CVE-2026-101736

A vulnerability exists in the Core component of the Primavera Unifier product by Oracle Construction and Engineering, affecting versions 21.12.0-21.12.17 . An unauthenticated attacker with network access via HTTP can exploit this difficult-to-exploit vulnerability to compromise the system. Succes...

CVE-2026-101735

A vulnerability exists in the Project Control component of Oracle Construction and Engineering's Primavera Unifier product, affecting supported versions 23.12.0-23.12.16 . A low-privileged attacker with network access via HTTP can exploit this flaw to compromise the system. Successful exploitatio...

CVE-2026-101734

A vulnerability exists in the Engineering Communication Interface component of the Oracle Agile Engineering Data Management product (version 6.2.1 ) within the Oracle Supply Chain suite. A low-privileged attacker with network access via HTTP can easily exploit this flaw to gain unauthorized read ...

CVE-2026-101719

The Oracle Agile PLM product (Oracle Supply Chain) is affected by a vulnerability in the Application Server component, specifically in version 9.3.6 . An unauthenticated attacker with network access via HTTP can exploit this difficult-to-exploit vulnerability to compromise the system. Successful ...

CVE-2026-101714

A vulnerability exists in the Web Client component of Oracle Agile PLM (version 9.3.6). An unauthenticated attacker with network access via HTTP can exploit this flaw to compromise the product, provided there is human interaction from a user other than the attacker. Successful exploitation may le...

CVE-2026-101716

A vulnerability exists in the Web Client component of Oracle Agile PLM (Oracle Supply Chain), specifically affecting version 9.3.6 . An unauthenticated attacker with network access via HTTP can easily exploit this flaw to compromise the product, potentially resulting in unauthorized read access t...

CVE-2026-101715

The Oracle Agile PLM product (Oracle Supply Chain) contains a vulnerability in the Application Server component affecting version 9.3.6 . A difficult-to-exploit vulnerability allows an unauthenticated attacker with network access via HTTP to compromise the system. Successful exploitation can lead...

CVE-2026-101713

A vulnerability exists in the Oracle Agile PLM product (Application Server component) affecting version 9.3.6 . A low-privileged attacker with network access via HTTP can exploit this issue to compromise the system, though the attack requires human interaction . Successful exploitation may result...

CVE-2026-101712

A vulnerability exists in the Oracle Payroll product of Oracle E-Business Suite (component: Internal Operations ) affecting supported versions 12.2.3-12.2.15 . This difficult to exploit vulnerability allows a low privileged attacker with network access via HTTP to compromise Oracle Payroll, poten...

CVE-2026-101711

A vulnerability exists in the Oracle Payroll component of Oracle E-Business Suite (versions 12.2.3-12.2.15 ). A high-privileged attacker with network access via HTTP can exploit this difficult-to-exploit flaw to compromise the product, potentially resulting in a full takeover of Oracle Payroll . ...

CVE-2026-101710

The Oracle Payroll product within Oracle E-Business Suite (component: Internal Operations ) is affected by a vulnerability in versions 12.2.3-12.2.15 . A low privileged attacker with network access via HTTP can exploit this flaw, which is characterized as difficult to exploit. Successful exploita...

CVE-2026-101709

A vulnerability exists in the Oracle Payroll product of Oracle E-Business Suite (specifically the Internal Operations component) affecting versions 12.2.3-12.2.15 . This easily exploitable vulnerability allows a low privileged attacker with network access via HTTP to compromise Oracle Payroll. Su...

CVE-2026-101706

A vulnerability exists in the Oracle One-to-One Fulfillment product within Oracle E-Business Suite (specifically the Documents component). Affected versions include 12.2.3-12.2.15 . A low-privileged attacker with network access via HTTP can easily exploit this vulnerability to compromise the prod...

CVE-2026-101708

A vulnerability exists in the Internal Operations component of the Oracle Payroll product within Oracle E-Business Suite . Affected versions include 12.2.3-12.2.15 . This high-complexity vulnerability allows a low-privileged attacker with network access via HTTP to compromise and potentially take...

CVE-2026-101707

A vulnerability exists in the Oracle Concurrent Processing product within Oracle E-Business Suite (specifically versions 12.2.3-12.2.15 ). An unauthenticated attacker with network access via HTTP can exploit this difficulty-to-exploit vulnerability to compromise the product. Successful exploitati...

CVE-2026-101703

A vulnerability exists in the Pasta product of Oracle E-Business Suite (component: Internal Operations ) affecting supported versions 12.2.3-12.2.15 . A low privileged attacker with network access via HTTP can exploit this difficult-to-exploit vulnerability to compromise Pasta, potentially result...

CVE-2026-101705

A vulnerability exists in the Oracle Common Applications product of Oracle E-Business Suite (component: Role Summary ), specifically affecting versions 12.2.3-12.2.15 . This high-complexity vulnerability allows a high-privileged attacker with network access via HTTP to compromise Oracle Common Ap...

CVE-2026-101700

A vulnerability exists in the Oracle Application Object Library component (Core) of Oracle E-Business Suite affecting supported versions 12.2.3-12.2.15 . This difficult to exploit vulnerability allows an unauthenticated attacker with network access via HTTP to compromise the library, potentially ...

CVE-2026-101697

A vulnerability exists in the Admin Console UI component of the Oracle One-to-One Fulfillment product within Oracle E-Business Suite, affecting versions 12.2.3-12.2.15 . An unauthenticated attacker with network access via HTTP can exploit this flaw to compromise the product, though the attack req...

CVE-2026-101698

A vulnerability exists in the Java Server Issues component of the Oracle One-to-One Fulfillment product within Oracle E-Business Suite . Affected versions range from 12.2.3 to 12.2.15 . A low-privileged attacker with network access via HTTP can exploit this difficult-to-exploit vulnerability to c...