CVE-2026-91419

The Oracle HTTP Server product of Oracle Fusion Middleware (specifically the OSSL Module ) is affected by a vulnerability in version 12.2.1.4.0 . A low-privileged attacker with access to the infrastructure where the server executes can easily exploit this flaw to compromise and potentially take o...

CVE-2026-91418

A vulnerability exists in the ImageIO component of Oracle Java SE , Oracle JavaFX , Oracle GraalVM for JDK , and Oracle GraalVM Enterprise Edition . Affected versions include Oracle Java SE (8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27), Oracle JavaFX (21.0.12, 25.0.4, 27), Or...

CVE-2026-91410

Vulnerability in Oracle Java SE component: Libraries. Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1; Oracle GraalVM for JDK: 17.0.20.1 and 21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Easily exploitable...

CVE-2026-91404

A vulnerability exists in the Outside In PDF Export SDK component of the Oracle Outside In Technology product (part of Oracle Fusion Middleware). The affected supported version is 8.5.8 . An unauthenticated attacker with local access to the infrastructure where the software executes can easily ex...

CVE-2026-91372

A vulnerability exists in the Siebel Cloud Manager component of the Siebel CRM Cloud Applications product (versions 22.3-26.9 ). A low-privileged attacker with logon access to the underlying infrastructure can exploit this flaw to compromise the application, potentially resulting in unauthorized ...

CVE-2026-91368

A vulnerability exists in the Siebel Cloud Manager component of Oracle Siebel CRM Cloud Applications affecting versions 22.3-26.9 . A high privileged attacker with local access to the infrastructure can exploit this flaw to compromise the application, potentially gaining unauthorized access to cr...

CVE-2026-91367

A vulnerability exists in the Siebel Cloud Manager component of Oracle Siebel CRM Cloud Applications (affected versions 22.3-26.9 ). A low-privileged attacker with logon access to the execution infrastructure can exploit this issue to compromise the application, potentially resulting in unauthori...

CVE-2026-91355

A vulnerability exists in the Outside In Clean Content SDK component of the Oracle Outside In Technology product within Oracle Fusion Middleware (affected version 8.5.8 ). An unauthenticated attacker with local access to the infrastructure where the software executes can exploit this vulnerabilit...

CVE-2026-91351

A vulnerability exists in the Outside In Clean Content SDK component of the Oracle Outside In Technology product (part of Oracle Fusion Middleware), specifically affecting version 8.5.8 . A low-privileged attacker with logon access to the infrastructure where the software executes can exploit thi...

CVE-2026-91336

A vulnerability exists in the Utility component of Oracle Solaris version 11.4 . This easily exploitable flaw allows a low-privileged attacker with local access to the infrastructure to compromise the system. Successful exploitation can lead to unauthorized creation, deletion, or modification of ...

CVE-2026-91330

A vulnerability exists in the Installation Security component of Oracle JD Edwards EnterpriseOne Tools (versions 9.2.0.0-9.2.26.5 ). A low-privileged attacker with local access to the infrastructure can exploit this flaw to compromise the software, potentially leading to a partial denial of servi...

CVE-2026-91329

A vulnerability exists in the Installation Security component of JD Edwards EnterpriseOne Tools (versions 9.2.0.0-9.2.26.5 ) from Oracle JD Edwards . An unauthenticated attacker with logon to the infrastructure where the software executes could exploit this difficult to exploit vulnerability, tho...

CVE-2026-91322

A vulnerability exists in the Oracle JDeveloper component of Oracle Fusion Middleware , affecting versions 12.2.1.4.0 and 14.1.2.0.0 . A low-privileged attacker with access to the underlying infrastructure can exploit this flaw to compromise the application, potentially resulting in unauthorized ...

CVE-2026-91320

A vulnerability exists in the Oracle JDeveloper product of Oracle Fusion Middleware , specifically affecting versions 12.2.1.4.0 and 14.1.2.0.0 . A high-privileged attacker with local access to the infrastructure where the software executes can exploit this issue to compromise the product. Succes...

CVE-2026-91312

A vulnerability exists in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards, specifically within the Installation Security component. This affects supported versions 9.2.0.0-9.2.26.5 . A low-privileged attacker with local access to the infrastructure where the tools execute can expl...

CVE-2026-91311

A vulnerability exists in the Installation Security component of the JD Edwards EnterpriseOne Tools product by Oracle JD Edwards, affecting versions 9.2.0.0-9.2.26.5 . A low-privileged attacker with access to the infrastructure where the tools execute can exploit this vulnerability to compromise ...

CVE-2026-91306

A vulnerability exists in the Installation Security component of Oracle JD Edwards EnterpriseOne Tools (versions 9.2.0.0-9.2.26.5). A low-privileged attacker with infrastructure access can easily exploit this to compromise the product, potentially leading to a complete takeover . The vulnerabilit...

CVE-2026-91301

A vulnerability exists in the Monitoring and Diagnostics SEC component of Oracle JD Edwards EnterpriseOne Tools (versions 9.2.0.0-9.2.26.5). A low-privileged attacker with local access to the infrastructure can exploit this difficult-to-trigger vulnerability to compromise the software. Impact inc...

CVE-2026-91290

A vulnerability exists in the JD Edwards EnterpriseOne Tools product (component: Web Runtime SEC ) for Oracle JD Edwards , affecting supported versions 9.2.0.0-9.2.26.5 . A low-privileged attacker with logon access to the infrastructure can exploit this flaw to compromise the tools, potentially g...

CVE-2026-91291

A vulnerability exists in the Business Logic Infra SEC component of Oracle JD Edwards EnterpriseOne Tools (versions 9.2.0.0-9.2.26.5 ). A low-privileged attacker with local access to the infrastructure can exploit this difficult-to-exploit flaw to compromise the product. Successful exploitation m...