CVE-2026-91266

A vulnerability exists in the Monitoring and Diagnostics SEC component of Oracle JD Edwards EnterpriseOne Tools (versions 9.2.0.0-9.2.26.5 ). A low-privileged attacker with local infrastructure access can exploit this to compromise the tool, potentially gaining unauthorized creation, deletion, mo...

CVE-2026-91253

A vulnerability exists in the Kernel component of Oracle Solaris version 11.4 . A low-privileged attacker with local access to the infrastructure can exploit this vulnerability to compromise the system, potentially resulting in a complete takeover of Oracle Solaris . The vulnerability has a CVSS ...

CVE-2026-91249

A vulnerability exists in the Libraries component of Oracle Solaris version 11.4 . A low-privileged attacker with local access to the infrastructure can exploit this vulnerability to compromise the system, potentially gaining unauthorized read access to a subset of accessible data. This vulnerabi...

CVE-2026-91244

A vulnerability exists in the Services component of Oracle Solaris version 11.4 . This difficult to exploit flaw allows a low privileged attacker with logon access to the underlying infrastructure to compromise the system. Successful exploitation can result in a hang or a frequently repeatable cr...

CVE-2026-91242

A vulnerability exists in the Plugins component of Oracle Solaris version 11.4 . This easily exploitable flaw allows a high-privileged attacker with local access to the infrastructure to compromise the system. Successful exploitation requires human interaction from a user other than the attacker ...

CVE-2026-87423

A vulnerability exists in the X Window System component of Oracle Solaris version 11.4 . A low-privileged attacker with local access to the infrastructure can exploit this difficult-to-exploit flaw to compromise the system. Successful exploitation may lead to unauthorized read, update, insert, or...

CVE-2026-91209

A vulnerability exists in the X Window System component of Oracle Solaris version 11.4 . This is a difficult-to-exploit flaw that allows a low-privileged attacker with local infrastructure access to compromise the system, provided they can trigger human interaction from another person. Successful...

CVE-2026-87418

A vulnerability exists in the Updates Environment Mgmt component of the Oracle PeopleSoft Enterprise PeopleTools product, specifically affecting versions 8.61-8.63 . A low-privileged attacker with infrastructure access can exploit this difficult-to-exploit flaw to compromise the product, potentia...

CVE-2026-87413

A vulnerability exists in the Filesystems component of Oracle Solaris version 11.4 . This easily exploitable flaw allows a low-privileged attacker with local infrastructure access to compromise the system. Successful exploitation can lead to a hang or a frequently repeatable crash , resulting in ...

CVE-2026-87411

A vulnerability exists in the Filesystems component of Oracle Solaris version 11.4 . A low-privileged attacker with local access to the infrastructure can exploit this flaw to cause a hang or frequently repeatable crash , resulting in a complete Denial of Service (DoS) . No specific exploit links...

CVE-2026-87402

The Oracle E-Business Suite Applications DBA product, specifically the AD Utilities component, is affected by a vulnerability in versions 12.2.3-12.2.15 . A low privileged attacker with access to the infrastructure where Applications DBA executes can exploit this vulnerability to compromise the s...

CVE-2026-87403

A vulnerability exists in the Applications DBA product of Oracle E-Business Suite within the AD Utilities component, affecting supported versions 12.2.3-12.2.15 . A low-privileged attacker with local infrastructure access can exploit this to compromise the Applications DBA. Successful exploitatio...

CVE-2026-87401

A vulnerability exists in the XML Publisher component of Oracle PeopleSoft Enterprise PeopleTools affecting supported versions 8.61-8.63 . A low-privileged attacker with local access to the infrastructure can exploit this vulnerability to compromise the software, potentially resulting in unauthor...

CVE-2026-87383

A vulnerability exists in the Package Build SEC component of Oracle JD Edwards EnterpriseOne Tools (versions 9.2.0.0-9.2.26.5 ). A high-privileged attacker with local access to the infrastructure can exploit this issue to compromise the software, potentially leading to a takeover of JD Edwards En...

CVE-2026-87372

A vulnerability exists in the Oracle WebCenter Content product of Oracle Fusion Middleware, specifically affecting the Content Server component in versions 12.2.1.4.0 and 14.1.2.0.0 . A low-privileged attacker with local access to the infrastructure can exploit this flaw to compromise the product...

CVE-2026-87356

A vulnerability exists in the Applications Platform Engineering product of Oracle E-Business Suite , specifically within the Valid Session component. This issue affects supported versions 12.2.3-12.2.15 . A low privileged attacker with logon access to the infrastructure where Applications Platfor...

CVE-2026-87352

A vulnerability exists in the LDAP component of Oracle PeopleSoft Enterprise PeopleTools (affected versions 8.61-8.63 ). A low-privileged attacker with access to the infrastructure where the software executes can compromise the system. Successful exploitation may result in unauthorized read acces...

CVE-2026-87347

A vulnerability exists in the Oracle HTTP Server product of Oracle Fusion Middleware , specifically within the OSSL Module . Affected versions include 12.2.1.4.0 and 14.1.2.0.0 . A low-privileged attacker with network access via HTTP can exploit this flaw to compromise the server, potentially gai...

CVE-2026-87334

A vulnerability exists in the ADF Faces component of Oracle JDeveloper (part of Oracle Fusion Middleware) affecting versions 12.2.1.4.0 and 14.1.2.0.0 . A low-privileged attacker with access to the infrastructure where Oracle JDeveloper executes can exploit this vulnerability to compromise the pr...

CVE-2026-87333

A vulnerability exists in the JD Edwards EnterpriseOne Tools product (component: Enterprise Infrastructure SEC ) from Oracle JD Edwards, affecting versions 9.2.0.0-9.2.26.5 . A low-privileged attacker with logon access to the infrastructure where the tools execute can exploit this difficult-to-ex...