CVE-2026-101717

A vulnerability exists in the Security component of the Oracle Agile PLM product (version 9.3.6). A low-privileged attacker with local access to the infrastructure where the application executes can exploit this high-complexity vulnerability to compromise the system. Successful exploitation may l...

CVE-2026-101701

A vulnerability exists in the Oracle Concurrent Processing product of Oracle E-Business Suite (component: Request Submission and Scheduling ) affecting versions 12.2.3-12.2.15 . A high privileged attacker with logon access to the infrastructure where the product executes can easily exploit this f...

CVE-2026-101683

A vulnerability exists in the Applications DBA product of Oracle E-Business Suite , specifically within the AD Utilities component. Affected supported versions include 12.2.3-12.2.15 . A low privileged attacker with logon access to the infrastructure where Applications DBA executes can exploit th...

CVE-2026-101681

A vulnerability exists in the Applications DBA product of Oracle E-Business Suite (component: AD Utilities ) affecting versions 12.2.3-12.2.15 . A low-privileged attacker with local access to the infrastructure where Applications DBA executes can exploit this difficult-to-trigger vulnerability to...

CVE-2026-101676

A vulnerability exists in the Oracle Concurrent Processing product of Oracle E-Business Suite (component: Other Issues ) affecting versions 12.2.3-12.2.15 . A low-privileged attacker with logon access to the infrastructure where Oracle Concurrent Processing executes can exploit this vulnerability...

CVE-2026-101638

A vulnerability exists in the Applications DBA product of Oracle E-Business Suite , specifically within the AD Utilities component. Affected supported versions range from 12.2.3 to 12.2.15 . A low-privileged attacker with access to the infrastructure where Applications DBA executes can exploit th...

CVE-2026-101601

A vulnerability exists in the Vendor Access Module component of Oracle GoldenGate , affecting supported versions 21.3-21.23 . A low-privileged attacker with local access to the infrastructure where the software executes can exploit this vulnerability to compromise Oracle GoldenGate. Successful ex...

CVE-2026-101599

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is 7.2.20. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle...

CVE-2026-101598

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is 7.2.20. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle V...

CVE-2026-101598

A vulnerability exists in the Core component of Oracle VM VirtualBox (version 7.2.20). A low-privileged attacker with access to the infrastructure where the software executes can exploit this flaw to compromise the product, potentially resulting in a takeover of Oracle VM VirtualBox. This vulnera...

CVE-2026-101571

A vulnerability exists in the helidon-security-providers-idcs-mapper component of the Helidon product within Oracle Fusion Middleware . Affected versions include 3.0.0-3.2.21 and 4.0.0-4.5.5 . A low-privileged attacker with local infrastructure access can exploit this difficult-to-execute vulnera...

CVE-2026-101565

A vulnerability exists in the Import component of Oracle Agile PLM (Oracle Supply Chain), specifically affecting version 9.3.6 . An unauthenticated attacker with access to the underlying infrastructure can exploit this vulnerability to compromise the application. Successful exploitation may lead ...

CVE-2026-101566

A vulnerability exists in the Oracle Application Object Library component (specifically DB Privileges ) within Oracle E-Business Suite versions 12.2.3-12.2.15 . An attacker with low-privileged access to the infrastructure where the library executes can exploit this flaw to compromise the library,...

CVE-2026-101549

A vulnerability exists in the OpenScript component of Oracle Application Testing Suite (version 13.3.0.1). A low-privileged attacker with local access to the infrastructure can exploit this vulnerability to compromise and potentially take over the Oracle Application Testing Suite. The vulnerabili...

CVE-2026-101548

A vulnerability exists in the OpenScript component of Oracle Application Testing Suite version 13.3.0.1 . A low-privileged attacker with logon access to the underlying infrastructure can exploit this difficult-to-exploit flaw to compromise the suite. Successful exploitation may result in a comple...

CVE-2026-101545

A vulnerability exists in the Internal Operations component of the Oracle Inventory Management product within Oracle E-Business Suite . Affected versions are 12.2.3-12.2.15 . A low-privileged attacker with local access to the infrastructure where Oracle Inventory Management executes can exploit t...

CVE-2026-101544

A vulnerability exists in the Internal Operations component of the Oracle Payroll product within Oracle E-Business Suite versions 12.2.3-12.2.15 . A low-privileged attacker with infrastructure access can exploit this high-complexity vulnerability to compromise and potentially take over Oracle Pay...

CVE-2026-101527

A vulnerability exists in the Enterprise Manager Install component of the Oracle Enterprise Manager Base Platform product, specifically affecting supported versions 13.5 and 24.1 . A low-privileged attacker with logon access to the underlying infrastructure can easily exploit this flaw to comprom...

CVE-2026-101522

The Oracle TimesTen In-Memory Database (component: TimesTen IMDB ) is vulnerable in versions 22.1-22.1.1.43.0 . A low-privileged attacker with infrastructure access can exploit this vulnerability to compromise the database, potentially gaining unauthorized access to critical data or full access t...

CVE-2026-101517

A vulnerability exists in the Oracle Utilities Network Management System (component: System Wide ) affecting versions 2.4.0.1.0-2.4.0.1.33, 2.5.0.1.0-2.5.0.1.18, 2.5.0.2.0-2.5.0.2.11, 2.6.0.1.0-2.6.0.1.12, 2.6.0.2.0-2.6.0.2.9, and 25.12.0.0.0-25.12.0.0.2. A low privileged attacker with logon acce...