CVE-2026-101553

A vulnerability exists in the Oracle Payroll product of Oracle E-Business Suite , specifically affecting the Element Types, Links, and Entries components. The affected versions range from 12.2.3 to 12.2.15 . A low-privileged attacker with network access via HTTP can easily exploit this flaw to co...

CVE-2026-101551

A vulnerability exists in the Oracle Applications Manager product of Oracle E-Business Suite , specifically affecting the Oracle Diagnostics Interfaces component. Affected versions are 12.2.3-12.2.15 . An unauthenticated attacker with network access via HTTP can easily exploit this flaw to compro...

CVE-2026-101547

A vulnerability exists in the Internal Operations component of the Oracle Demand Planning product within Oracle Supply Chain , specifically affecting versions 12.1 and 12.2 . An unauthenticated attacker with network access via HTTP can exploit this vulnerability to compromise the product, though ...

CVE-2026-101531

The Oracle Business Intelligence Enterprise Edition product of Oracle Analytics is affected by a vulnerability in the Analytics Server component. Specifically, versions 8.2.0.0.0 and 26.01.0.0.0 are vulnerable. An unauthenticated attacker with network access via HTTP can easily exploit this flaw ...

CVE-2026-101528

A vulnerability exists in the Data Guard Management component of Oracle Enterprise Manager for Oracle Database affecting supported versions 13.5 and 24.1 . A low-privileged attacker with network access via HTTP can easily exploit this flaw to compromise the product, potentially leading to a full ...

CVE-2026-101529

A vulnerability exists in the Data Guard Management component of Oracle Enterprise Manager for Oracle Database (affected versions 13.5 and 24.1 ). An attacker with low privileges and network access via HTTP can exploit this flaw to compromise the system. Successful exploitation may result in a co...

CVE-2026-101515

The Oracle WebLogic Server product (component: Centralized Thirdparty Jars ) of Oracle Fusion Middleware is affected by a vulnerability in versions 12.2.1.4.0 , 14.1.1.0.0 , 14.1.2.0.0 , and 15.1.1.0.0 . This high-complexity vulnerability allows an unauthenticated attacker with network access via...

CVE-2026-101502

A vulnerability exists in the PLSQL package component of Oracle Trusted Answer Search version 26.1 . This issue allows a low-privileged attacker with infrastructure access to compromise the service, potentially gaining unauthorized read, update, insert, or delete access to certain data, or causin...

CVE-2026-101501

A vulnerability exists in the Oracle Trusted Answer Search (specifically the PLSQL package component) in version 26.1 . A low-privileged attacker with network access via Oracle Net can exploit this flaw to compromise the service. The impact includes unauthorized creation, deletion, or modificatio...

CVE-2026-101494

A vulnerability in the Core component of Oracle REST Data Services affects supported versions 24.2.0-26.2.2 . A low-privileged attacker with network access via HTTP can easily exploit this flaw to compromise the service. Successful exploitation may lead to unauthorized access to critical data or ...

CVE-2026-101493

A vulnerability exists in the Core component of Oracle REST Data Services affecting versions 24.2.0-26.2.1 . A low-privileged attacker with network access via HTTP can exploit this issue to gain unauthorized read , update , insert , or delete access to some of the accessible data within Oracle RE...

CVE-2026-101492

A vulnerability exists in the Siebel CRM Integration product of Oracle Siebel CRM , specifically within the Open Integration component, affecting versions 25.12-26.9 . This difficult-to-exploit vulnerability allows an unauthenticated attacker with network access via HTTP to compromise the product...

CVE-2026-101488

Oracle PeopleSoft PeopleTools is vulnerable in the Business Interlink component within versions 8.61-8.63 . An unauthenticated attacker with network access via HTTP can exploit this vulnerability to gain unauthorized read access to a subset of accessible data and cause a partial denial of service...

CVE-2026-101490

A vulnerability exists in the Fluid Core component of Oracle PeopleSoft Enterprise PeopleTools (affected versions 8.61-8.63 ). This easily exploitable flaw allows an unauthenticated attacker with network access via HTTP to compromise the system. Successful exploitation requires human interaction ...

CVE-2026-101485

A vulnerability exists in the Oracle Autonomous Health Framework specifically within the Trace File Analyzer component in supported versions 26.3-26.8 . A low-privileged attacker with local access to the infrastructure can exploit this to compromise the framework, potentially leading to unauthori...

CVE-2026-101476

A vulnerability exists in the Marketing component of Oracle Siebel CRM (Siebel Apps - Marketing) affecting supported versions 17.0-26.9 . An unauthenticated attacker with network access via HTTP can exploit this flaw, although successful execution requires human interaction from a user other than...

CVE-2026-101472

A vulnerability exists in the Oracle Product Lifecycle Analytics product of Oracle Supply Chain (component: Installation Issues ) affecting version 3.6.1 . A low-privileged attacker with local access to the infrastructure where the product executes can exploit this vulnerability to compromise the...

CVE-2026-101470

A vulnerability exists in the Installation Issues component of the Oracle Product Lifecycle Analytics product within Oracle Supply Chain, specifically affecting version 3.6.1 . A high-privileged attacker with logon access to the execution infrastructure can easily exploit this flaw to compromise ...

CVE-2026-101467

A vulnerability exists in the Portal Framework component of Oracle Siebel CRM End User (affected versions 17.0-26.9 ). A difficult-to-exploit flaw allows an unauthenticated attacker with network access via HTTPS to compromise the system. Successful exploitation can lead to unauthorized creation, ...

CVE-2026-101468

A vulnerability exists in the Siebel CRM Deployment product of Oracle Siebel CRM , specifically affecting the Cloud Gateway component in supported versions 17.0-26.9 . An unauthenticated attacker with network access via HTTP can easily exploit this flaw to compromise the deployment. Successful ex...