CVE-2026-101596

The Oracle Agile Product Lifecycle Management for Process product (Oracle Supply Chain) contains a vulnerability in the Product Quality Management component. The affected version is 6.2.4 . This easily exploitable vulnerability allows a low-privileged attacker with network access via HTTP to comp...

CVE-2026-101597

The Oracle ZFS Storage Appliance Kit (component: Core ) version 8.8 is affected by an easily exploitable vulnerability. An unauthenticated attacker with network access via HTTP can compromise the appliance, potentially resulting in unauthorized read access to a subset of accessible data. This vul...

CVE-2026-101594

A vulnerability exists in the Oracle Agile Product Lifecycle Management for Process product (Oracle Supply Chain), specifically affecting the Product Quality Management component in version 6.2.4 . A low-privileged attacker with network access via HTTP can easily exploit this vulnerability to com...

CVE-2026-101595

A vulnerability exists in the Oracle Agile Product Lifecycle Management for Process product, specifically within the Supply Chain Relationship Mgmt component in version 6.2.4 . A low-privileged attacker with network access via HTTP can exploit this issue to compromise the system, though successfu...

CVE-2026-101591

The Oracle Agile Product Lifecycle Management for Process product (specifically the Product Quality Management component) is affected by a vulnerability in version 6.2.4 . A low-privileged attacker with network access via HTTP can exploit this issue to achieve unauthorized read access to a subset...

CVE-2026-101592

A vulnerability exists in the Oracle Agile Product Lifecycle Management for Process product (specifically the Product Quality Management component) version 6.2.4 . A low-privileged attacker with network access via HTTP can exploit this vulnerability to compromise the system, though the attack req...

CVE-2026-101593

A vulnerability exists in Oracle Agile Product Lifecycle Management for Process (Oracle Supply Chain, component: Product Quality Management ) affecting version 6.2.4 . A low-privileged attacker with network access via HTTP can exploit this flaw to compromise the system. Successful exploitation ma...

CVE-2026-101590

Vulnerability in the Helidon product of Oracle Fusion Middleware component: helidon-microprofile-security. Supported versions that are affected are 4.0.0-4.5.5. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful attacks ...

CVE-2026-101590

The Helidon product within Oracle Fusion Middleware (specifically the helidon-microprofile-security component) is affected by a critical vulnerability in versions 4.0.0-4.5.5 . An unauthenticated attacker with network access via HTTP can easily exploit this flaw to compromise the system. Successf...

CVE-2026-101587

Vulnerability in the Helidon product of Oracle Fusion Middleware component: helidon-webclient-http1. Supported versions that are affected are 4.0.0-4.5.5 and 27.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful...

CVE-2026-101587

A vulnerability exists in the helidon-webclient-http1 component of the Helidon product within Oracle Fusion Middleware . The affected versions are 4.0.0-4.5.5 and 27.0.0 . An unauthenticated attacker with network access via HTTP can exploit this flaw to cause a partial denial of service (partial ...

CVE-2026-101586

The Helidon product of Oracle Fusion Middleware is affected by a vulnerability in the helidon-webclient component. Impacted versions include 4.0.0-4.5.5 and 27.0.0 . An unauthenticated attacker with network access via HTTP can exploit this flaw to gain unauthorized read access to a subset of Heli...

CVE-2026-101585

The Helidon product within Oracle Fusion Middleware (specifically the helidon-cors component) is affected by a vulnerability in versions 3.0.0-3.2.21 . An unauthenticated attacker with network access via HTTP can exploit this flaw to compromise Helidon, potentially gaining unauthorized read, upda...

CVE-2026-101584

The Helidon product of Oracle Fusion Middleware is vulnerable in the helidon-webclient-websocket component. Specifically, supported versions 4.0.0-4.5.5 and 27.0.0 are affected by a vulnerability that allows an unauthenticated attacker with network access via HTTP to compromise the system. Succes...

CVE-2026-101584

Vulnerability in the Helidon product of Oracle Fusion Middleware component: helidon-webclient-websocket. Supported versions that are affected are 4.0.0-4.5.5 and 27.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful...

CVE-2026-101582

The Helidon product of Oracle Fusion Middleware (specifically the helidon-integrations-vault component) is vulnerable in versions 4.0.0-4.5.5 . An unauthenticated attacker with network access via HTTP can exploit this flaw to achieve unauthorized read access to a subset of Helidon accessible data...

CVE-2026-101583

A vulnerability exists in the helidon-common-mapper component of the Oracle Fusion Middleware Helidon product, specifically affecting versions 4.0.0-4.5.5 and 27.0.0 . This high-complexity vulnerability allows an unauthenticated attacker with network access via HTTP to compromise the system. Succ...

CVE-2026-101583

Vulnerability in the Helidon product of Oracle Fusion Middleware component: helidon-common-mapper. Supported versions that are affected are 4.0.0-4.5.5 and 27.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful...

CVE-2026-101579

The helidon-grpc-server component within the Helidon product of Oracle Fusion Middleware is affected by a vulnerability in versions 3.0.0-3.2.21 . An unauthenticated attacker with network access via HTTP/2 can easily exploit this issue to compromise the system. Successful exploitation may lead to...

CVE-2026-101580

A vulnerability exists in the helidon-security-providers-jwt component of the Oracle Fusion Middleware Helidon product. Affected versions include 4.0.0-4.5.5 and 27.0.0 . An unauthenticated attacker with network access via HTTP can exploit this vulnerability to gain unauthorized read access to a ...