CVE-2026-101499

A vulnerability exists in the Oracle WebCenter Sites component of Oracle Fusion Middleware . The affected versions are 12.2.1.4.0 and 14.1.2.0.0 . An unauthenticated attacker with network access via HTTP can easily exploit this vulnerability to compromise the product, which may result in a comple...

CVE-2026-101497

The Oracle Identity Manager product within Oracle Fusion Middleware is affected by a vulnerability in the Connector Framework component. Specifically, versions 12.2.1.4.0 and 14.1.2.1.0 are impacted. A low-privileged attacker with network access via HTTP can exploit this vulnerability to cause a ...

CVE-2026-101495

A vulnerability exists in the Siebel Approval Manager component of the Oracle Siebel CRM Development product (affected versions 17.0-26.9 ). This easily exploitable flaw allows an unauthenticated attacker with network access via HTTP to compromise the system, provided they can leverage human inte...

CVE-2026-101494

A vulnerability in the Core component of Oracle REST Data Services affects supported versions 24.2.0-26.2.2 . A low-privileged attacker with network access via HTTP can easily exploit this flaw to compromise the service. Successful exploitation may lead to unauthorized access to critical data or ...

CVE-2026-101492

A vulnerability exists in the Siebel CRM Integration product of Oracle Siebel CRM , specifically within the Open Integration component, affecting versions 25.12-26.9 . This difficult-to-exploit vulnerability allows an unauthenticated attacker with network access via HTTP to compromise the product...

CVE-2026-101491

The PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (specifically the Query component) is affected by CVE-2026-101491 in versions 8.61-8.63 . A low-privileged attacker with network access via HTTP can exploit this vulnerability to gain unauthorized read access to a subset of access...

CVE-2026-101488

Oracle PeopleSoft PeopleTools is vulnerable in the Business Interlink component within versions 8.61-8.63 . An unauthenticated attacker with network access via HTTP can exploit this vulnerability to gain unauthorized read access to a subset of accessible data and cause a partial denial of service...

CVE-2026-101489

A vulnerability exists in the Portal component of Oracle PeopleSoft Enterprise PeopleTools (affected versions 8.61-8.63 ). A low-privileged attacker with network access via HTTP can easily exploit this flaw to gain unauthorized read access to a subset of accessible data within the product. While ...

CVE-2026-101490

A vulnerability exists in the Fluid Core component of Oracle PeopleSoft Enterprise PeopleTools (affected versions 8.61-8.63 ). This easily exploitable flaw allows an unauthenticated attacker with network access via HTTP to compromise the system. Successful exploitation requires human interaction ...

CVE-2026-101486

A vulnerability exists in the Fluid Core component of Oracle PeopleSoft Enterprise PeopleTools (affected versions 8.61-8.63 ). This easily exploitable flaw allows a low privileged attacker with network access via HTTP to compromise the product. The attack requires human interaction from a user ot...

CVE-2026-101487

The PeopleSoft Enterprise PeopleTools product, specifically the Portal component in versions 8.61-8.63 , is vulnerable to a security flaw that allows a low-privileged attacker with network access via HTTP to compromise the system. Exploitation requires human interaction and can lead to a scope ch...

CVE-2026-101475

A vulnerability exists in the Logging component of the Primavera Unifier product by Oracle Construction and Engineering. Affected versions include 21.12.0-21.12.17 , 22.12.0-22.12.15 , 23.12.0-23.12.16 , 24.12.0-24.12.16 , and 25.12.0-25.12.9 . A low-privileged attacker with network access via HT...

CVE-2026-101476

A vulnerability exists in the Marketing component of Oracle Siebel CRM (Siebel Apps - Marketing) affecting supported versions 17.0-26.9 . An unauthenticated attacker with network access via HTTP can exploit this flaw, although successful execution requires human interaction from a user other than...

CVE-2026-101474

A vulnerability exists in the Oracle Agile Product Lifecycle Management for Process product (Oracle Supply Chain, component: Product Quality Management ) version 6.2.4 . A low-privileged attacker with network access via HTTP can exploit this high-complexity vulnerability to compromise the system....

CVE-2026-101473

A vulnerability exists in the Product Quality Management component of Oracle Agile Product Lifecycle Management for Process (Oracle Supply Chain) affecting version 6.2.4 . An unauthenticated attacker with network access via HTTP can exploit this difficult-to-exploit vulnerability to compromise th...

CVE-2026-101468

A vulnerability exists in the Siebel CRM Deployment product of Oracle Siebel CRM , specifically affecting the Cloud Gateway component in supported versions 17.0-26.9 . An unauthenticated attacker with network access via HTTP can easily exploit this flaw to compromise the deployment. Successful ex...

CVE-2026-101466

The Oracle EDI Gateway product within Oracle E-Business Suite (component: All Miscellaneous EDI Issues ) is affected by a vulnerability in versions 12.2.3-12.2.15 . A high privileged attacker with network access via HTTP can easily exploit this flaw to compromise the Oracle EDI Gateway, potential...

CVE-2026-101461

A vulnerability exists in the Server Infrastructure component of Oracle Siebel CRM Deployment (affected versions 17.0-26.9 ). An unauthenticated attacker with network access via HTTP can easily exploit this flaw to compromise the system. Successful exploitation may result in unauthorized access t...

CVE-2026-101463

A vulnerability exists in the UIF Open UI component of the Oracle Siebel CRM End User product (affected versions 17.0-26.9 ). An unauthenticated attacker with network access via HTTP can easily exploit this flaw to compromise the system. Successful exploitation may result in unauthorized access t...

CVE-2026-101459

The Siebel CRM Deployment product of Oracle Siebel CRM (specifically the Server Infrastructure component) is affected by a vulnerability in versions 17.0-26.9 . A low-privileged attacker with network access via HTTP can exploit this flaw to compromise the deployment. Successful exploitation may r...