CVE-2026-101534

A vulnerability exists in the Oracle EDI Gateway component of Oracle E-Business Suite (affected versions 12.2.3-12.2.15 ). A low-privileged attacker with network access via HTTP can easily exploit this flaw to compromise the gateway. Impact includes unauthorized access to critical data or complet...

CVE-2026-101531

The Oracle Business Intelligence Enterprise Edition product of Oracle Analytics is affected by a vulnerability in the Analytics Server component. Specifically, versions 8.2.0.0.0 and 26.01.0.0.0 are vulnerable. An unauthenticated attacker with network access via HTTP can easily exploit this flaw ...

CVE-2026-101532

The Oracle EDI Gateway product within Oracle E-Business Suite (specifically the All Miscellaneous EDI Issues component) is affected by a vulnerability in versions 12.2.3-12.2.15 . A high-privileged attacker with network access via HTTP can easily exploit this flaw to compromise the system, potent...

CVE-2026-101528

A vulnerability exists in the Data Guard Management component of Oracle Enterprise Manager for Oracle Database affecting supported versions 13.5 and 24.1 . A low-privileged attacker with network access via HTTP can easily exploit this flaw to compromise the product, potentially leading to a full ...

CVE-2026-101529

A vulnerability exists in the Data Guard Management component of Oracle Enterprise Manager for Oracle Database (affected versions 13.5 and 24.1 ). An attacker with low privileges and network access via HTTP can exploit this flaw to compromise the system. Successful exploitation may result in a co...

CVE-2026-101525

A vulnerability exists in the Configuration Management component of Oracle Enterprise Manager for Siebel (versions 13.5 and 24.1 ). This easily exploitable vulnerability allows a low-privileged attacker with network access via HTTP to compromise the system. Successful exploitation can lead to a c...

CVE-2026-101526

A vulnerability exists in the Configuration Management component of Oracle Enterprise Manager for Siebel (versions 13.5 and 24.1 ). A low-privileged attacker with network access via HTTP can easily exploit this flaw to compromise the product, potentially resulting in a full takeover of Oracle Ent...

CVE-2026-101524

A vulnerability exists in the Security Framework component of the Oracle Enterprise Manager Base Platform product, specifically affecting supported versions 13.5 and 24.1 . This difficult to exploit vulnerability allows an unauthenticated attacker with network access via HTTP to compromise the pl...

CVE-2026-101518

A vulnerability exists in the Agent Next Gen component of the Oracle Enterprise Manager Base Platform product, specifically affecting supported versions 13.5 and 24.1 . A low-privileged attacker with network access via HTTP can easily exploit this flaw to compromise the platform. Successful explo...

CVE-2026-101519

The Oracle EDI Gateway product within Oracle E-Business Suite (versions 12.2.3-12.2.15 ) is susceptible to a high-severity vulnerability in the All Miscellaneous EDI Issues component. A high-privileged attacker with network access via HTTP can exploit this issue to compromise the gateway, potenti...

CVE-2026-101520

A vulnerability exists in the NextGen Installer component of the Oracle Global Lifecycle Management NextGen OUI Framework product within Oracle Fusion Middleware. Affected supported versions include 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, 14.1.2.1.0, and 15.1.1.0.0 . An unauthenticated attacker with ...

CVE-2026-101512

A vulnerability exists in the RDBMS component of Oracle Database Server affecting versions 23.4.0-23.26.3 . A low-privileged attacker with network access via HTTP can easily exploit this flaw to compromise the RDBMS. Successful exploitation may lead to unauthorized access to critical data or comp...

CVE-2026-101515

The Oracle WebLogic Server product (component: Centralized Thirdparty Jars ) of Oracle Fusion Middleware is affected by a vulnerability in versions 12.2.1.4.0 , 14.1.1.0.0 , 14.1.2.0.0 , and 15.1.1.0.0 . This high-complexity vulnerability allows an unauthenticated attacker with network access via...

CVE-2026-101511

A vulnerability exists in the Metadata Plugin component of the Oracle Enterprise Manager Base Platform (Oracle Enterprise Manager) affecting versions 13.5 and 24.1 . A low-privileged attacker with network access via HTTP can exploit this flaw to compromise the platform, potentially leading to una...

CVE-2026-101506

A vulnerability exists in Oracle Trusted Answer Search affecting version 26.1 within the Application expert UI component. This easily exploitable flaw allows a low-privileged attacker with network access via HTTP to compromise the system. Successful exploitation can lead to unauthorized access to...

CVE-2026-101507

A vulnerability exists in the PLSQL package component of Oracle Trusted Answer Search version 26.1 . A low-privileged attacker with network access via HTTP can easily exploit this flaw to compromise the system. Successful exploitation may lead to unauthorized access to critical data or provide co...

CVE-2026-101508

A vulnerability exists in the Siebel CRM Integration product of Oracle Siebel CRM (component: EAI ), affecting supported versions 17.0-26.9 . An unauthenticated attacker with network access via HTTP can exploit this flaw to cause a hang or a frequently repeatable crash , resulting in a complete D...

CVE-2026-101504

A vulnerability exists in the Application expert UI component of Oracle Trusted Answer Search (version 26.1). A low-privileged attacker with network access via HTTP can exploit this flaw to compromise the system, although successful attacks require human interaction from a third party. The vulner...

CVE-2026-101505

A vulnerability exists in the Oracle Trusted Answer Search (specifically the Application expert UI component) in version 26.1 . A low-privileged attacker with network access via HTTP can exploit this issue to compromise the system, though successful exploitation requires human interaction . The v...

CVE-2026-101499

A vulnerability exists in the Oracle WebCenter Sites component of Oracle Fusion Middleware . The affected versions are 12.2.1.4.0 and 14.1.2.0.0 . An unauthenticated attacker with network access via HTTP can easily exploit this vulnerability to compromise the product, which may result in a comple...