CVE-2026-91228

A vulnerability exists in the Fabric Layer component of the Oracle SOA Suite product within Oracle Fusion Middleware. Specifically, versions 12.2.1.4.0 and 14.1.2.0.0 are affected. A low-privileged attacker with network access via HTTP can exploit this vulnerability to compromise the Oracle SOA S...

CVE-2026-91224

A vulnerability exists in the Fabric Layer component of the Oracle SOA Suite product within Oracle Fusion Middleware, specifically affecting versions 12.2.1.4.0 and 14.1.2.0.0 . A low-privileged attacker with network access via HTTP can easily exploit this flaw to compromise the Oracle SOA Suite,...

CVE-2026-91225

A vulnerability exists in the Oracle SOA Suite product of Oracle Fusion Middleware (specifically within the Adapters component). Affected versions include 12.2.1.4.0 and 14.1.2.0.0 . An unauthenticated attacker with network access via HTTP can exploit this vulnerability to compromise the system. ...

CVE-2026-91223

A vulnerability exists in the Fabric Layer component of the Oracle SOA Suite product within Oracle Fusion Middleware, specifically affecting versions 12.2.1.4.0 and 14.1.2.0.0 . A low-privileged attacker with network access via HTTP can easily exploit this flaw to compromise the Oracle SOA Suite,...

CVE-2026-91219

A vulnerability exists in the Fabric Layer component of Oracle SOA Suite within Oracle Fusion Middleware . This issue affects supported versions 12.2.1.4.0 and 14.1.2.0.0 . An unauthenticated attacker with network access via HTTP can easily exploit this vulnerability to compromise the Oracle SOA ...

CVE-2026-91220

The Oracle Business Process Management Suite (Oracle Fusion Middleware) is affected by a vulnerability in the Human Workflow component. Specifically, versions 12.2.1.4.0 and 14.1.2.0.0 are impacted. An unauthenticated attacker with network access via HTTP can easily exploit this vulnerability to ...

CVE-2026-91217

A vulnerability exists in the Fabric Layer component of the Oracle SOA Suite product within Oracle Fusion Middleware . Affected versions include 12.2.1.4.0 and 14.1.2.0.0 . This easily exploitable vulnerability allows an unauthenticated attacker with network access via HTTP to compromise the Orac...

CVE-2026-91218

A vulnerability exists in the Fabric Layer component of Oracle SOA Suite within Oracle Fusion Middleware (affected versions 12.2.1.4.0 and 14.1.2.0.0 ). A low-privileged attacker with network access via HTTP can exploit this to compromise the Oracle SOA Suite, potentially gaining unauthorized cre...

CVE-2026-91215

A vulnerability exists in the Fabric Layer component of Oracle SOA Suite (part of Oracle Fusion Middleware), specifically affecting versions 12.2.1.4.0 and 14.1.2.0.0 . A low-privileged attacker with network access via HTTP can easily exploit this flaw to compromise the Oracle SOA Suite, potentia...

CVE-2026-91213

A vulnerability exists in the Oracle Business Process Management Suite product of Oracle Fusion Middleware , specifically within the BPM Composer component. This affects supported versions 12.2.1.4.0 and 14.1.2.0.0 . A low-privileged attacker with network access via HTTP can easily exploit this v...

CVE-2026-91214

A vulnerability exists in the Fabric Layer component of Oracle SOA Suite (part of Oracle Fusion Middleware), specifically affecting supported versions 12.2.1.4.0 and 14.1.2.0.0 . An unauthenticated attacker with network access via HTTP can easily exploit this flaw to compromise the Oracle SOA Sui...

CVE-2026-91212

The Oracle Identity Manager Connector product of Oracle Fusion Middleware is affected by a vulnerability in the Generic REST component. This issue impacts supported versions 12.2.1.4.0 and 14.1.2.1.0 . An unauthenticated attacker with network access via HTTP can easily exploit this vulnerability ...

CVE-2026-91210

A vulnerability exists in the Content Server component of Oracle WebCenter Content (specifically version 14.1.2.0.0 ) within the Oracle Fusion Middleware suite. A low-privileged attacker with network access via HTTP can exploit this high-complexity vulnerability to compromise the system, though i...

CVE-2026-87421

The Image Packaging System component in Oracle Solaris version 11.4 is vulnerable to an easily exploitable flaw. An unauthenticated attacker with network access via HTTP can compromise the system, though the attack requires human interaction from a user. Successful exploitation can result in unau...

CVE-2026-87420

A vulnerability exists in the Core component of the Oracle Service Bus product within Oracle Fusion Middleware , specifically affecting version 14.1.2.0.0 . A low-privileged attacker with network access via HTTP can exploit this vulnerability to compromise the service, potentially resulting in a ...

CVE-2026-87419

A vulnerability exists in the Oracle Service Bus product within Oracle Fusion Middleware (component: Core ), specifically affecting versions 12.2.1.4.0 and 14.1.2.0.0 . A low-privileged attacker with network access via HTTP can exploit this vulnerability to compromise the Oracle Service Bus, pote...

CVE-2026-87417

A vulnerability exists in the Image Packaging System component of Oracle Solaris version 11.4 . An unauthenticated attacker with network access via HTTP can easily exploit this flaw to compromise the system. Successful exploitation may lead to unauthorized access to critical data or complete acce...

CVE-2026-87415

A vulnerability exists in the Report Distribution component of Oracle PeopleSoft Enterprise PeopleTools (affected versions 8.61-8.63 ). An unauthenticated attacker with network access via HTTP can exploit this difficult to exploit vulnerability to compromise the system, provided they can elicit h...

CVE-2026-87416

A vulnerability exists in the Report Distribution component of Oracle PeopleSoft Enterprise PeopleTools affecting supported versions 8.61-8.63 . An unauthenticated attacker with network access via HTTP can exploit this difficult-to-exploit vulnerability to achieve unauthorized read access to a su...

CVE-2026-87412

A vulnerability exists in the Report Distribution component of Oracle PeopleSoft Enterprise PeopleTools (affected versions 8.61-8.63 ). A high-privileged attacker with network access via HTTP can easily exploit this flaw to gain unauthorized read access to a subset of accessible data. No specific...