CVE-2026-101418

Oracle PeopleSoft PeopleTools is affected by a vulnerability in the Report Distribution component within versions 8.61-8.63 . A low-privileged attacker with network access via HTTP can exploit this flaw to compromise the system, potentially leading to unauthorized access to critical data or all a...

CVE-2026-101415

A vulnerability exists in the Analytic Server component of Oracle PeopleSoft Enterprise PeopleTools (affected versions 8.61-8.63 ). This high-complexity vulnerability allows a low-privileged attacker with network access via HTTP to compromise the product, potentially resulting in a partial denial...

CVE-2026-101413

A vulnerability exists in the Analytic Server component of Oracle PeopleSoft Enterprise PeopleTools (versions 8.61-8.63). A low-privileged attacker with network access via HTTP can exploit this difficult-to-exploit vulnerability to cause a hang or a frequently repeatable crash, resulting in a com...

CVE-2026-101411

A vulnerability exists in the Business Interlink component of Oracle PeopleSoft Enterprise PeopleTools, specifically affecting supported versions 8.61-8.63 . An unauthenticated attacker with network access via HTTP can exploit this difficult-to-exploit vulnerability to compromise the system. Succ...

CVE-2026-101409

A vulnerability exists in the Report Distribution component of Oracle PeopleSoft 's PeopleSoft Enterprise PeopleTools product, affecting supported versions 8.61-8.63 . This easily exploitable flaw allows an unauthenticated attacker with network access via HTTP to compromise the system. Successful...

CVE-2026-101410

A vulnerability exists in the Business Interlink component of Oracle PeopleSoft Enterprise PeopleTools affecting versions 8.61-8.63 . A low-privileged attacker with network access via HTTP can exploit this high-complexity vulnerability to compromise the system, potentially resulting in a complete...

CVE-2026-101407

Oracle PeopleSoft PeopleTools product (component: Updates Change Assistant ) is affected by CVE-2026-101407 in versions 8.61-8.63 . A high-privileged attacker with network access via HTTP can exploit this vulnerability to gain unauthorized access to critical data or all accessible data within the...

CVE-2026-101408

A vulnerability exists in the Email Marketing component of Oracle Siebel CRM (Siebel Apps - Marketing) affecting versions 17.0-26.9 . This easily exploitable vulnerability allows an unauthenticated attacker with network access via HTTP to compromise the product. Successful exploitation requires h...

CVE-2026-101406

A vulnerability exists in the Marketing component of Oracle Siebel CRM (Siebel Apps - Marketing) affecting supported versions 17.0-26.9 . An unauthenticated attacker with network access via HTTP can exploit this difficult-to-exploit vulnerability to gain unauthorized read access to a subset of ac...

CVE-2026-101402

A vulnerability exists in the Email Marketing component of the Oracle Siebel CRM (Siebel Apps - Marketing) product, affecting supported versions 17.0-26.9 . A difficult-to-exploit vulnerability allows an unauthenticated attacker with network access via HTTP to compromise the application. Successf...

CVE-2026-101403

A vulnerability exists in the Siebel Apps - Marketing product of Oracle Siebel CRM within the Email Marketing component (affected versions 17.0-26.9 ). An unauthenticated attacker with network access via HTTP can exploit this difficult-to-exploit vulnerability, though it requires human interactio...

CVE-2026-101398

A vulnerability exists in the Oracle Capacity product of Oracle E-Business Suite (component: Internal Operations ) affecting supported versions 12.2.3-12.2.15 . An attacker with low privileges and network access via HTTP can easily exploit this flaw to compromise Oracle Capacity. Impact includes ...

CVE-2026-101397

A vulnerability exists in the Marketing component of Oracle Siebel CRM (Siebel Apps - Marketing) affecting supported versions 17.0-26.9 . A high-privileged attacker with network access via HTTP can exploit this difficult-to-exploit vulnerability to compromise the product, potentially resulting in...

CVE-2026-101395

A vulnerability exists in the Marketing component of Oracle Siebel CRM (Siebel Apps - Marketing) in supported versions 17.0-26.9 . An unauthenticated attacker with network access via HTTP can compromise the system, provided they can trigger human interaction from a user. The impact includes unaut...

CVE-2026-101393

A vulnerability exists in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing ) affecting supported versions 17.0-26.9 . An unauthenticated attacker with network access via HTTP can exploit this vulnerability to compromise the product, provided there is human interactio...

CVE-2026-101394

The Siebel Apps - Marketing component of Oracle Siebel CRM (versions 17.0-26.9 ) is vulnerable to a flaw that allows an unauthenticated attacker with network access via HTTP to compromise the system. Successful exploitation can lead to unauthorized update, insert, or delete access to certain acce...

CVE-2026-101389

A vulnerability exists in the Business Interlink component of Oracle PeopleSoft (PeopleTools) affecting versions 8.61-8.63 . An unauthenticated attacker with network access via HTTP can exploit this difficulty-to-exploit flaw to cause a hang or a frequently repeatable crash, leading to a complete...

CVE-2026-101391

The Siebel Apps - Marketing component of Oracle Siebel CRM (versions 17.0-26.9 ) is vulnerable to a flaw that allows an unauthenticated attacker with network access via HTTP to compromise the product. Exploitation requires human interaction from a user other than the attacker and may result in a ...

CVE-2026-101390

A vulnerability exists in the Business Interlink component of Oracle PeopleSoft (PeopleTools), affecting supported versions 8.61-8.63 . A difficult-to-exploit flaw allows an unauthenticated attacker with network access via HTTP to compromise the system. Successful exploitation can lead to a compl...

CVE-2026-101388

A vulnerability exists in the Portal component of Oracle PeopleSoft Enterprise PeopleTools (affected versions 8.61-8.63 ). A low-privileged attacker with network access via HTTP can exploit this flaw to compromise the system. Successful exploitation may lead to unauthorized access to critical dat...