CVE-2026-91343

A vulnerability exists in the Outside In Clean Content SDK component of the Oracle Outside In Technology product within Oracle Fusion Middleware (affected version 8.5.8 ). An unauthenticated attacker with network access via HTTP can exploit this vulnerability to compromise the technology, potenti...

CVE-2026-91342

The Outside In Clean Content SDK component of the Oracle Fusion Middleware product (version 8.5.8 ) is vulnerable to a security flaw. An unauthenticated attacker with network access via HTTP can exploit this vulnerability to compromise Oracle Outside In Technology . While the attack requires huma...

CVE-2026-91339

A vulnerability exists in the iSupport product of Oracle E-Business Suite (specifically the Service Requests component) affecting supported versions 12.2.3-12.2.15 . An attacker with low privileges and network access via HTTP can easily exploit this vulnerability to compromise iSupport. Successfu...

CVE-2026-91340

A vulnerability exists in the Outside In Clean Content SDK component of Oracle Fusion Middleware (specifically affecting version 8.5.8 ). A low-privileged attacker with network access via HTTP can exploit this flaw to compromise the Oracle Outside In Technology product, potentially leading to a f...

CVE-2026-91338

The iSupport product of Oracle E-Business Suite (versions 12.2.3-12.2.15) contains a vulnerability in its Internal operations component. This flaw allows a low-privileged attacker with network access via HTTP to compromise iSupport. Successful exploitation can lead to unauthorized creation, delet...

CVE-2026-91325

A vulnerability exists in the Installation Security component of the JD Edwards EnterpriseOne Tools product by Oracle JD Edwards, affecting versions 9.2.0.0-9.2.26.5 . An unauthenticated attacker with network access via HTTP can easily exploit this flaw to compromise the tools. Successful exploit...

CVE-2026-91321

A vulnerability exists in the iProcurement product of Oracle E-Business Suite within the Requisition Management component. Affected versions include 12.2.3-12.2.15 . A low-privileged attacker with network access via HTTP can exploit this difficult-to-exploit vulnerability to compromise the iProcu...

CVE-2026-91323

A vulnerability exists in the Core component of the Oracle WebLogic Server product within Oracle Fusion Middleware. Affected versions include 12.2.1.4.0 , 14.1.1.0.0 , 14.1.2.0.0 , and 15.1.1.0.0 . An unauthenticated attacker with network access via HTTP can easily exploit this vulnerability to c...

CVE-2026-91319

A vulnerability exists in the Java Business Objects component of the Oracle JDeveloper product within Oracle Fusion Middleware, specifically affecting versions 12.2.1.4.0 and 14.1.2.0.0 . This difficult-to-exploit flaw allows an unauthenticated attacker with network access via HTTP to compromise ...

CVE-2026-91318

A vulnerability exists in the Security Framework component of the Oracle JDeveloper product within Oracle Fusion Middleware (specifically versions 12.2.1.4.0 and 14.1.2.0.0 ). An unauthenticated attacker with network access via HTTP can compromise the system, though the attack requires human inte...

CVE-2026-91313

The JD Edwards EnterpriseOne Tools product by Oracle JD Edwards (component: Installation Security ) is affected by CVE-2026-91313 in versions 9.2.0.0-9.2.26.4 . A difficult-to-exploit vulnerability allows an unauthenticated attacker with network access via HTTP to compromise the tools, potentiall...

CVE-2026-91303

A vulnerability exists in the Installation Security component of JD Edwards EnterpriseOne Tools (versions 9.2.0.0-9.2.26.5) by Oracle JD Edwards. An unauthenticated attacker with network access via HTTP can exploit this flaw to compromise the product, resulting in a potential takeover of the JD E...

CVE-2026-91298

A vulnerability exists in the Web Runtime SEC component of Oracle JD Edwards EnterpriseOne Tools (affected versions 9.2.0.0-9.2.26.5 ). A low-privileged attacker with HTTP network access can exploit this flaw to compromise the tools, requiring human interaction from another user. The attack may h...

CVE-2026-91300

A vulnerability exists in the Web Runtime SEC component of Oracle JD Edwards EnterpriseOne Tools (versions 9.2.0.0-9.2.26.5 ). An unauthenticated attacker with network access via HTTP can exploit this difficult-to-exploit vulnerability to compromise the product, provided they can trigger the nece...

CVE-2026-91299

A vulnerability exists in the JD Edwards EnterpriseOne Orchestrator product by Oracle JD Edwards, specifically affecting the E1 IOT Orchestrator Security component in versions 9.2.0.0-9.2.26.5 . An unauthenticated attacker with network access via HTTP can easily exploit this flaw to compromise th...

CVE-2026-91297

Oracle JD Edwards EnterpriseOne Tools is affected by a vulnerability in the Monitoring and Diagnostics SEC component. Impacted versions include 9.2.0.0-9.2.26.5 . An unauthenticated attacker with network access via HTTP can compromise the tools, though successful exploitation requires human inter...

CVE-2026-91296

A vulnerability exists in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards , specifically within the Enterprise Infrastructure SEC component. This affects supported versions 9.2.0.0-9.2.26.5 . An unauthenticated attacker with network access via HTTP can exploit this vulnerability t...

CVE-2026-91295

A vulnerability exists in the Enterprise Infrastructure SEC component of Oracle JD Edwards EnterpriseOne Tools (versions 9.2.0.0-9.2.26.5). A low-privileged attacker with network access via HTTP can easily exploit this flaw to compromise the system, potentially resulting in a complete takeover of...

CVE-2026-91283

The JD Edwards EnterpriseOne Tools product by Oracle JD Edwards, specifically the Web Runtime SEC component, is affected by CVE-2026-91283 in versions 9.2.0.0 through 9.2.26.5 . An unauthenticated attacker with network access via HTTP can exploit this vulnerability, though the attack requires hum...

CVE-2026-91285

A vulnerability exists in the E1 IOT Orchestrator Security component of the JD Edwards EnterpriseOne Orchestrator product by Oracle JD Edwards , affecting versions 9.2.0.0-9.2.26.5 . A low-privileged attacker with network access via HTTP can exploit this issue to compromise the orchestrator, pote...