CVE-2026-91641

A vulnerability exists in the Security component of Oracle Essbase version 21.8.3.0.0 . A low-privileged attacker with network access via HTTP can easily exploit this flaw to compromise the system, potentially resulting in unauthorized read access to a subset of accessible data. Due to a scope ch...

CVE-2026-91640

A vulnerability exists in the Security component of Oracle Essbase version 21.8.3.0.0 . A low-privileged attacker with network access via HTTP can exploit this flaw to compromise the system, potentially resulting in unauthorized read access to a subset of accessible data. Due to a scope change , ...

CVE-2026-91639

A vulnerability exists in the Security component of Oracle Essbase version 21.8.3.0.0 . A low-privileged attacker with network access via HTTP can easily exploit this flaw to compromise the system. Successful exploitation can lead to unauthorized access to critical data or provide complete access...

CVE-2026-91636

A vulnerability exists in the Security component of Oracle Essbase version 21.8.3.0.0 . A low-privileged attacker with network access via HTTP can exploit this flaw to compromise the system. Successful exploitation may result in unauthorized access to critical data or full access to all data acce...

CVE-2026-91637

A critical vulnerability exists in the Security component of Oracle Essbase version 21.8.3.0.0 . A low-privileged attacker with network access via HTTP can easily exploit this flaw to achieve a takeover of the Oracle Essbase system. Due to a scope change , successful exploitation may significantl...

CVE-2026-91638

A vulnerability exists in the Security component of Oracle Essbase version 21.8.3.0.0 . A low-privileged attacker with network access via HTTP can easily exploit this flaw to compromise the system, potentially leading to a full takeover of Oracle Essbase . Due to a scope change , attacks may sign...

CVE-2026-91632

A vulnerability exists in the Security component of Oracle Essbase (version 21.8.3.0.0 ). A low-privileged attacker with network access via HTTP can exploit this flaw to compromise the system. Successful exploitation may lead to unauthorized access to critical data or complete access to all acces...

CVE-2026-91631

A vulnerability in the Security component of Oracle Essbase version 21.8.3.0.0 allows a low-privileged attacker with network access via HTTP to compromise the system. Successful exploitation can result in unauthorized read access to a subset of accessible data within Oracle Essbase, with a potent...

CVE-2026-91630

A vulnerability exists in the Security component of Oracle Essbase version 21.8.3.0.0 . A high-privileged attacker with network access via HTTP can exploit this flaw to compromise the system. Successful exploitation may lead to unauthorized access to critical data or complete access to all access...

CVE-2026-91625

The Oracle Agile Product Lifecycle Management for Process product (specifically the Product Quality Management component) is vulnerable in version 6.2.4 . An unauthenticated attacker with network access via HTTP can easily exploit this vulnerability to compromise the system. Successful exploitati...

CVE-2026-91622

A vulnerability exists in the Oracle Agile Product Lifecycle Management for Process product (Oracle Supply Chain, component: Product Quality Management ) affecting version 6.2.4 . This easily exploitable flaw allows an unauthenticated attacker with network access via HTTP to compromise the system...

CVE-2026-91624

The Oracle Agile Product Lifecycle Management for Process product (Oracle Supply Chain), specifically the Product Quality Management component in version 6.2.4 , contains a critical vulnerability. An unauthenticated attacker with network access via HTTP can easily exploit this flaw to compromise ...

CVE-2026-91623

A vulnerability exists in the Product Quality Management component of Oracle Agile Product Lifecycle Management for Process (specifically version 6.2.4 ). This difficult to exploit vulnerability allows an unauthenticated attacker with network access via HTTP to compromise the system. Successful e...

CVE-2026-91616

A vulnerability exists in the Remote Diagnostic Agent component of Oracle Middleware Common Libraries and Tools within Oracle Fusion Middleware (versions 12.2.1.4.0 and 14.1.1.0.0 ). An unauthenticated attacker with network access via HTTP can exploit this difficulty-to-exploit vulnerability to g...

CVE-2026-91609

A vulnerability exists in the Oracle REST Data Services (component: Graph QL ) affecting supported versions 24.2.0-26.2.1 . This easily exploitable flaw allows a low-privileged attacker with network access via HTTP to compromise the service. Successful exploitation can lead to unauthorized access...

CVE-2026-91610

A vulnerability exists in Oracle REST Data Services (component: General) affecting supported versions 24.2.0-26.2.2 . A low-privileged attacker with network access via HTTP can easily exploit this flaw to compromise the service. Successful exploitation may lead to a complete takeover of Oracle RE...

CVE-2026-91607

The Oracle Business Intelligence Enterprise Edition product within Oracle Analytics is affected by a vulnerability in the Analytics Server component. This issue impacts versions 8.2.0.0.0 and 26.01.0.0.0 . A low-privileged attacker with network access via HTTP can easily exploit this vulnerabilit...

CVE-2026-91604

A vulnerability exists in the Product Quality Management component of Oracle Agile Product Lifecycle Management for Process (version 6.2.4) within the Oracle Supply Chain suite. A low privileged attacker with network access via HTTP can exploit this difficulty-to-exploit flaw to compromise the sy...

CVE-2026-91608

A vulnerability exists in the Web Server component of the Oracle BI Publisher product within Oracle Analytics. Affected versions include 8.2.0.0.0 , 12.2.1.4.0 , and 26.01.0.0.0 . An unauthenticated attacker with network access via HTTP can easily exploit this flaw to compromise the product, pote...

CVE-2026-91598

The Oracle Business Intelligence Enterprise Edition product (component: Majel Mobile Service ) is vulnerable in versions 8.2.0.0.0 and 26.01.0.0.0 . A low-privileged attacker with network access via HTTP can easily exploit this vulnerability to compromise the system. Successful exploitation resul...