CVE-2026-91624

The Oracle Agile Product Lifecycle Management for Process product (Oracle Supply Chain), specifically the Product Quality Management component in version 6.2.4 , contains a critical vulnerability. An unauthenticated attacker with network access via HTTP can easily exploit this flaw to compromise ...

CVE-2026-91623

A vulnerability exists in the Product Quality Management component of Oracle Agile Product Lifecycle Management for Process (specifically version 6.2.4 ). This difficult to exploit vulnerability allows an unauthenticated attacker with network access via HTTP to compromise the system. Successful e...

CVE-2026-91615

A vulnerability exists in the Java VM component of Oracle Database Server affecting versions 19.3-19.32 , 21.3-21.23 , and 23.4.0-23.26.3 . A low-privileged attacker with network access via SOCKS5 can exploit this difficulty-to-exploit flaw to compromise the Java VM. Successful exploitation may l...

CVE-2026-91616

A vulnerability exists in the Remote Diagnostic Agent component of Oracle Middleware Common Libraries and Tools within Oracle Fusion Middleware (versions 12.2.1.4.0 and 14.1.1.0.0 ). An unauthenticated attacker with network access via HTTP can exploit this difficulty-to-exploit vulnerability to g...

CVE-2026-91617

A vulnerability exists in the Remote Diagnostic Agent component of Oracle Middleware Common Libraries and Tools within Oracle Fusion Middleware . Affected versions include 12.2.1.4.0 , 14.1.1.0.0 , 14.1.2.0.0 , and 15.1.1.0.0 . A low-privileged attacker with local access to the infrastructure can...

CVE-2026-91613

A vulnerability exists in the Security component of the Oracle Communications Unified Inventory Management product, affecting versions 7.5.0, 7.5.1, 7.6.0, 7.7.0, 7.8.0, and 8.0.1. A low-privileged attacker with logon access to the infrastructure can exploit this vulnerability to compromise the s...

CVE-2026-91614

A vulnerability exists in the Security component of Oracle Communications Unified Inventory Management (affected versions: 7.5.0, 7.5.1, 7.6.0, 7.7.0, 7.8.0, and 8.0.1 ). A low-privileged attacker with logon access to the infrastructure where the software executes can easily exploit this flaw to ...

CVE-2026-91612

A vulnerability in the Security component of Oracle Communications Unified Inventory Management (affected versions: 7.5.0, 7.5.1, 7.6.0, 7.7.0, 7.8.0, and 8.0.1) allows a low-privileged attacker with local infrastructure access to compromise the product. Successful exploitation can result in unau...

CVE-2026-91609

A vulnerability exists in the Oracle REST Data Services (component: Graph QL ) affecting supported versions 24.2.0-26.2.1 . This easily exploitable flaw allows a low-privileged attacker with network access via HTTP to compromise the service. Successful exploitation can lead to unauthorized access...

CVE-2026-91608

A vulnerability exists in the Web Server component of the Oracle BI Publisher product within Oracle Analytics. Affected versions include 8.2.0.0.0 , 12.2.1.4.0 , and 26.01.0.0.0 . An unauthenticated attacker with network access via HTTP can easily exploit this flaw to compromise the product, pote...

CVE-2026-91607

The Oracle Business Intelligence Enterprise Edition product within Oracle Analytics is affected by a vulnerability in the Analytics Server component. This issue impacts versions 8.2.0.0.0 and 26.01.0.0.0 . A low-privileged attacker with network access via HTTP can easily exploit this vulnerabilit...

CVE-2026-91598

The Oracle Business Intelligence Enterprise Edition product (component: Majel Mobile Service ) is vulnerable in versions 8.2.0.0.0 and 26.01.0.0.0 . A low-privileged attacker with network access via HTTP can easily exploit this vulnerability to compromise the system. Successful exploitation resul...

CVE-2026-91600

A vulnerability exists in the Visual Analyzer component of Oracle Business Intelligence Enterprise Edition (Oracle Analytics), specifically affecting version 26.01.0.0.0 . A low-privileged attacker with network access via HTTP can exploit this flaw to compromise the system, potentially resulting ...

CVE-2026-91588

A vulnerability exists in the BI Search component of Oracle Business Intelligence Enterprise Edition (Oracle Analytics), specifically affecting versions 8.2.0.0.0 and 12.2.1.4.0 . An unauthenticated attacker with network access via HTTP can exploit this flaw to compromise the system, although the...

CVE-2026-91590

A vulnerability exists in the Web Service API component of Oracle BI Publisher (part of Oracle Analytics). Affected versions include 8.2.0.0.0 and 26.01.0.0.0 . This easily exploitable flaw allows a low-privileged attacker with network access via HTTP to compromise the product, provided they can ...

CVE-2026-91577

A vulnerability exists in the BI Platform Security component of Oracle Business Intelligence Enterprise Edition (affected version 12.2.1.4.0 ) within the Oracle Analytics suite. A low-privileged attacker with network access via HTTP can exploit this flaw to compromise the system. Successful explo...

CVE-2026-91576

A vulnerability exists in the Analytics Server component of Oracle Business Intelligence Enterprise Edition (version 12.2.1.4.0 ). A low-privileged attacker with network access via HTTP can exploit this flaw to compromise the system, potentially resulting in unauthorized access to critical data o...

CVE-2026-91568

A vulnerability exists in the RDBMS component of Oracle Database Server versions 23.4.0-23.26.3 . A low-privileged attacker with Create Session privileges and network access via Oracle Net can exploit this flaw to compromise the RDBMS. Successful exploitation may result in unauthorized access to ...

CVE-2026-91574

A vulnerability exists in the BI Publisher Security component of the Oracle BI Publisher product within Oracle Analytics. Affected versions include 8.2.0.0.0 , 12.2.1.4.0 , and 26.01.0.0.0 . A low-privileged attacker with network access via HTTP can easily exploit this flaw to compromise the prod...

CVE-2026-91573

A vulnerability exists in the Product Quality Management component of Oracle Agile Product Lifecycle Management for Process (version 6.2.4 ). An unauthenticated attacker with network access via HTTP can easily exploit this flaw to compromise the system. Successful exploitation may result in unaut...