CVE-2026-91350

A vulnerability exists in the Oracle Outside In Technology product of Oracle Fusion Middleware , specifically within the Outside In Clean Content SDK component in version 8.5.8 . An unauthenticated attacker with network access via HTTP can exploit this vulnerability to cause a hang or a frequentl...

CVE-2026-91349

A vulnerability exists in the Outside In Clean Content SDK component of the Oracle Outside In Technology product within Oracle Fusion Middleware (affected version 8.5.8 ). An unauthenticated attacker with network access via HTTP can easily exploit this flaw to cause a hang or a frequently repeata...

CVE-2026-91347

The iSupport product within Oracle E-Business Suite (specifically the Service Requests component) is vulnerable in versions 12.2.3-12.2.15 . A low-privileged attacker with network access via HTTP can exploit this vulnerability to compromise iSupport, potentially leading to unauthorized creation, ...

CVE-2026-91345

A vulnerability exists in the Outside In Clean Content SDK component of the Oracle Outside In Technology product within Oracle Fusion Middleware , specifically affecting version 8.5.8 . An unauthenticated attacker with network access via HTTP can easily exploit this flaw to cause a hang or a freq...

CVE-2026-91344

The Oracle Outside In Technology product, specifically the Outside In Clean Content SDK component within Oracle Fusion Middleware, is vulnerable in version 8.5.8 . An unauthenticated attacker with network access via HTTP can exploit this vulnerability to cause a hang or a frequently repeatable cr...

CVE-2026-91346

A vulnerability exists in the Outside In Clean Content SDK component of the Oracle Outside In Technology product (specifically version 8.5.8 ). An unauthenticated attacker with network access via HTTP can exploit this flaw, though it requires human interaction from a user other than the attacker....

CVE-2026-91342

The Outside In Clean Content SDK component of the Oracle Fusion Middleware product (version 8.5.8 ) is vulnerable to a security flaw. An unauthenticated attacker with network access via HTTP can exploit this vulnerability to compromise Oracle Outside In Technology . While the attack requires huma...

CVE-2026-91341

A critical vulnerability exists in the Outside In Clean Content SDK component of Oracle Fusion Middleware (specifically version 8.5.8 ). An unauthenticated attacker with network access via HTTP can exploit this flaw to gain unauthorized access to critical data, allowing for the creation, deletion...

CVE-2026-91343

A vulnerability exists in the Outside In Clean Content SDK component of the Oracle Outside In Technology product within Oracle Fusion Middleware (affected version 8.5.8 ). An unauthenticated attacker with network access via HTTP can exploit this vulnerability to compromise the technology, potenti...

CVE-2026-91338

The iSupport product of Oracle E-Business Suite (versions 12.2.3-12.2.15) contains a vulnerability in its Internal operations component. This flaw allows a low-privileged attacker with network access via HTTP to compromise iSupport. Successful exploitation can lead to unauthorized creation, delet...

CVE-2026-91340

A vulnerability exists in the Outside In Clean Content SDK component of Oracle Fusion Middleware (specifically affecting version 8.5.8 ). A low-privileged attacker with network access via HTTP can exploit this flaw to compromise the Oracle Outside In Technology product, potentially leading to a f...

CVE-2026-91339

A vulnerability exists in the iSupport product of Oracle E-Business Suite (specifically the Service Requests component) affecting supported versions 12.2.3-12.2.15 . An attacker with low privileges and network access via HTTP can easily exploit this vulnerability to compromise iSupport. Successfu...

CVE-2026-91325

A vulnerability exists in the Installation Security component of the JD Edwards EnterpriseOne Tools product by Oracle JD Edwards, affecting versions 9.2.0.0-9.2.26.5 . An unauthenticated attacker with network access via HTTP can easily exploit this flaw to compromise the tools. Successful exploit...

CVE-2026-91323

A vulnerability exists in the Core component of the Oracle WebLogic Server product within Oracle Fusion Middleware. Affected versions include 12.2.1.4.0 , 14.1.1.0.0 , 14.1.2.0.0 , and 15.1.1.0.0 . An unauthenticated attacker with network access via HTTP can easily exploit this vulnerability to c...

CVE-2026-91321

A vulnerability exists in the iProcurement product of Oracle E-Business Suite within the Requisition Management component. Affected versions include 12.2.3-12.2.15 . A low-privileged attacker with network access via HTTP can exploit this difficult-to-exploit vulnerability to compromise the iProcu...

CVE-2026-91319

A vulnerability exists in the Java Business Objects component of the Oracle JDeveloper product within Oracle Fusion Middleware, specifically affecting versions 12.2.1.4.0 and 14.1.2.0.0 . This difficult-to-exploit flaw allows an unauthenticated attacker with network access via HTTP to compromise ...

CVE-2026-91318

A vulnerability exists in the Security Framework component of the Oracle JDeveloper product within Oracle Fusion Middleware (specifically versions 12.2.1.4.0 and 14.1.2.0.0 ). An unauthenticated attacker with network access via HTTP can compromise the system, though the attack requires human inte...

CVE-2026-91313

The JD Edwards EnterpriseOne Tools product by Oracle JD Edwards (component: Installation Security ) is affected by CVE-2026-91313 in versions 9.2.0.0-9.2.26.4 . A difficult-to-exploit vulnerability allows an unauthenticated attacker with network access via HTTP to compromise the tools, potentiall...

CVE-2026-91303

A vulnerability exists in the Installation Security component of JD Edwards EnterpriseOne Tools (versions 9.2.0.0-9.2.26.5) by Oracle JD Edwards. An unauthenticated attacker with network access via HTTP can exploit this flaw to compromise the product, resulting in a potential takeover of the JD E...

CVE-2026-91298

A vulnerability exists in the Web Runtime SEC component of Oracle JD Edwards EnterpriseOne Tools (affected versions 9.2.0.0-9.2.26.5 ). A low-privileged attacker with HTTP network access can exploit this flaw to compromise the tools, requiring human interaction from another user. The attack may h...