CVE-2026-91515

A vulnerability exists in the Oracle Agile Product Lifecycle Management for Process product (component: Product Quality Management ) version 6.2.4 . A low privileged attacker with network access via HTTP can exploit this difficult-to-exploit vulnerability to compromise the system, potentially lea...

CVE-2026-91512

The Oracle Agile Product Lifecycle Management for Process product (part of Oracle Supply Chain), specifically the Product Quality Management component in version 6.2.4 , is vulnerable to a high-severity flaw. A high privileged attacker with network access via HTTP can exploit this vulnerability t...

CVE-2026-91514

A vulnerability exists in the Web Server component of the Oracle BI Publisher product within Oracle Analytics. Affected versions include 8.2.0.0.0 , 12.2.1.4.0 , and 26.01.0.0.0 . A low-privileged attacker with network access via HTTP can exploit this vulnerability to compromise the product, pote...

CVE-2026-91506

A vulnerability exists in the Workflow product of Oracle E-Business Suite , specifically within the Workflow Notification Mailer component. Affected versions include 12.2.3-12.2.15 . An unauthenticated attacker with network access via HTTP can exploit this difficult-to-exploit vulnerability to co...

CVE-2026-91511

A vulnerability exists in the Internal Operations component of the Oracle Purchasing product within Oracle E-Business Suite versions 12.2.3-12.2.15 . A low-privileged attacker with network access via HTTP can exploit this difficult-to-exploit vulnerability to compromise Oracle Purchasing. Due to ...

CVE-2026-91504

A vulnerability exists in the Content Portal Suite component of the Oracle WebCenter Content product within Oracle Fusion Middleware . Affected versions include 12.2.1.4.0 and 14.1.2.0.0 . A low privileged attacker with network access via HTTP can exploit this difficulty-to-exploit vulnerability ...

CVE-2026-91497

Oracle PeopleSoft Enterprise PeopleTools (component: Updates Environment Mgmt ) versions 8.61-8.63 are affected by a vulnerability that allows an unauthenticated attacker with network access via HTTP to compromise the product. Successful exploitation can result in unauthorized update, insert, or ...

CVE-2026-91495

A vulnerability exists in the Content Server component of Oracle WebCenter Content (part of Oracle Fusion Middleware). Affected versions include 12.2.1.4.0 and 14.1.2.0.0 . An unauthenticated attacker with network access via HTTP can easily exploit this flaw to compromise the product, potentially...

CVE-2026-91496

A vulnerability exists in the Workflow Notification Mailer component of the Oracle E-Business Suite Workflow product (versions 12.2.3-12.2.15 ). A low-privileged attacker with network access via HTTP can exploit this difficult-to-exploit vulnerability to compromise the Workflow system. Successful...

CVE-2026-91492

A vulnerability exists in the Oracle Identity Manager Connector product within Oracle Fusion Middleware (specifically the SAP ERP+ component). The issue affects supported versions 12.2.1.4.0 and 14.1.2.1.0 . It is a difficult to exploit vulnerability that allows an unauthenticated attacker with n...

CVE-2026-91481

A vulnerability exists in the Supplier Registration component of Oracle PeopleSoft Enterprise SCM Purchasing (version 9.2 ). A low-privileged attacker with network access via HTTP can exploit this vulnerability to compromise the product, provided they can obtain human interaction from another per...

CVE-2026-91480

A vulnerability exists in the Strategic Sourcing component of Oracle PeopleSoft Enterprise SCM (version 9.2 ). A low-privileged attacker with network access via HTTP can exploit this issue to compromise the product. Successful exploitation may lead to unauthorized access to critical data or compl...

CVE-2026-91482

The PeopleSoft Enterprise SCM Strategic Sourcing product (version 9.2 ) is vulnerable in the Bidder Registration component. A low-privileged attacker with network access via HTTP can exploit this vulnerability to compromise the system. Successful exploitation may result in unauthorized access to ...

CVE-2026-91478

Oracle PeopleSoft Enterprise SCM Strategic Sourcing version 9.2 is vulnerable to a high-severity security flaw. A low-privileged attacker with network access via HTTP can exploit this vulnerability to compromise the Strategic Sourcing component, potentially leading to a full takeover of the produ...

CVE-2026-91476

The PeopleSoft Enterprise FIN Common Objects Brazil product (component: eProcurement ) is affected by a vulnerability in version 9.1 . An unauthenticated attacker with network access via HTTP can exploit this flaw to gain unauthorized read access to a subset of the product's accessible data. The ...

CVE-2026-91471

A vulnerability exists in the BAM Framework component of Oracle PeopleSoft Enterprise CC Common Application Objects version 9.2 . An unauthenticated attacker with network access via HTTP can exploit this high-complexity vulnerability to gain unauthorized update, insert, or delete access to some a...

CVE-2026-91473

A vulnerability exists in the Web Listener component of the Oracle HTTP Server product within Oracle Fusion Middleware (affected version 12.2.1.4.0 ). A low-privileged attacker with logon access to the underlying infrastructure can easily exploit this flaw to compromise the Oracle HTTP Server, po...

CVE-2026-91468

The PeopleSoft Enterprise PeopleTools product by Oracle PeopleSoft (specifically the QAS component) is vulnerable in supported versions 8.61-8.63 . An unauthenticated attacker with network access via HTTP can easily exploit this vulnerability to compromise the system. Successful exploitation may ...

CVE-2026-91466

A vulnerability exists in the Asset Management component of Oracle PeopleSoft Enterprise FIN Common Objects Argentina (version 9.1). A high privileged attacker with network access via HTTP can exploit this flaw, though the attack requires human interaction from another person. Successful exploita...

CVE-2026-91455

A vulnerability exists in the JD Edwards EnterpriseOne Tools product from Oracle JD Edwards , specifically affecting the E1 Dev Platform Tech - UNIX component in versions 9.2.0.0-9.2.26.5 . An unauthenticated attacker with network access via HTTP can exploit this issue, though it requires human i...