CVE-2026-101808

A vulnerability exists in the WebUI component of the Oracle Product Workbench product within Oracle E-Business Suite (versions 12.2.3-12.2.15). An unauthenticated attacker with network access via HTTP can exploit this flaw to compromise the workbench. Successful exploitation can lead to unauthori...

CVE-2026-101795

A vulnerability exists in the Server: Components Services of MySQL Server and MySQL Cluster products by Oracle MySQL. Affected versions include MySQL Server 8.4.0-8.4.12, 9.7.0-9.7.3, and 26.7.0-26.7.1, and MySQL Cluster 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3, and 26.7.0-26.7.1. A high-privilege...

CVE-2026-101795

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL component: Server: Components Services. Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and 26.7.0-26.7.1. Easily...

CVE-2026-101758

A vulnerability exists in the BRM Server component of the Oracle Communications Billing and Revenue Management product, affecting versions 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0, and 15.2.0.0.0 . An unauthenticated attacker with network access via HTTP can easily exploit this flaw to compromise the s...

CVE-2026-101717

A vulnerability exists in the Security component of the Oracle Agile PLM product (version 9.3.6). A low-privileged attacker with local access to the infrastructure where the application executes can exploit this high-complexity vulnerability to compromise the system. Successful exploitation may l...

CVE-2026-101715

The Oracle Agile PLM product (Oracle Supply Chain) contains a vulnerability in the Application Server component affecting version 9.3.6 . A difficult-to-exploit vulnerability allows an unauthenticated attacker with network access via HTTP to compromise the system. Successful exploitation can lead...

CVE-2026-101696

A vulnerability exists in the Oracle Application Object Library product of Oracle E-Business Suite (component: Core ), specifically affecting supported versions 12.2.3-12.2.15 . This vulnerability allows an unauthenticated attacker with network access via HTTP to compromise the library. The attac...

CVE-2026-101690

A vulnerability exists in the SOA Provider component of the Oracle E-Business Suite Integrated SOA Gateway (affected versions 12.2.3-12.2.15 ). This easily exploitable flaw allows an unauthenticated attacker with network access via HTTP to compromise the gateway. Successful exploitation may lead ...

CVE-2026-101661

The Oracle Mobile Field Service product (component: Admin UI ) within Oracle E-Business Suite is affected by a high-severity vulnerability in supported versions 12.2.3-12.2.15 . A difficult-to-exploit flaw allows an unauthenticated attacker with network access via HTTP to compromise the service. ...

CVE-2026-101658

A vulnerability exists in the Admin UI component of Oracle Mobile Field Service , part of the Oracle E-Business Suite. Affected versions include 12.2.3 through 12.2.15 . An unauthenticated attacker with network access via HTTP can exploit this high-complexity vulnerability to compromise the servi...

CVE-2026-101639

A vulnerability exists in the Oracle Marketing product of Oracle E-Business Suite (specifically the Audience component) in versions 12.2.3-12.2.15 . A low-privileged attacker with network access via HTTP can exploit this flaw to compromise Oracle Marketing, though successful exploitation requires...

CVE-2026-101636

The Oracle Mobile Field Service product, specifically the Admin UI component within Oracle E-Business Suite , is affected by a high-severity vulnerability in versions 12.2.3-12.2.15 . An unauthenticated attacker with network access via HTTP can exploit this difficult-to-exploit vulnerability to c...

CVE-2026-101565

A vulnerability exists in the Import component of Oracle Agile PLM (Oracle Supply Chain), specifically affecting version 9.3.6 . An unauthenticated attacker with access to the underlying infrastructure can exploit this vulnerability to compromise the application. Successful exploitation may lead ...

CVE-2026-101562

A vulnerability exists in the Acollect component of Oracle Agile PLM (Oracle Supply Chain) version 2.6 . An unauthenticated attacker with network access via HTTP can easily exploit this flaw to compromise the system. Successful exploitation may result in unauthorized access to critical data or co...

CVE-2026-101531

The Oracle Business Intelligence Enterprise Edition product of Oracle Analytics is affected by a vulnerability in the Analytics Server component. Specifically, versions 8.2.0.0.0 and 26.01.0.0.0 are vulnerable. An unauthenticated attacker with network access via HTTP can easily exploit this flaw ...

CVE-2026-101468

A vulnerability exists in the Siebel CRM Deployment product of Oracle Siebel CRM , specifically affecting the Cloud Gateway component in supported versions 17.0-26.9 . An unauthenticated attacker with network access via HTTP can easily exploit this flaw to compromise the deployment. Successful ex...

CVE-2026-101458

A vulnerability exists in the Siebel CRM Deployment product of Oracle Siebel CRM within the Server Infrastructure component, affecting supported versions 17.0-26.9 . An unauthenticated attacker with network access via HTTP can exploit this flaw to compromise the system. Successful exploitation ma...

CVE-2026-101445

A vulnerability exists in the Siebel Cloud Manager component of Oracle Siebel CRM Cloud Applications (affected versions 22.3-26.9 ). A low-privileged attacker with access to the infrastructure where the applications execute can exploit this difficult-to-exploit vulnerability to compromise the sys...

CVE-2026-101439

A vulnerability exists in the Siebel Cloud Manager component of Oracle Siebel CRM Cloud Applications (affected versions 22.3-26.9 ). This difficult-to-exploit flaw allows an unauthenticated attacker with network access via LDAP to compromise the application. Successful exploitation may lead to un...

CVE-2026-101440

A vulnerability exists in the Siebel Cloud Manager component of Oracle Siebel CRM Cloud Applications (affected versions 22.3-26.9 ). A difficult-to-exploit flaw allows an unauthenticated attacker with access to the physical communication segment attached to the hardware to compromise the applicat...