CVE-2026-101635

The Oracle Mobile Field Service product within Oracle E-Business Suite (component: Internal Operations ) is affected by a vulnerability in versions 12.2.3-12.2.15 . A low-privileged attacker with network access via HTTP can easily exploit this flaw to compromise the service, potentially leading t...

CVE-2026-101630

A vulnerability exists in the Internal Operations component of Oracle Advanced Outbound Telephony (part of Oracle E-Business Suite) affecting versions 12.2.3-12.2.15 . A low-privileged attacker with network access via HTTP can exploit this flaw to compromise the product, though successful executi...

CVE-2026-101628

The Oracle MySQL Cluster product, specifically the Cluster: NDB Operator component in version 9.7.3 , is affected by a vulnerability that allows a low-privileged attacker with network access via HTTP to compromise the system. Successful exploitation can lead to a complete Denial of Service (DoS) ...

CVE-2026-101604

The Oracle Communications Unified Inventory Management product is vulnerable in the Security component across versions 7.5.0, 7.5.1, 7.6.0, 7.7.0, 7.8.0, and 8.0.1 . An unauthenticated attacker with network access via HTTP can easily exploit this vulnerability to compromise the system. Successful...

CVE-2026-101603

A vulnerability exists in the Security component of Oracle Communications Unified Inventory Management (versions 7.5.0, 7.5.1, 7.6.0, 7.7.0, 7.8.0, and 8.0.1 ). A low-privileged attacker with network access via HTTP can exploit this high-complexity vulnerability to compromise the system, potentia...

CVE-2026-101602

A vulnerability exists in the Product Quality Management component of Oracle Agile Product Lifecycle Management for Process (part of Oracle Supply Chain), specifically affecting version 6.2.4 . A low-privileged attacker with network access via HTTP can exploit this vulnerability to compromise the...

CVE-2026-101596

The Oracle Agile Product Lifecycle Management for Process product (Oracle Supply Chain) contains a vulnerability in the Product Quality Management component. The affected version is 6.2.4 . This easily exploitable vulnerability allows a low-privileged attacker with network access via HTTP to comp...

CVE-2026-101597

The Oracle ZFS Storage Appliance Kit (component: Core ) version 8.8 is affected by an easily exploitable vulnerability. An unauthenticated attacker with network access via HTTP can compromise the appliance, potentially resulting in unauthorized read access to a subset of accessible data. This vul...

CVE-2026-101594

A vulnerability exists in the Oracle Agile Product Lifecycle Management for Process product (Oracle Supply Chain), specifically affecting the Product Quality Management component in version 6.2.4 . A low-privileged attacker with network access via HTTP can easily exploit this vulnerability to com...

CVE-2026-101595

A vulnerability exists in the Oracle Agile Product Lifecycle Management for Process product, specifically within the Supply Chain Relationship Mgmt component in version 6.2.4 . A low-privileged attacker with network access via HTTP can exploit this issue to compromise the system, though successfu...

CVE-2026-101591

The Oracle Agile Product Lifecycle Management for Process product (specifically the Product Quality Management component) is affected by a vulnerability in version 6.2.4 . A low-privileged attacker with network access via HTTP can exploit this issue to achieve unauthorized read access to a subset...

CVE-2026-101592

A vulnerability exists in the Oracle Agile Product Lifecycle Management for Process product (specifically the Product Quality Management component) version 6.2.4 . A low-privileged attacker with network access via HTTP can exploit this vulnerability to compromise the system, though the attack req...

CVE-2026-101593

A vulnerability exists in Oracle Agile Product Lifecycle Management for Process (Oracle Supply Chain, component: Product Quality Management ) affecting version 6.2.4 . A low-privileged attacker with network access via HTTP can exploit this flaw to compromise the system. Successful exploitation ma...

CVE-2026-101590

Vulnerability in the Helidon product of Oracle Fusion Middleware component: helidon-microprofile-security. Supported versions that are affected are 4.0.0-4.5.5. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful attacks ...

CVE-2026-101590

The Helidon product within Oracle Fusion Middleware (specifically the helidon-microprofile-security component) is affected by a critical vulnerability in versions 4.0.0-4.5.5 . An unauthenticated attacker with network access via HTTP can easily exploit this flaw to compromise the system. Successf...

CVE-2026-101587

Vulnerability in the Helidon product of Oracle Fusion Middleware component: helidon-webclient-http1. Supported versions that are affected are 4.0.0-4.5.5 and 27.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful...

CVE-2026-101587

A vulnerability exists in the helidon-webclient-http1 component of the Helidon product within Oracle Fusion Middleware . The affected versions are 4.0.0-4.5.5 and 27.0.0 . An unauthenticated attacker with network access via HTTP can exploit this flaw to cause a partial denial of service (partial ...

CVE-2026-101586

The Helidon product of Oracle Fusion Middleware is affected by a vulnerability in the helidon-webclient component. Impacted versions include 4.0.0-4.5.5 and 27.0.0 . An unauthenticated attacker with network access via HTTP can exploit this flaw to gain unauthorized read access to a subset of Heli...

CVE-2026-101585

The Helidon product within Oracle Fusion Middleware (specifically the helidon-cors component) is affected by a vulnerability in versions 3.0.0-3.2.21 . An unauthenticated attacker with network access via HTTP can exploit this flaw to compromise Helidon, potentially gaining unauthorized read, upda...

CVE-2026-101584

The Helidon product of Oracle Fusion Middleware is vulnerable in the helidon-webclient-websocket component. Specifically, supported versions 4.0.0-4.5.5 and 27.0.0 are affected by a vulnerability that allows an unauthenticated attacker with network access via HTTP to compromise the system. Succes...