CVE-2026-91414

A vulnerability exists in the Server Infrastructure component of the Oracle Siebel CRM Deployment product (versions 17.0-26.9 ). This high-complexity vulnerability allows an unauthenticated attacker with network access via HTTP to compromise the deployment, provided they can induce human interact...

CVE-2026-91412

A vulnerability exists in the Open UI component of Oracle Siebel CRM End User (supported versions 17.0-26.9 ). A low-privileged attacker with network access via HTTP can exploit this vulnerability to compromise the product, potentially resulting in unauthorized access to critical data or complete...

CVE-2026-91407

A vulnerability exists in the REST WebServices component of the Oracle Identity Manager product within Oracle Fusion Middleware. Affected versions include 12.2.1.4.0 and 14.1.2.1.0 . A low-privileged attacker with network access via HTTP can exploit this flaw to compromise the Oracle Identity Man...

CVE-2026-91405

A vulnerability exists in the Outside In PDF Export SDK component of the Oracle Outside In Technology product within Oracle Fusion Middleware . This issue affects version 8.5.8 . An unauthenticated attacker with network access via HTTP can exploit this difficult-to-execute vulnerability to compro...

CVE-2026-91406

A vulnerability exists in the Outside In PDF Export SDK component of the Oracle Outside In Technology product within Oracle Fusion Middleware (affected version 8.5.8 ). An unauthenticated attacker with network access via HTTP can exploit this high-complexity vulnerability to compromise or take ov...

CVE-2026-91399

A vulnerability exists in the Web Access component of Oracle Construction and Engineering Primavera P6 Enterprise Project Portfolio Management . Affected versions include 21.12.0.0-21.12.21.9, 22.12.0.0-22.12.21.4, 23.12.0-23.12.20, 24.12.0-24.12.16, and 25.12.0-25.12.8. A low-privileged attacker...

CVE-2026-91392

A vulnerability exists in the Open UI component of the Siebel CRM End User product within Oracle Siebel CRM . Affected versions include 17.0-26.9 . An unauthenticated attacker with network access via HTTP could exploit this difficult-to-exploit vulnerability to gain unauthorized update, insert, o...

CVE-2026-91393

A vulnerability exists in the Siebel CRM End User product of Oracle Siebel CRM (specifically the Open UI component) affecting supported versions 17.0-26.9 . This high-complexity vulnerability allows an unauthenticated attacker with network access via HTTP to compromise the system, though it requi...

CVE-2026-91390

A vulnerability exists in the Open UI component of Oracle Siebel CRM End User (supported versions 17.0-26.9 ). A low-privileged attacker with network access via HTTP can exploit this flaw to compromise the product, requiring human interaction from a separate user. Successful exploitation may resu...

CVE-2026-91389

A vulnerability exists in the Open UI component of Oracle Siebel CRM End User (supported versions 17.0-26.9). A low-privileged attacker with network access via HTTP can exploit this issue, provided they can elicit human interaction from another user. The impact includes unauthorized read , update...

CVE-2026-91391

A vulnerability exists in the Siebel CRM End User product of Oracle Siebel CRM within the Open UI component, affecting supported versions 17.0-26.9 . This difficult-to-exploit vulnerability allows an unauthenticated attacker with network access via HTTP to compromise the product. Successful explo...

CVE-2026-91387

A vulnerability exists in the Open UI component of Oracle Siebel CRM End User (supported versions 17.0-26.9 ). A low-privileged attacker with network access via HTTP can exploit this issue to gain unauthorized read, update, insert, or delete access to a subset of accessible data. No specific expl...

CVE-2026-91388

A vulnerability exists in the Siebel CRM End User product of Oracle Siebel CRM (specifically the Open UI component) affecting versions 17.0-26.9 . An unauthenticated attacker with network access via HTTP can exploit this difficult-to-exploit vulnerability to compromise the system. Successful expl...

CVE-2026-91383

A vulnerability exists in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards , specifically within the Monitoring and Diagnostics SEC component. Affected versions include 9.2.0.0-9.2.26.5 . This difficult-to-exploit vulnerability allows a high privileged attacker with network access ...

CVE-2026-91378

A vulnerability exists in the Siebel CRM Integration product of Oracle Siebel CRM , specifically within the Open Integration component, affecting versions 25.12-26.9 . An unauthenticated attacker with network access via HTTP can exploit this flaw to compromise the integration, though the attack r...

CVE-2026-91377

A vulnerability exists in the Siebel CRM Integration product of Oracle Siebel CRM , specifically affecting the Open Integration component in versions 25.12-26.9 . An unauthenticated attacker with network access via HTTP can exploit this vulnerability to compromise the system. Successful exploitat...

CVE-2026-91376

A vulnerability in the Web Access component of Oracle Construction and Engineering Primavera P6 Enterprise Project Portfolio Management allows a low-privileged attacker with network access via HTTP to compromise the system. The vulnerability is difficult to exploit and requires human interaction ...

CVE-2026-91370

A vulnerability exists in the Siebel Cloud Manager component of Oracle Siebel CRM Cloud Applications (affected versions 22.3-26.9 ). An unauthenticated attacker with network access via HTTP can exploit this flaw to compromise the application, potentially resulting in unauthorized read access to a...

CVE-2026-91371

A vulnerability exists in the Siebel Cloud Manager component of Oracle Siebel CRM Cloud Applications (affected versions 22.3-26.9 ). An unauthenticated attacker with network access via HTTP can exploit this flaw to compromise the application, potentially resulting in unauthorized read access to a...

CVE-2026-91369

A vulnerability exists in the Siebel Cloud Manager component of the Siebel CRM Cloud Applications product (versions 22.3-26.9 ). A low-privileged attacker with network access via HTTP can exploit this difficult-to-exploit vulnerability to compromise the applications. Successful exploitation may r...