CVE-2026-101424

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft component: Report Distribution. Supported versions that are affected are 8.61-8.63. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise PeopleSoft Enterpri...

CVE-2026-101426

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft component: SQR. Supported versions that are affected are 8.61-8.63. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where PeopleSoft Enterprise PeopleTools...

CVE-2026-101422

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft component: Report Distribution. Supported versions that are affected are 8.61-8.63. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise...

CVE-2026-101410

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft component: Business Interlink. Supported versions that are affected are 8.61-8.63. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise...

CVE-2026-101397

Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM component: Marketing. Supported versions that are affected are 17.0-26.9. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Siebel Apps - Marketing. Successful...

CVE-2026-101377

Vulnerability in Oracle REST Data Services component: Database Actions. Supported versions that are affected are 24.2.0-26.1.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle REST Data Services. Successful attacks of this...

CVE-2026-101366

Vulnerability in Oracle REST Data Services component: ADP. Supported versions that are affected are 24.2.0-26.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle REST Data Services. Successful attacks of this vulnerability can...

CVE-2026-91649

A vulnerability exists in the Java Based Agent component of Oracle Essbase version 21.8.3.0.0 . A high-privileged attacker with logon access to the infrastructure where Oracle Essbase executes can exploit this vulnerability to compromise the software. Successful exploitation may result in unautho...

CVE-2026-91612

A vulnerability in the Security component of Oracle Communications Unified Inventory Management (affected versions: 7.5.0, 7.5.1, 7.6.0, 7.7.0, 7.8.0, and 8.0.1) allows a low-privileged attacker with local infrastructure access to compromise the product. Successful exploitation can result in unau...

CVE-2026-91607

The Oracle Business Intelligence Enterprise Edition product within Oracle Analytics is affected by a vulnerability in the Analytics Server component. This issue impacts versions 8.2.0.0.0 and 26.01.0.0.0 . A low-privileged attacker with network access via HTTP can easily exploit this vulnerabilit...

CVE-2026-91604

A vulnerability exists in the Product Quality Management component of Oracle Agile Product Lifecycle Management for Process (version 6.2.4) within the Oracle Supply Chain suite. A low privileged attacker with network access via HTTP can exploit this difficulty-to-exploit flaw to compromise the sy...

CVE-2026-91598

The Oracle Business Intelligence Enterprise Edition product (component: Majel Mobile Service ) is vulnerable in versions 8.2.0.0.0 and 26.01.0.0.0 . A low-privileged attacker with network access via HTTP can easily exploit this vulnerability to compromise the system. Successful exploitation resul...

CVE-2026-91600

A vulnerability exists in the Visual Analyzer component of Oracle Business Intelligence Enterprise Edition (Oracle Analytics), specifically affecting version 26.01.0.0.0 . A low-privileged attacker with network access via HTTP can exploit this flaw to compromise the system, potentially resulting ...

CVE-2026-91524

A vulnerability exists in the BI Foundation component of Oracle Business Intelligence Enterprise Edition (product of Oracle Analytics), specifically affecting version 12.2.1.4.0 . A low-privileged attacker with network access via HTTP can exploit this vulnerability to cause a partial denial of se...

CVE-2026-91515

A vulnerability exists in the Oracle Agile Product Lifecycle Management for Process product (component: Product Quality Management ) version 6.2.4 . A low privileged attacker with network access via HTTP can exploit this difficult-to-exploit vulnerability to compromise the system, potentially lea...

CVE-2026-91485

The PeopleSoft Enterprise FIN Cash Management product (version 9.2 ) is vulnerable to a high-complexity flaw. A high-privileged attacker with access to the execution infrastructure can compromise the system, provided they can obtain human interaction from another person. Exploitation may result i...

CVE-2026-91478

Oracle PeopleSoft Enterprise SCM Strategic Sourcing version 9.2 is vulnerable to a high-severity security flaw. A low-privileged attacker with network access via HTTP can exploit this vulnerability to compromise the Strategic Sourcing component, potentially leading to a full takeover of the produ...

CVE-2026-91424

A vulnerability exists in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure ) affecting supported versions 17.0-26.9 . A low privileged attacker with network access via HTTP can exploit this difficult-to-exploit vulnerability to compromise the deployment. Su...

CVE-2026-91338

The iSupport product of Oracle E-Business Suite (versions 12.2.3-12.2.15) contains a vulnerability in its Internal operations component. This flaw allows a low-privileged attacker with network access via HTTP to compromise iSupport. Successful exploitation can lead to unauthorized creation, delet...

CVE-2026-91316

A vulnerability exists in the iProcurement product of Oracle E-Business Suite , specifically affecting the E-Content Manager Catalog component in versions 12.2.3-12.2.15 . A high-privileged attacker with network access via HTTPS can easily exploit this flaw to compromise and potentially take over...