CVE-2026-91339

A vulnerability exists in the iSupport product of Oracle E-Business Suite (specifically the Service Requests component) affecting supported versions 12.2.3-12.2.15 . An attacker with low privileges and network access via HTTP can easily exploit this vulnerability to compromise iSupport. Successfu...

CVE-2026-91325

A vulnerability exists in the Installation Security component of the JD Edwards EnterpriseOne Tools product by Oracle JD Edwards, affecting versions 9.2.0.0-9.2.26.5 . An unauthenticated attacker with network access via HTTP can easily exploit this flaw to compromise the tools. Successful exploit...

CVE-2026-91323

A vulnerability exists in the Core component of the Oracle WebLogic Server product within Oracle Fusion Middleware. Affected versions include 12.2.1.4.0 , 14.1.1.0.0 , 14.1.2.0.0 , and 15.1.1.0.0 . An unauthenticated attacker with network access via HTTP can easily exploit this vulnerability to c...

CVE-2026-91321

A vulnerability exists in the iProcurement product of Oracle E-Business Suite within the Requisition Management component. Affected versions include 12.2.3-12.2.15 . A low-privileged attacker with network access via HTTP can exploit this difficult-to-exploit vulnerability to compromise the iProcu...

CVE-2026-91319

A vulnerability exists in the Java Business Objects component of the Oracle JDeveloper product within Oracle Fusion Middleware, specifically affecting versions 12.2.1.4.0 and 14.1.2.0.0 . This difficult-to-exploit flaw allows an unauthenticated attacker with network access via HTTP to compromise ...

CVE-2026-91318

A vulnerability exists in the Security Framework component of the Oracle JDeveloper product within Oracle Fusion Middleware (specifically versions 12.2.1.4.0 and 14.1.2.0.0 ). An unauthenticated attacker with network access via HTTP can compromise the system, though the attack requires human inte...

CVE-2026-91313

The JD Edwards EnterpriseOne Tools product by Oracle JD Edwards (component: Installation Security ) is affected by CVE-2026-91313 in versions 9.2.0.0-9.2.26.4 . A difficult-to-exploit vulnerability allows an unauthenticated attacker with network access via HTTP to compromise the tools, potentiall...

CVE-2026-91303

A vulnerability exists in the Installation Security component of JD Edwards EnterpriseOne Tools (versions 9.2.0.0-9.2.26.5) by Oracle JD Edwards. An unauthenticated attacker with network access via HTTP can exploit this flaw to compromise the product, resulting in a potential takeover of the JD E...

CVE-2026-91298

A vulnerability exists in the Web Runtime SEC component of Oracle JD Edwards EnterpriseOne Tools (affected versions 9.2.0.0-9.2.26.5 ). A low-privileged attacker with HTTP network access can exploit this flaw to compromise the tools, requiring human interaction from another user. The attack may h...

CVE-2026-91299

A vulnerability exists in the JD Edwards EnterpriseOne Orchestrator product by Oracle JD Edwards, specifically affecting the E1 IOT Orchestrator Security component in versions 9.2.0.0-9.2.26.5 . An unauthenticated attacker with network access via HTTP can easily exploit this flaw to compromise th...

CVE-2026-91300

A vulnerability exists in the Web Runtime SEC component of Oracle JD Edwards EnterpriseOne Tools (versions 9.2.0.0-9.2.26.5 ). An unauthenticated attacker with network access via HTTP can exploit this difficult-to-exploit vulnerability to compromise the product, provided they can trigger the nece...

CVE-2026-91296

A vulnerability exists in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards , specifically within the Enterprise Infrastructure SEC component. This affects supported versions 9.2.0.0-9.2.26.5 . An unauthenticated attacker with network access via HTTP can exploit this vulnerability t...

CVE-2026-91297

Oracle JD Edwards EnterpriseOne Tools is affected by a vulnerability in the Monitoring and Diagnostics SEC component. Impacted versions include 9.2.0.0-9.2.26.5 . An unauthenticated attacker with network access via HTTP can compromise the tools, though successful exploitation requires human inter...

CVE-2026-91295

A vulnerability exists in the Enterprise Infrastructure SEC component of Oracle JD Edwards EnterpriseOne Tools (versions 9.2.0.0-9.2.26.5). A low-privileged attacker with network access via HTTP can easily exploit this flaw to compromise the system, potentially resulting in a complete takeover of...

CVE-2026-91285

A vulnerability exists in the E1 IOT Orchestrator Security component of the JD Edwards EnterpriseOne Orchestrator product by Oracle JD Edwards , affecting versions 9.2.0.0-9.2.26.5 . A low-privileged attacker with network access via HTTP can exploit this issue to compromise the orchestrator, pote...

CVE-2026-91283

The JD Edwards EnterpriseOne Tools product by Oracle JD Edwards, specifically the Web Runtime SEC component, is affected by CVE-2026-91283 in versions 9.2.0.0 through 9.2.26.5 . An unauthenticated attacker with network access via HTTP can exploit this vulnerability, though the attack requires hum...

CVE-2026-91282

The JD Edwards EnterpriseOne Tools product (specifically the Portal SEC component) is vulnerable in versions 9.2.0.0-9.2.26.5 . A difficult-to-exploit vulnerability allows an unauthenticated attacker with network access via HTTP to compromise the system. Successful exploitation can lead to unauth...

CVE-2026-91281

A vulnerability exists in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure SEC ) affecting versions 9.2.0.0-9.2.26.5 . An unauthenticated attacker with network access via HTTP can exploit this flaw with human interaction to compromise the syste...

CVE-2026-91280

A vulnerability exists in the Web Runtime SEC component of JD Edwards EnterpriseOne Tools (versions 9.2.0.0-9.2.26.5) from Oracle JD Edwards. An unauthenticated attacker with network access via HTTP can exploit this flaw to compromise the system, provided they can trigger the necessary human inte...

CVE-2026-91279

A vulnerability exists in the Web Runtime SEC component of Oracle JD Edwards EnterpriseOne Tools (versions 9.2.0.0-9.2.26.5). An unauthenticated attacker with network access via HTTP can exploit this flaw to compromise the tools, provided they can elicit human interaction from a user. Successful ...