CVE-2026-91557

A vulnerability exists in the BI Foundation component of Oracle Business Intelligence Enterprise Edition within Oracle Analytics. Specifically, version 12.2.1.4.0 is affected. This is a difficult to exploit vulnerability that allows a low privileged attacker with local access to the infrastructur...

CVE-2026-91553

A vulnerability exists in the Product Configurator component of Oracle PeopleSoft Enterprise FIN Product Configurator Brazil (version 9.1 ). This easily exploitable flaw allows a low-privileged attacker with local infrastructure access to compromise the product. Successful exploitation can lead t...

CVE-2026-91547

A vulnerability exists in the Vendor Access Module component of Oracle GoldenGate . Affected versions include 19.1.0.0.0-19.32.0.0 , 21.3-21.23 , and 23.4-23.26.3.0.0 . A low privileged attacker with logon access to the infrastructure where Oracle GoldenGate executes can easily exploit this flaw ...

CVE-2026-91539

A vulnerability exists in the Presentation Services component of Oracle Business Intelligence Enterprise Edition (Oracle Analytics), specifically affecting version 12.2.1.4.0 . A low-privileged attacker with local access to the infrastructure can exploit this vulnerability to compromise the syste...

CVE-2026-91537

A vulnerability exists in the Utility component of Oracle Solaris version 11.4 . A low-privileged attacker with local access to the infrastructure can easily exploit this flaw to compromise the system, potentially leading to a full takeover of Oracle Solaris . The vulnerability is associated with...

CVE-2026-91505

A vulnerability exists in the Porting component of Oracle PeopleSoft Enterprise PeopleTools (versions 8.61 and 8.62 ). A high-privileged attacker with access to the execution infrastructure can exploit this flaw to compromise the product. Successful exploitation may lead to unauthorized creation,...

CVE-2026-91501

A vulnerability exists in the Installer component of the Oracle Identity Manager product within Oracle Fusion Middleware . Affected versions include 12.2.1.4.0 and 14.1.2.1.0 . A low-privileged attacker with logon access to the underlying infrastructure can exploit this flaw to compromise Oracle ...

CVE-2026-91489

A vulnerability exists in the LDAP Gateway component of the Oracle Identity Manager Connector product within Oracle Fusion Middleware , affecting supported versions 12.2.1.4.0 and 14.1.2.1.0 . A low privileged attacker with access to the infrastructure where the software executes can exploit this...

CVE-2026-91488

The Oracle Identity Manager Connector product within Oracle Fusion Middleware (specifically the Generic REST component) is vulnerable in versions 12.2.1.4.0 and 14.1.2.1.0 . A low-privileged attacker with local access to the infrastructure can exploit this vulnerability to compromise the connecto...

CVE-2026-91486

A vulnerability exists in the General Ledger component of Oracle PeopleSoft Enterprise FIN General Ledger Brazil (version 9.1 ). A low-privileged attacker with access to the infrastructure where the product executes can exploit this flaw to compromise the system. Successful exploitation may lead ...

CVE-2026-91484

A vulnerability exists in the Java plugin component of Oracle Java SE versions 8u503 and 8u503-perf . A low-privileged attacker with local access to the infrastructure can exploit this difficult-to-exploit flaw to compromise Oracle Java SE. This vulnerability specifically impacts Java deployments...

CVE-2026-91475

A vulnerability exists in the Oracle Outside In Technology product (component: Outside In Clean Content SDK ) of Oracle Fusion Middleware , specifically affecting version 8.5.8 . A low-privileged attacker with local access to the infrastructure can exploit this vulnerability to compromise the pro...

CVE-2026-91473

A vulnerability exists in the Web Listener component of the Oracle HTTP Server product within Oracle Fusion Middleware (affected version 12.2.1.4.0 ). A low-privileged attacker with logon access to the underlying infrastructure can easily exploit this flaw to compromise the Oracle HTTP Server, po...

CVE-2026-91446

The Siebel CRM Deployment product of Oracle Siebel CRM (specifically the Server Infrastructure component) is affected by a vulnerability in versions 17.0-26.9 . A high-privileged attacker with local access to the infrastructure where the deployment executes can easily exploit this flaw to comprom...

CVE-2026-91444

A vulnerability exists in the Server Infrastructure component of Oracle Siebel CRM Deployment (versions 17.0-26.9 ). A high-privileged attacker with local access to the infrastructure where the product executes can exploit this flaw to compromise and potentially take over the Siebel CRM Deploymen...

CVE-2026-91434

A vulnerability exists in the Server Infrastructure component of Oracle Siebel CRM Deployment (affected versions 17.0-26.9 ). A high-privileged attacker with local access to the infrastructure where the software executes can exploit this vulnerability to compromise and potentially take over the S...

CVE-2026-91431

The Siebel CRM End User product of Oracle Siebel CRM (component: Open UI ) is vulnerable in versions 17.0-26.9 . A low-privileged attacker with logon access to the infrastructure where the software executes can exploit this vulnerability to compromise the system. Successful exploitation may lead ...

CVE-2026-91427

A vulnerability exists in the Server Infrastructure component of Oracle Siebel CRM Deployment (affected versions 17.0-26.9 ). A high-privileged attacker with local access to the infrastructure can exploit this flaw to compromise the deployment and cause a partial denial of service (partial DOS) ....

CVE-2026-91423

The Siebel CRM Deployment product of Oracle Siebel CRM (specifically the Server Infrastructure component) is affected by a vulnerability in versions 17.0-26.9 . A high-privileged attacker with local access to the infrastructure can exploit this to compromise the deployment, potentially gaining un...

CVE-2026-91419

The Oracle HTTP Server product of Oracle Fusion Middleware (specifically the OSSL Module ) is affected by a vulnerability in version 12.2.1.4.0 . A low-privileged attacker with access to the infrastructure where the server executes can easily exploit this flaw to compromise and potentially take o...