CVE-2026-101511

A vulnerability exists in the Metadata Plugin component of the Oracle Enterprise Manager Base Platform (Oracle Enterprise Manager) affecting versions 13.5 and 24.1 . A low-privileged attacker with network access via HTTP can exploit this flaw to compromise the platform, potentially leading to una...

CVE-2026-101507

A vulnerability exists in the PLSQL package component of Oracle Trusted Answer Search version 26.1 . A low-privileged attacker with network access via HTTP can easily exploit this flaw to compromise the system. Successful exploitation may lead to unauthorized access to critical data or provide co...

CVE-2026-101506

A vulnerability exists in Oracle Trusted Answer Search affecting version 26.1 within the Application expert UI component. This easily exploitable flaw allows a low-privileged attacker with network access via HTTP to compromise the system. Successful exploitation can lead to unauthorized access to...

CVE-2026-101508

A vulnerability exists in the Siebel CRM Integration product of Oracle Siebel CRM (component: EAI ), affecting supported versions 17.0-26.9 . An unauthenticated attacker with network access via HTTP can exploit this flaw to cause a hang or a frequently repeatable crash , resulting in a complete D...

CVE-2026-101504

A vulnerability exists in the Application expert UI component of Oracle Trusted Answer Search (version 26.1). A low-privileged attacker with network access via HTTP can exploit this flaw to compromise the system, although successful attacks require human interaction from a third party. The vulner...

CVE-2026-101505

A vulnerability exists in the Oracle Trusted Answer Search (specifically the Application expert UI component) in version 26.1 . A low-privileged attacker with network access via HTTP can exploit this issue to compromise the system, though successful exploitation requires human interaction . The v...

CVE-2026-101499

A vulnerability exists in the Oracle WebCenter Sites component of Oracle Fusion Middleware . The affected versions are 12.2.1.4.0 and 14.1.2.0.0 . An unauthenticated attacker with network access via HTTP can easily exploit this vulnerability to compromise the product, which may result in a comple...

CVE-2026-101497

The Oracle Identity Manager product within Oracle Fusion Middleware is affected by a vulnerability in the Connector Framework component. Specifically, versions 12.2.1.4.0 and 14.1.2.1.0 are impacted. A low-privileged attacker with network access via HTTP can exploit this vulnerability to cause a ...

CVE-2026-101495

A vulnerability exists in the Siebel Approval Manager component of the Oracle Siebel CRM Development product (affected versions 17.0-26.9 ). This easily exploitable flaw allows an unauthenticated attacker with network access via HTTP to compromise the system, provided they can leverage human inte...

CVE-2026-101494

A vulnerability in the Core component of Oracle REST Data Services affects supported versions 24.2.0-26.2.2 . A low-privileged attacker with network access via HTTP can easily exploit this flaw to compromise the service. Successful exploitation may lead to unauthorized access to critical data or ...

CVE-2026-101492

A vulnerability exists in the Siebel CRM Integration product of Oracle Siebel CRM , specifically within the Open Integration component, affecting versions 25.12-26.9 . This difficult-to-exploit vulnerability allows an unauthenticated attacker with network access via HTTP to compromise the product...

CVE-2026-101491

The PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (specifically the Query component) is affected by CVE-2026-101491 in versions 8.61-8.63 . A low-privileged attacker with network access via HTTP can exploit this vulnerability to gain unauthorized read access to a subset of access...

CVE-2026-101488

Oracle PeopleSoft PeopleTools is vulnerable in the Business Interlink component within versions 8.61-8.63 . An unauthenticated attacker with network access via HTTP can exploit this vulnerability to gain unauthorized read access to a subset of accessible data and cause a partial denial of service...

CVE-2026-101489

A vulnerability exists in the Portal component of Oracle PeopleSoft Enterprise PeopleTools (affected versions 8.61-8.63 ). A low-privileged attacker with network access via HTTP can easily exploit this flaw to gain unauthorized read access to a subset of accessible data within the product. While ...

CVE-2026-101490

A vulnerability exists in the Fluid Core component of Oracle PeopleSoft Enterprise PeopleTools (affected versions 8.61-8.63 ). This easily exploitable flaw allows an unauthenticated attacker with network access via HTTP to compromise the system. Successful exploitation requires human interaction ...

CVE-2026-101486

A vulnerability exists in the Fluid Core component of Oracle PeopleSoft Enterprise PeopleTools (affected versions 8.61-8.63 ). This easily exploitable flaw allows a low privileged attacker with network access via HTTP to compromise the product. The attack requires human interaction from a user ot...

CVE-2026-101487

The PeopleSoft Enterprise PeopleTools product, specifically the Portal component in versions 8.61-8.63 , is vulnerable to a security flaw that allows a low-privileged attacker with network access via HTTP to compromise the system. Exploitation requires human interaction and can lead to a scope ch...

CVE-2026-101475

A vulnerability exists in the Logging component of the Primavera Unifier product by Oracle Construction and Engineering. Affected versions include 21.12.0-21.12.17 , 22.12.0-22.12.15 , 23.12.0-23.12.16 , 24.12.0-24.12.16 , and 25.12.0-25.12.9 . A low-privileged attacker with network access via HT...

CVE-2026-101476

A vulnerability exists in the Marketing component of Oracle Siebel CRM (Siebel Apps - Marketing) affecting supported versions 17.0-26.9 . An unauthenticated attacker with network access via HTTP can exploit this flaw, although successful execution requires human interaction from a user other than...

CVE-2026-101474

A vulnerability exists in the Oracle Agile Product Lifecycle Management for Process product (Oracle Supply Chain, component: Product Quality Management ) version 6.2.4 . A low-privileged attacker with network access via HTTP can exploit this high-complexity vulnerability to compromise the system....