CVE-2026-91379

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: JDK tools. Supported versions that are affected are Oracle Java SE: 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and...

CVE-2026-91378

A vulnerability exists in the Siebel CRM Integration product of Oracle Siebel CRM , specifically within the Open Integration component, affecting versions 25.12-26.9 . An unauthenticated attacker with network access via HTTP can exploit this flaw to compromise the integration, though the attack r...

CVE-2026-91379

A vulnerability exists in the JDK tools component of Oracle Java SE , Oracle GraalVM for JDK , and Oracle GraalVM Enterprise Edition . Affected versions include Oracle Java SE (8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27), Oracle GraalVM for JDK (17.0.20.1, 21.0.12.1), and Oracle Gr...

CVE-2026-91375

Vulnerability in Oracle Java SE component: Libraries. Supported versions that are affected are Oracle Java SE: 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and 21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit...

CVE-2026-91377

A vulnerability exists in the Siebel CRM Integration product of Oracle Siebel CRM , specifically affecting the Open Integration component in versions 25.12-26.9 . An unauthenticated attacker with network access via HTTP can exploit this vulnerability to compromise the system. Successful exploitat...

CVE-2026-91375

A vulnerability in the Libraries component of Oracle Java SE and Oracle GraalVM allows an unauthenticated attacker with infrastructure access to compromise the environment. This high-complexity exploit requires human interaction and can result in the unauthorized creation, deletion, or modificati...

CVE-2026-91369

A vulnerability exists in the Siebel Cloud Manager component of the Siebel CRM Cloud Applications product (versions 22.3-26.9 ). A low-privileged attacker with network access via HTTP can exploit this difficult-to-exploit vulnerability to compromise the applications. Successful exploitation may r...

CVE-2026-91367

A vulnerability exists in the Siebel Cloud Manager component of Oracle Siebel CRM Cloud Applications (affected versions 22.3-26.9 ). A low-privileged attacker with logon access to the execution infrastructure can exploit this issue to compromise the application, potentially resulting in unauthori...

CVE-2026-91368

A vulnerability exists in the Siebel Cloud Manager component of Oracle Siebel CRM Cloud Applications affecting versions 22.3-26.9 . A high privileged attacker with local access to the infrastructure can exploit this flaw to compromise the application, potentially gaining unauthorized access to cr...

CVE-2026-91364

A vulnerability exists in the Siebel Cloud Manager component of Oracle Siebel CRM Cloud Applications (affected versions 22.3-26.9 ). This difficult-to-exploit vulnerability allows an unauthenticated attacker with access to the physical communication segment of the hardware to compromise the appli...

CVE-2026-91365

A vulnerability exists in the Siebel Cloud Manager component of Oracle Siebel CRM Cloud Applications (affected versions 22.3-26.9 ). This difficult to exploit vulnerability allows an unauthenticated attacker with access to the physical communication segment attached to the hardware to compromise ...

CVE-2026-91361

A vulnerability exists in the Siebel Cloud Manager component of Oracle Siebel CRM Cloud Applications (affected versions 22.3-26.9 ). An unauthenticated attacker with network access via HTTP can easily exploit this flaw to compromise the application. Successful exploitation may lead to unauthorize...

CVE-2026-91358

A vulnerability exists in the Oracle Business Process Management Suite product of Oracle Fusion Middleware (specifically the Case management Service (11g+) component). Affected supported versions include 12.2.1.4.0 and 14.1.2.0.0 . An unauthenticated attacker with network access via HTTP can easi...

CVE-2026-91360

A vulnerability exists in the Siebel Cloud Manager component of the Oracle Siebel CRM Cloud Applications product, affecting supported versions 22.3-26.9 . A low-privileged attacker with network access via HTTP can easily exploit this flaw to compromise the application. Successful exploitation may...

CVE-2026-91353

A vulnerability exists in the Outside In Clean Content SDK component of the Oracle Outside In Technology product, specifically affecting version 8.5.8 . An unauthenticated attacker with network access via HTTP can easily exploit this flaw to compromise the technology, potentially resulting in una...

CVE-2026-91351

A vulnerability exists in the Outside In Clean Content SDK component of the Oracle Outside In Technology product (part of Oracle Fusion Middleware), specifically affecting version 8.5.8 . A low-privileged attacker with logon access to the infrastructure where the software executes can exploit thi...

CVE-2026-91347

The iSupport product within Oracle E-Business Suite (specifically the Service Requests component) is vulnerable in versions 12.2.3-12.2.15 . A low-privileged attacker with network access via HTTP can exploit this vulnerability to compromise iSupport, potentially leading to unauthorized creation, ...

CVE-2026-91346

A vulnerability exists in the Outside In Clean Content SDK component of the Oracle Outside In Technology product (specifically version 8.5.8 ). An unauthenticated attacker with network access via HTTP can exploit this flaw, though it requires human interaction from a user other than the attacker....

CVE-2026-91343

A vulnerability exists in the Outside In Clean Content SDK component of the Oracle Outside In Technology product within Oracle Fusion Middleware (affected version 8.5.8 ). An unauthenticated attacker with network access via HTTP can exploit this vulnerability to compromise the technology, potenti...

CVE-2026-91341

A critical vulnerability exists in the Outside In Clean Content SDK component of Oracle Fusion Middleware (specifically version 8.5.8 ). An unauthenticated attacker with network access via HTTP can exploit this flaw to gain unauthorized access to critical data, allowing for the creation, deletion...