CVE-2026-91489

A vulnerability exists in the LDAP Gateway component of the Oracle Identity Manager Connector product within Oracle Fusion Middleware , affecting supported versions 12.2.1.4.0 and 14.1.2.1.0 . A low privileged attacker with access to the infrastructure where the software executes can exploit this...

CVE-2026-91486

A vulnerability exists in the General Ledger component of Oracle PeopleSoft Enterprise FIN General Ledger Brazil (version 9.1 ). A low-privileged attacker with access to the infrastructure where the product executes can exploit this flaw to compromise the system. Successful exploitation may lead ...

CVE-2026-91488

The Oracle Identity Manager Connector product within Oracle Fusion Middleware (specifically the Generic REST component) is vulnerable in versions 12.2.1.4.0 and 14.1.2.1.0 . A low-privileged attacker with local access to the infrastructure can exploit this vulnerability to compromise the connecto...

CVE-2026-91484

A vulnerability exists in the Java plugin component of Oracle Java SE versions 8u503 and 8u503-perf . A low-privileged attacker with local access to the infrastructure can exploit this difficult-to-exploit flaw to compromise Oracle Java SE. This vulnerability specifically impacts Java deployments...

CVE-2026-91475

A vulnerability exists in the Oracle Outside In Technology product (component: Outside In Clean Content SDK ) of Oracle Fusion Middleware , specifically affecting version 8.5.8 . A low-privileged attacker with local access to the infrastructure can exploit this vulnerability to compromise the pro...

CVE-2026-91473

A vulnerability exists in the Web Listener component of the Oracle HTTP Server product within Oracle Fusion Middleware (affected version 12.2.1.4.0 ). A low-privileged attacker with logon access to the underlying infrastructure can easily exploit this flaw to compromise the Oracle HTTP Server, po...

CVE-2026-91446

The Siebel CRM Deployment product of Oracle Siebel CRM (specifically the Server Infrastructure component) is affected by a vulnerability in versions 17.0-26.9 . A high-privileged attacker with local access to the infrastructure where the deployment executes can easily exploit this flaw to comprom...

CVE-2026-91444

A vulnerability exists in the Server Infrastructure component of Oracle Siebel CRM Deployment (versions 17.0-26.9 ). A high-privileged attacker with local access to the infrastructure where the product executes can exploit this flaw to compromise and potentially take over the Siebel CRM Deploymen...

CVE-2026-91434

A vulnerability exists in the Server Infrastructure component of Oracle Siebel CRM Deployment (affected versions 17.0-26.9 ). A high-privileged attacker with local access to the infrastructure where the software executes can exploit this vulnerability to compromise and potentially take over the S...

CVE-2026-91431

The Siebel CRM End User product of Oracle Siebel CRM (component: Open UI ) is vulnerable in versions 17.0-26.9 . A low-privileged attacker with logon access to the infrastructure where the software executes can exploit this vulnerability to compromise the system. Successful exploitation may lead ...

CVE-2026-91427

A vulnerability exists in the Server Infrastructure component of Oracle Siebel CRM Deployment (affected versions 17.0-26.9 ). A high-privileged attacker with local access to the infrastructure can exploit this flaw to compromise the deployment and cause a partial denial of service (partial DOS) ....

CVE-2026-91423

The Siebel CRM Deployment product of Oracle Siebel CRM (specifically the Server Infrastructure component) is affected by a vulnerability in versions 17.0-26.9 . A high-privileged attacker with local access to the infrastructure can exploit this to compromise the deployment, potentially gaining un...

CVE-2026-91419

The Oracle HTTP Server product of Oracle Fusion Middleware (specifically the OSSL Module ) is affected by a vulnerability in version 12.2.1.4.0 . A low-privileged attacker with access to the infrastructure where the server executes can easily exploit this flaw to compromise and potentially take o...

CVE-2026-91418

A vulnerability exists in the ImageIO component of Oracle Java SE , Oracle JavaFX , Oracle GraalVM for JDK , and Oracle GraalVM Enterprise Edition . Affected versions include Oracle Java SE (8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27), Oracle JavaFX (21.0.12, 25.0.4, 27), Or...

CVE-2026-91404

A vulnerability exists in the Outside In PDF Export SDK component of the Oracle Outside In Technology product (part of Oracle Fusion Middleware). The affected supported version is 8.5.8 . An unauthenticated attacker with local access to the infrastructure where the software executes can easily ex...

CVE-2026-91372

A vulnerability exists in the Siebel Cloud Manager component of the Siebel CRM Cloud Applications product (versions 22.3-26.9 ). A low-privileged attacker with logon access to the underlying infrastructure can exploit this flaw to compromise the application, potentially resulting in unauthorized ...

CVE-2026-91367

A vulnerability exists in the Siebel Cloud Manager component of Oracle Siebel CRM Cloud Applications (affected versions 22.3-26.9 ). A low-privileged attacker with logon access to the execution infrastructure can exploit this issue to compromise the application, potentially resulting in unauthori...

CVE-2026-91368

A vulnerability exists in the Siebel Cloud Manager component of Oracle Siebel CRM Cloud Applications affecting versions 22.3-26.9 . A high privileged attacker with local access to the infrastructure can exploit this flaw to compromise the application, potentially gaining unauthorized access to cr...

CVE-2026-91355

A vulnerability exists in the Outside In Clean Content SDK component of the Oracle Outside In Technology product within Oracle Fusion Middleware (affected version 8.5.8 ). An unauthenticated attacker with local access to the infrastructure where the software executes can exploit this vulnerabilit...

CVE-2026-91351

A vulnerability exists in the Outside In Clean Content SDK component of the Oracle Outside In Technology product (part of Oracle Fusion Middleware), specifically affecting version 8.5.8 . A low-privileged attacker with logon access to the infrastructure where the software executes can exploit thi...