CVE-2026-91489

A vulnerability exists in the LDAP Gateway component of the Oracle Identity Manager Connector product within Oracle Fusion Middleware , affecting supported versions 12.2.1.4.0 and 14.1.2.1.0 . A low privileged attacker with access to the infrastructure where the software executes can exploit this...

CVE-2026-91488

The Oracle Identity Manager Connector product within Oracle Fusion Middleware (specifically the Generic REST component) is vulnerable in versions 12.2.1.4.0 and 14.1.2.1.0 . A low-privileged attacker with local access to the infrastructure can exploit this vulnerability to compromise the connecto...

CVE-2026-91485

The PeopleSoft Enterprise FIN Cash Management product (version 9.2 ) is vulnerable to a high-complexity flaw. A high-privileged attacker with access to the execution infrastructure can compromise the system, provided they can obtain human interaction from another person. Exploitation may result i...

CVE-2026-91484

A vulnerability exists in the Java plugin component of Oracle Java SE versions 8u503 and 8u503-perf . A low-privileged attacker with local access to the infrastructure can exploit this difficult-to-exploit flaw to compromise Oracle Java SE. This vulnerability specifically impacts Java deployments...

CVE-2026-91474

A vulnerability exists in the eProcurement component of Oracle PeopleSoft Enterprise FIN Common Objects Brazil (version 9.1 ). This easily exploitable flaw allows a high-privileged attacker with access to the physical communication segment attached to the hardware to compromise the product. Succe...

CVE-2026-91475

A vulnerability exists in the Oracle Outside In Technology product (component: Outside In Clean Content SDK ) of Oracle Fusion Middleware , specifically affecting version 8.5.8 . A low-privileged attacker with local access to the infrastructure can exploit this vulnerability to compromise the pro...

CVE-2026-91468

The PeopleSoft Enterprise PeopleTools product by Oracle PeopleSoft (specifically the QAS component) is vulnerable in supported versions 8.61-8.63 . An unauthenticated attacker with network access via HTTP can easily exploit this vulnerability to compromise the system. Successful exploitation may ...

CVE-2026-91465

The Oracle PeopleSoft Enterprise FIN Common Objects Argentina product (specifically the Integration component) is affected by a vulnerability in version 9.1 . An unauthenticated attacker with network access via Oracle Net can easily exploit this flaw to compromise the system. Successful exploitat...

CVE-2026-91462

A vulnerability exists in the JGSS component of Oracle Java SE , Oracle GraalVM for JDK , and Oracle GraalVM Enterprise Edition . Affected versions include Oracle Java SE 8u503, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, and 27; Oracle GraalVM for JDK 17.0.20.1 and 21.0.12.1; and Oracle GraalVM E...

CVE-2026-91461

A vulnerability exists in the JSSE component of Oracle Java SE , Oracle GraalVM for JDK , and Oracle GraalVM Enterprise Edition . Affected versions include Oracle Java SE (8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27), Oracle GraalVM for JDK (17.0.20.1, 21.0.12.1), and Oracle ...

CVE-2026-91455

A vulnerability exists in the JD Edwards EnterpriseOne Tools product from Oracle JD Edwards , specifically affecting the E1 Dev Platform Tech - UNIX component in versions 9.2.0.0-9.2.26.5 . An unauthenticated attacker with network access via HTTP can exploit this issue, though it requires human i...

CVE-2026-91452

A vulnerability exists in the Networking component of Oracle Java SE , Oracle GraalVM for JDK , and Oracle GraalVM Enterprise Edition . Affected versions include Oracle Java SE (8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27), Oracle GraalVM for JDK (17.0.20.1, 21.0.12.1), and O...

CVE-2026-91453

A vulnerability exists in the Lightweight HTTP Server component of Oracle Java SE , Oracle GraalVM for JDK , and Oracle GraalVM Enterprise Edition . Affected versions include Oracle Java SE 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, and 27; Oracle GraalVM for JDK 17.0.20.1 and ...

CVE-2026-91450

A vulnerability exists in the Server Infrastructure component of Oracle Siebel CRM (Siebel CRM Deployment) in supported versions 17.0-26.9 . A remote, unauthenticated attacker with network access via HTTP can exploit this difficult-to-exploit vulnerability to compromise the deployment. Successful...

CVE-2026-91449

A vulnerability exists in the Server Infrastructure component of Oracle Siebel CRM Deployment (affected versions 17.0-26.9 ). This high-complexity vulnerability allows an unauthenticated attacker with network access via HTTP to compromise the deployment. Successful exploitation can lead to unauth...

CVE-2026-91447

A vulnerability exists in the Server Infrastructure component of Oracle Siebel CRM (Siebel CRM Deployment) affecting versions 17.0-26.9 . An unauthenticated attacker with network access via HTTP can easily exploit this flaw to compromise the deployment. Successful exploitation may lead to unautho...

CVE-2026-91448

A vulnerability exists in the Server Infrastructure component of Oracle Siebel CRM (Siebel CRM Deployment) affecting versions 17.0-26.9 . An unauthenticated attacker with network access via HTTP can easily exploit this vulnerability to compromise the deployment. Successful exploitation can lead t...

CVE-2026-91445

A vulnerability exists in the Communications Panel/Dashboard component of the Siebel CRM End User product (Oracle Siebel CRM), affecting supported versions 17.0-26.9 . An unauthenticated attacker with network access via HTTP can easily exploit this flaw to compromise the system. Successful exploi...

CVE-2026-91441

A vulnerability exists in the Order Management component of Oracle Siebel CRM (Siebel Apps - Customer Order Management) affecting versions 17.0-26.9 . A low-privileged attacker with network access via HTTP can exploit this issue, though successful execution requires human interaction . The vulner...

CVE-2026-91439

The Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure ) is affected by a vulnerability in versions 17.0-26.9 . A low-privileged attacker with logon access to the infrastructure where the software executes can exploit this flaw to compromise the deployment. Succe...