CVE-2026-91617

A vulnerability exists in the Remote Diagnostic Agent component of Oracle Middleware Common Libraries and Tools within Oracle Fusion Middleware . Affected versions include 12.2.1.4.0 , 14.1.1.0.0 , 14.1.2.0.0 , and 15.1.1.0.0 . A low-privileged attacker with local access to the infrastructure can...

CVE-2026-91609

A vulnerability exists in the Oracle REST Data Services (component: Graph QL ) affecting supported versions 24.2.0-26.2.1 . This easily exploitable flaw allows a low-privileged attacker with network access via HTTP to compromise the service. Successful exploitation can lead to unauthorized access...

CVE-2026-91610

A vulnerability exists in Oracle REST Data Services (component: General) affecting supported versions 24.2.0-26.2.2 . A low-privileged attacker with network access via HTTP can easily exploit this flaw to compromise the service. Successful exploitation may lead to a complete takeover of Oracle RE...

CVE-2026-91588

A vulnerability exists in the BI Search component of Oracle Business Intelligence Enterprise Edition (Oracle Analytics), specifically affecting versions 8.2.0.0.0 and 12.2.1.4.0 . An unauthenticated attacker with network access via HTTP can exploit this flaw to compromise the system, although the...

CVE-2026-91577

A vulnerability exists in the BI Platform Security component of Oracle Business Intelligence Enterprise Edition (affected version 12.2.1.4.0 ) within the Oracle Analytics suite. A low-privileged attacker with network access via HTTP can exploit this flaw to compromise the system. Successful explo...

CVE-2026-91573

A vulnerability exists in the Product Quality Management component of Oracle Agile Product Lifecycle Management for Process (version 6.2.4 ). An unauthenticated attacker with network access via HTTP can easily exploit this flaw to compromise the system. Successful exploitation may result in unaut...

CVE-2026-91555

The Oracle BI Publisher product of Oracle Analytics (specifically the Web Server component) is vulnerable in versions 8.2.0.0.0 , 12.2.1.4.0 , and 26.01.0.0.0 . An unauthenticated attacker with network access via HTTP can exploit this vulnerability to compromise the product, though successful att...

CVE-2026-91554

The Oracle BI Publisher product within Oracle Analytics (specifically the Web Server component) is affected by a vulnerability in version 12.2.1.4.0 . An unauthenticated attacker with network access via HTTP can exploit this flaw to compromise the system. Successful exploitation can result in una...

CVE-2026-91552

A vulnerability exists in the Oracle WebCenter Sites component of Oracle Fusion Middleware, affecting versions 12.2.1.4.0 and 14.1.2.0.0 . An unauthenticated attacker with network access via HTTP can easily exploit this flaw to compromise the system. Successful exploitation may lead to unauthoriz...

CVE-2026-91541

A vulnerability exists in the PeopleSoft Enterprise FIN Common Objects Brazil product (specifically the Common Objects component) in version 9.1 . An unauthenticated attacker with network access via HTTP can exploit this vulnerability to compromise the system. Successful exploitation may lead to ...

CVE-2026-91542

A vulnerability exists in the Oracle WebCenter Sites component of Oracle Fusion Middleware (specifically versions 12.2.1.4.0 and 14.1.2.0.0 ). An unauthenticated attacker with network access via HTTP can easily exploit this vulnerability to compromise the product. Successful exploitation may resu...

CVE-2026-91534

A vulnerability exists in the Analytics Web General component of Oracle Business Intelligence Enterprise Edition (versions 8.2.0.0.0, 12.2.1.4.0, and 26.01.0.0.0). An unauthenticated attacker with network access via HTTP can exploit this issue to cause a complete Denial of Service (DoS) by trigge...

CVE-2026-91526

A vulnerability exists in the Web Server component of Oracle BI Publisher (part of Oracle Analytics) affecting versions 8.2.0.0.0 , 12.2.1.4.0 , and 26.01.0.0.0 . This high-complexity vulnerability allows an unauthenticated attacker with network access via HTTP to compromise the product, though i...

CVE-2026-91505

A vulnerability exists in the Porting component of Oracle PeopleSoft Enterprise PeopleTools (versions 8.61 and 8.62 ). A high-privileged attacker with access to the execution infrastructure can exploit this flaw to compromise the product. Successful exploitation may lead to unauthorized creation,...

CVE-2026-91497

Oracle PeopleSoft Enterprise PeopleTools (component: Updates Environment Mgmt ) versions 8.61-8.63 are affected by a vulnerability that allows an unauthenticated attacker with network access via HTTP to compromise the product. Successful exploitation can result in unauthorized update, insert, or ...

CVE-2026-91494

The Oracle Identity Manager Connector product within Oracle Fusion Middleware is vulnerable in versions 12.2.1.4.0 and 14.1.2.1.0 . Specifically, the LDAP Gateway component contains a vulnerability that allows an unauthenticated attacker with network access via TCP to compromise the system. This ...

CVE-2026-91493

The Oracle Identity Manager Connector product within Oracle Fusion Middleware is affected by a vulnerability in the LDAP Gateway component. Impacted versions include 12.2.1.4.0 and 14.1.2.1.0 . This easily exploitable vulnerability allows an unauthenticated attacker with network access via LDAP t...

CVE-2026-91492

A vulnerability exists in the Oracle Identity Manager Connector product within Oracle Fusion Middleware (specifically the SAP ERP+ component). The issue affects supported versions 12.2.1.4.0 and 14.1.2.1.0 . It is a difficult to exploit vulnerability that allows an unauthenticated attacker with n...

CVE-2026-91489

A vulnerability exists in the LDAP Gateway component of the Oracle Identity Manager Connector product within Oracle Fusion Middleware , affecting supported versions 12.2.1.4.0 and 14.1.2.1.0 . A low privileged attacker with access to the infrastructure where the software executes can exploit this...

CVE-2026-91490

The Oracle Identity Manager Connector product within Oracle Fusion Middleware is impacted by a critical vulnerability in the LDAP Gateway component, specifically affecting versions 12.2.1.4.0 and 14.1.2.1.0 . An unauthenticated attacker with network access via LDAP can easily exploit this flaw to...