CVE-2026-91565

A vulnerability exists in the Oracle Agile Product Lifecycle Management for Process product, specifically within the Product Quality Management component. The affected version is 6.2.4 . A low-privileged attacker with network access via HTTP can exploit this high-complexity vulnerability to compr...

CVE-2026-91554

The Oracle BI Publisher product within Oracle Analytics (specifically the Web Server component) is affected by a vulnerability in version 12.2.1.4.0 . An unauthenticated attacker with network access via HTTP can exploit this flaw to compromise the system. Successful exploitation can result in una...

CVE-2026-91555

The Oracle BI Publisher product of Oracle Analytics (specifically the Web Server component) is vulnerable in versions 8.2.0.0.0 , 12.2.1.4.0 , and 26.01.0.0.0 . An unauthenticated attacker with network access via HTTP can exploit this vulnerability to compromise the product, though successful att...

CVE-2026-91550

A vulnerability exists in the Oracle Agile Product Lifecycle Management for Process product (Oracle Supply Chain), specifically within the Product Quality Management component in version 6.2.4 . This easily exploitable vulnerability allows a low privileged attacker with network access via HTTP to...

CVE-2026-91552

A vulnerability exists in the Oracle WebCenter Sites component of Oracle Fusion Middleware, affecting versions 12.2.1.4.0 and 14.1.2.0.0 . An unauthenticated attacker with network access via HTTP can easily exploit this flaw to compromise the system. Successful exploitation may lead to unauthoriz...

CVE-2026-91546

A high-severity vulnerability affects the BI Foundation component of Oracle Business Intelligence Enterprise Edition (Oracle Analytics) in version 12.2.1.4.0 . This difficult-to-exploit flaw allows an unauthenticated attacker with network access via HTTP to compromise the system, potentially lead...

CVE-2026-91542

A vulnerability exists in the Oracle WebCenter Sites component of Oracle Fusion Middleware (specifically versions 12.2.1.4.0 and 14.1.2.0.0 ). An unauthenticated attacker with network access via HTTP can easily exploit this vulnerability to compromise the product. Successful exploitation may resu...

CVE-2026-91541

A vulnerability exists in the PeopleSoft Enterprise FIN Common Objects Brazil product (specifically the Common Objects component) in version 9.1 . An unauthenticated attacker with network access via HTTP can exploit this vulnerability to compromise the system. Successful exploitation may lead to ...

CVE-2026-91535

The Oracle Business Intelligence Enterprise Edition product of Oracle Analytics is affected by a vulnerability in the BI Search component. Specifically, versions 8.2.0.0.0 , 12.2.1.4.0 , and 26.01.0.0.0 are impacted. A low-privileged attacker with network access via HTTP can exploit this vulnerab...

CVE-2026-91534

A vulnerability exists in the Analytics Web General component of Oracle Business Intelligence Enterprise Edition (versions 8.2.0.0.0, 12.2.1.4.0, and 26.01.0.0.0). An unauthenticated attacker with network access via HTTP can exploit this issue to cause a complete Denial of Service (DoS) by trigge...

CVE-2026-91532

A vulnerability exists in the Oracle Applications Manager product of Oracle E-Business Suite within the Internal Operations component. Affected versions include 12.2.3-12.2.15 . A low-privileged attacker with network access via HTTP can easily exploit this flaw to compromise the Oracle Applicatio...

CVE-2026-91527

A vulnerability exists in the Core component of the Oracle ZFS Storage Appliance Kit (affected version 8.8 ). A low-privileged attacker with network access via HTTP can easily exploit this flaw to compromise the appliance. Successful exploitation can result in a full takeover of the system. This ...

CVE-2026-91530

A vulnerability exists in the Oracle GoldenGate Admin Client Executable affecting versions 23.4-23.26.2.0.0 . A high-privileged attacker with network access via HTTP can exploit this difficult-to-exploit flaw to compromise Oracle GoldenGate. Successful exploitation may result in unauthorized acce...

CVE-2026-91524

A vulnerability exists in the BI Foundation component of Oracle Business Intelligence Enterprise Edition (product of Oracle Analytics), specifically affecting version 12.2.1.4.0 . A low-privileged attacker with network access via HTTP can exploit this vulnerability to cause a partial denial of se...

CVE-2026-91523

A vulnerability exists in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics, specifically within the Analytics Web General component. Affected versions include 8.2.0.0.0, 12.2.1.4.0, and 26.01.0.0.0 . A low-privileged attacker with network access via HTTP can exploit...

CVE-2026-91526

A vulnerability exists in the Web Server component of Oracle BI Publisher (part of Oracle Analytics) affecting versions 8.2.0.0.0 , 12.2.1.4.0 , and 26.01.0.0.0 . This high-complexity vulnerability allows an unauthenticated attacker with network access via HTTP to compromise the product, though i...

CVE-2026-91520

The Oracle Agile Product Lifecycle Management for Process product (specifically the Product Quality Management component) is vulnerable in version 6.2.4 . A low-privileged attacker with network access via HTTP can exploit this vulnerability to compromise the system. Successful exploitation may re...

CVE-2026-91519

A vulnerability exists in the Report Distribution component of Oracle PeopleSoft Enterprise PeopleTools (affected versions 8.61-8.63 ). This easily exploitable flaw allows a low-privileged attacker with network access via HTTP to compromise the system. Successful exploitation can result in unauth...

CVE-2026-91521

The Oracle Agile Product Lifecycle Management for Process product (specifically the Product Quality Management component) in version 6.2.4 is affected by a vulnerability. A low-privileged attacker with network access via HTTP can easily exploit this flaw to compromise the system. Successful explo...

CVE-2026-91515

A vulnerability exists in the Oracle Agile Product Lifecycle Management for Process product (component: Product Quality Management ) version 6.2.4 . A low privileged attacker with network access via HTTP can exploit this difficult-to-exploit vulnerability to compromise the system, potentially lea...