CVE-2026-91428

The Siebel CRM End User product (component: Open UI ) in Oracle Siebel CRM, versions 17.0-26.9 , is vulnerable to an easily exploitable flaw. An unauthenticated attacker with network access via HTTP can compromise the system, though successful exploitation requires human interaction . This vulner...

CVE-2026-91422

A vulnerability exists in the Server Infrastructure component of Oracle Siebel CRM (Siebel CRM Deployment product), affecting versions 17.0-26.9 . A low privileged attacker with network access via HTTP could exploit this difficulty-to-exploit vulnerability to compromise the deployment. Successful...

CVE-2026-91424

A vulnerability exists in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure ) affecting supported versions 17.0-26.9 . A low privileged attacker with network access via HTTP can exploit this difficult-to-exploit vulnerability to compromise the deployment. Su...

CVE-2026-91421

A vulnerability exists in the Server Infrastructure component of Oracle Siebel CRM (specifically the Siebel CRM Deployment product) affecting supported versions 17.0-26.9 . An unauthenticated attacker with network access via HTTP can exploit this difficult-to-exploit vulnerability to cause a hang...

CVE-2026-91420

A vulnerability exists in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure ) affecting supported versions 17.0-26.9 . A low-privileged attacker with network access via HTTP can exploit this flaw to compromise the deployment. Successful exploitation may lead...

CVE-2026-91419

The Oracle HTTP Server product of Oracle Fusion Middleware (specifically the OSSL Module ) is affected by a vulnerability in version 12.2.1.4.0 . A low-privileged attacker with access to the infrastructure where the server executes can easily exploit this flaw to compromise and potentially take o...

CVE-2026-91414

A vulnerability exists in the Server Infrastructure component of the Oracle Siebel CRM Deployment product (versions 17.0-26.9 ). This high-complexity vulnerability allows an unauthenticated attacker with network access via HTTP to compromise the deployment, provided they can induce human interact...

CVE-2026-91412

A vulnerability exists in the Open UI component of Oracle Siebel CRM End User (supported versions 17.0-26.9 ). A low-privileged attacker with network access via HTTP can exploit this vulnerability to compromise the product, potentially resulting in unauthorized access to critical data or complete...

CVE-2026-91407

A vulnerability exists in the REST WebServices component of the Oracle Identity Manager product within Oracle Fusion Middleware. Affected versions include 12.2.1.4.0 and 14.1.2.1.0 . A low-privileged attacker with network access via HTTP can exploit this flaw to compromise the Oracle Identity Man...

CVE-2026-91405

A vulnerability exists in the Outside In PDF Export SDK component of the Oracle Outside In Technology product within Oracle Fusion Middleware . This issue affects version 8.5.8 . An unauthenticated attacker with network access via HTTP can exploit this difficult-to-execute vulnerability to compro...

CVE-2026-91406

A vulnerability exists in the Outside In PDF Export SDK component of the Oracle Outside In Technology product within Oracle Fusion Middleware (affected version 8.5.8 ). An unauthenticated attacker with network access via HTTP can exploit this high-complexity vulnerability to compromise or take ov...

CVE-2026-91399

A vulnerability exists in the Web Access component of Oracle Construction and Engineering Primavera P6 Enterprise Project Portfolio Management . Affected versions include 21.12.0.0-21.12.21.9, 22.12.0.0-22.12.21.4, 23.12.0-23.12.20, 24.12.0-24.12.16, and 25.12.0-25.12.8. A low-privileged attacker...

CVE-2026-91392

A vulnerability exists in the Open UI component of the Siebel CRM End User product within Oracle Siebel CRM . Affected versions include 17.0-26.9 . An unauthenticated attacker with network access via HTTP could exploit this difficult-to-exploit vulnerability to gain unauthorized update, insert, o...

CVE-2026-91393

A vulnerability exists in the Siebel CRM End User product of Oracle Siebel CRM (specifically the Open UI component) affecting supported versions 17.0-26.9 . This high-complexity vulnerability allows an unauthenticated attacker with network access via HTTP to compromise the system, though it requi...

CVE-2026-91391

A vulnerability exists in the Siebel CRM End User product of Oracle Siebel CRM within the Open UI component, affecting supported versions 17.0-26.9 . This difficult-to-exploit vulnerability allows an unauthenticated attacker with network access via HTTP to compromise the product. Successful explo...

CVE-2026-91390

A vulnerability exists in the Open UI component of Oracle Siebel CRM End User (supported versions 17.0-26.9 ). A low-privileged attacker with network access via HTTP can exploit this flaw to compromise the product, requiring human interaction from a separate user. Successful exploitation may resu...

CVE-2026-91389

A vulnerability exists in the Open UI component of Oracle Siebel CRM End User (supported versions 17.0-26.9). A low-privileged attacker with network access via HTTP can exploit this issue, provided they can elicit human interaction from another user. The impact includes unauthorized read , update...

CVE-2026-91387

A vulnerability exists in the Open UI component of Oracle Siebel CRM End User (supported versions 17.0-26.9 ). A low-privileged attacker with network access via HTTP can exploit this issue to gain unauthorized read, update, insert, or delete access to a subset of accessible data. No specific expl...

CVE-2026-91388

A vulnerability exists in the Siebel CRM End User product of Oracle Siebel CRM (specifically the Open UI component) affecting versions 17.0-26.9 . An unauthenticated attacker with network access via HTTP can exploit this difficult-to-exploit vulnerability to compromise the system. Successful expl...

CVE-2026-91383

A vulnerability exists in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards , specifically within the Monitoring and Diagnostics SEC component. Affected versions include 9.2.0.0-9.2.26.5 . This difficult-to-exploit vulnerability allows a high privileged attacker with network access ...