK component of the Oracle Outside In Technology product, specifically affecting version 8.5.8 . An unauthenticated attacker with network access via HTTP can easily exploit this flaw to compromise the technology, potentially resulting in una...

CVE-2026-91351

A vulnerability exists in the Outside In Clean Content SDK component of the Oracle Outside In Technology product (part of Oracle Fusion Middleware), specifically affecting version 8.5.8 . A low-privileged attacker with logon access to the infrastructure where the software executes can exploit thi...

CVE-2026-91347

The iSupport product within Oracle E-Business Suite (specifically the Service Requests component) is vulnerable in versions 12.2.3-12.2.15 . A low-privileged attacker with network access via HTTP can exploit this vulnerability to compromise iSupport, potentially leading to unauthorized creation, ...

CVE-2026-91346

A vulnerability exists in the Outside In Clean Content SDK component of the Oracle Outside In Technology product (specifically version 8.5.8 ). An unauthenticated attacker with network access via HTTP can exploit this flaw, though it requires human interaction from a user other than the attacker....

CVE-2026-91341

A critical vulnerability exists in the Outside In Clean Content SDK component of Oracle Fusion Middleware (specifically version 8.5.8 ). An unauthenticated attacker with network access via HTTP can exploit this flaw to gain unauthorized access to critical data, allowing for the creation, deletion...

CVE-2026-91343

A vulnerability exists in the Outside In Clean Content SDK component of the Oracle Outside In Technology product within Oracle Fusion Middleware (affected version 8.5.8 ). An unauthenticated attacker with network access via HTTP can exploit this vulnerability to compromise the technology, potenti...

CVE-2026-91342

The Outside In Clean Content SDK component of the Oracle Fusion Middleware product (version 8.5.8 ) is vulnerable to a security flaw. An unauthenticated attacker with network access via HTTP can exploit this vulnerability to compromise Oracle Outside In Technology . While the attack requires huma...

CVE-2026-91338

The iSupport product of Oracle E-Business Suite (versions 12.2.3-12.2.15) contains a vulnerability in its Internal operations component. This flaw allows a low-privileged attacker with network access via HTTP to compromise iSupport. Successful exploitation can lead to unauthorized creation, delet...

CVE-2026-91339

A vulnerability exists in the iSupport product of Oracle E-Business Suite (specifically the Service Requests component) affecting supported versions 12.2.3-12.2.15 . An attacker with low privileges and network access via HTTP can easily exploit this vulnerability to compromise iSupport. Successfu...

CVE-2026-91337

A vulnerability exists in the iProcurement product of Oracle E-Business Suite (component: Internal operations) affecting versions 12.2.3-12.2.15 . This difficult-to-exploit flaw allows an unauthenticated attacker with network access via HTTPS to compromise the system. Successful exploitation can ...

CVE-2026-91334

A vulnerability exists in the ImageIO component of Oracle Java SE , Oracle GraalVM for JDK , and Oracle GraalVM Enterprise Edition . Affected versions include Oracle Java SE : 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, and 27; Oracle GraalVM for JDK : 17.0.20.1 and 21.0.12.1; a...

CVE-2026-91335

A vulnerability exists in the AWT component of Oracle Java SE , Oracle GraalVM for JDK , and Oracle GraalVM Enterprise Edition . Affected versions include Oracle Java SE (8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27), Oracle GraalVM for JDK (17.0.20.1, 21.0.12.1), and Oracle G...

CVE-2026-91333

A vulnerability exists in the Security component of Oracle Java SE affecting versions 21.0.12.1 , 25.0.4.1 , and 27 . An unauthenticated attacker with network access via multiple protocols can exploit this vulnerability, which is difficult to trigger. Successful exploitation can result in unautho...

CVE-2026-91332

A vulnerability exists in the Networking component of Oracle Java SE , affecting versions 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, and 27 . It also impacts Oracle GraalVM for JDK (17.0.20.1, 21.0.12.1) and Oracle GraalVM Enterprise Edition (21.3.19.1.1). An unauthenticated attacker ...

CVE-2026-91329

A vulnerability exists in the Installation Security component of JD Edwards EnterpriseOne Tools (versions 9.2.0.0-9.2.26.5 ) from Oracle JD Edwards . An unauthenticated attacker with logon to the infrastructure where the software executes could exploit this difficult to exploit vulnerability, tho...

CVE-2026-91325

A vulnerability exists in the Installation Security component of the JD Edwards EnterpriseOne Tools product by Oracle JD Edwards, affecting versions 9.2.0.0-9.2.26.5 . An unauthenticated attacker with network access via HTTP can easily exploit this flaw to compromise the tools. Successful exploit...

CVE-2026-91322

A vulnerability exists in the Oracle JDeveloper component of Oracle Fusion Middleware , affecting versions 12.2.1.4.0 and 14.1.2.0.0 . A low-privileged attacker with access to the underlying infrastructure can exploit this flaw to compromise the application, potentially resulting in unauthorized ...

CVE-2026-91320

A vulnerability exists in the Oracle JDeveloper product of Oracle Fusion Middleware , specifically affecting versions 12.2.1.4.0 and 14.1.2.0.0 . A high-privileged attacker with local access to the infrastructure where the software executes can exploit this issue to compromise the product. Succes...

CVE-2026-91318

A vulnerability exists in the Security Framework component of the Oracle JDeveloper product within Oracle Fusion Middleware (specifically versions 12.2.1.4.0 and 14.1.2.0.0 ). An unauthenticated attacker with network access via HTTP can compromise the system, though the attack requires human inte...

CVE-2026-91317

A vulnerability exists in the ADF Databinding component of the Oracle JDeveloper product within Oracle Fusion Middleware (affected versions 12.2.1.4.0 and 14.1.2.0.0 ). A low-privileged attacker with network access via SOAP can exploit this difficult-to-exploit vulnerability to compromise Oracle ...