CVE-2026-91504

A vulnerability exists in the Content Portal Suite component of the Oracle WebCenter Content product within Oracle Fusion Middleware . Affected versions include 12.2.1.4.0 and 14.1.2.0.0 . A low privileged attacker with network access via HTTP can exploit this difficulty-to-exploit vulnerability ...

CVE-2026-91497

Oracle PeopleSoft Enterprise PeopleTools (component: Updates Environment Mgmt ) versions 8.61-8.63 are affected by a vulnerability that allows an unauthenticated attacker with network access via HTTP to compromise the product. Successful exploitation can result in unauthorized update, insert, or ...

CVE-2026-91495

A vulnerability exists in the Content Server component of Oracle WebCenter Content (part of Oracle Fusion Middleware). Affected versions include 12.2.1.4.0 and 14.1.2.0.0 . An unauthenticated attacker with network access via HTTP can easily exploit this flaw to compromise the product, potentially...

CVE-2026-91496

A vulnerability exists in the Workflow Notification Mailer component of the Oracle E-Business Suite Workflow product (versions 12.2.3-12.2.15 ). A low-privileged attacker with network access via HTTP can exploit this difficult-to-exploit vulnerability to compromise the Workflow system. Successful...

CVE-2026-91492

A vulnerability exists in the Oracle Identity Manager Connector product within Oracle Fusion Middleware (specifically the SAP ERP+ component). The issue affects supported versions 12.2.1.4.0 and 14.1.2.1.0 . It is a difficult to exploit vulnerability that allows an unauthenticated attacker with n...

CVE-2026-91481

A vulnerability exists in the Supplier Registration component of Oracle PeopleSoft Enterprise SCM Purchasing (version 9.2 ). A low-privileged attacker with network access via HTTP can exploit this vulnerability to compromise the product, provided they can obtain human interaction from another per...

CVE-2026-91480

A vulnerability exists in the Strategic Sourcing component of Oracle PeopleSoft Enterprise SCM (version 9.2 ). A low-privileged attacker with network access via HTTP can exploit this issue to compromise the product. Successful exploitation may lead to unauthorized access to critical data or compl...

CVE-2026-91482

The PeopleSoft Enterprise SCM Strategic Sourcing product (version 9.2 ) is vulnerable in the Bidder Registration component. A low-privileged attacker with network access via HTTP can exploit this vulnerability to compromise the system. Successful exploitation may result in unauthorized access to ...

CVE-2026-91478

Oracle PeopleSoft Enterprise SCM Strategic Sourcing version 9.2 is vulnerable to a high-severity security flaw. A low-privileged attacker with network access via HTTP can exploit this vulnerability to compromise the Strategic Sourcing component, potentially leading to a full takeover of the produ...

CVE-2026-91476

The PeopleSoft Enterprise FIN Common Objects Brazil product (component: eProcurement ) is affected by a vulnerability in version 9.1 . An unauthenticated attacker with network access via HTTP can exploit this flaw to gain unauthorized read access to a subset of the product's accessible data. The ...

CVE-2026-91471

A vulnerability exists in the BAM Framework component of Oracle PeopleSoft Enterprise CC Common Application Objects version 9.2 . An unauthenticated attacker with network access via HTTP can exploit this high-complexity vulnerability to gain unauthorized update, insert, or delete access to some a...

CVE-2026-91473

A vulnerability exists in the Web Listener component of the Oracle HTTP Server product within Oracle Fusion Middleware (affected version 12.2.1.4.0 ). A low-privileged attacker with logon access to the underlying infrastructure can easily exploit this flaw to compromise the Oracle HTTP Server, po...

CVE-2026-91468

The PeopleSoft Enterprise PeopleTools product by Oracle PeopleSoft (specifically the QAS component) is vulnerable in supported versions 8.61-8.63 . An unauthenticated attacker with network access via HTTP can easily exploit this vulnerability to compromise the system. Successful exploitation may ...

CVE-2026-91466

A vulnerability exists in the Asset Management component of Oracle PeopleSoft Enterprise FIN Common Objects Argentina (version 9.1). A high privileged attacker with network access via HTTP can exploit this flaw, though the attack requires human interaction from another person. Successful exploita...

CVE-2026-91455

A vulnerability exists in the JD Edwards EnterpriseOne Tools product from Oracle JD Edwards , specifically affecting the E1 Dev Platform Tech - UNIX component in versions 9.2.0.0-9.2.26.5 . An unauthenticated attacker with network access via HTTP can exploit this issue, though it requires human i...

CVE-2026-91453

A vulnerability exists in the Lightweight HTTP Server component of Oracle Java SE , Oracle GraalVM for JDK , and Oracle GraalVM Enterprise Edition . Affected versions include Oracle Java SE 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, and 27; Oracle GraalVM for JDK 17.0.20.1 and ...

CVE-2026-91453

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Lightweight HTTP Server. Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM fo...

CVE-2026-91453

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Lightweight HTTP Server. Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM fo...

CVE-2026-91450

A vulnerability exists in the Server Infrastructure component of Oracle Siebel CRM (Siebel CRM Deployment) in supported versions 17.0-26.9 . A remote, unauthenticated attacker with network access via HTTP can exploit this difficult-to-exploit vulnerability to compromise the deployment. Successful...

CVE-2026-91449

A vulnerability exists in the Server Infrastructure component of Oracle Siebel CRM Deployment (affected versions 17.0-26.9 ). This high-complexity vulnerability allows an unauthenticated attacker with network access via HTTP to compromise the deployment. Successful exploitation can lead to unauth...