CVE-2026-101474

A vulnerability exists in the Oracle Agile Product Lifecycle Management for Process product (Oracle Supply Chain, component: Product Quality Management ) version 6.2.4 . A low-privileged attacker with network access via HTTP can exploit this high-complexity vulnerability to compromise the system....

CVE-2026-101473

A vulnerability exists in the Product Quality Management component of Oracle Agile Product Lifecycle Management for Process (Oracle Supply Chain) affecting version 6.2.4 . An unauthenticated attacker with network access via HTTP can exploit this difficult-to-exploit vulnerability to compromise th...

CVE-2026-101468

A vulnerability exists in the Siebel CRM Deployment product of Oracle Siebel CRM , specifically affecting the Cloud Gateway component in supported versions 17.0-26.9 . An unauthenticated attacker with network access via HTTP can easily exploit this flaw to compromise the deployment. Successful ex...

CVE-2026-101466

The Oracle EDI Gateway product within Oracle E-Business Suite (component: All Miscellaneous EDI Issues ) is affected by a vulnerability in versions 12.2.3-12.2.15 . A high privileged attacker with network access via HTTP can easily exploit this flaw to compromise the Oracle EDI Gateway, potential...

CVE-2026-101461

A vulnerability exists in the Server Infrastructure component of Oracle Siebel CRM Deployment (affected versions 17.0-26.9 ). An unauthenticated attacker with network access via HTTP can easily exploit this flaw to compromise the system. Successful exploitation may result in unauthorized access t...

CVE-2026-101463

A vulnerability exists in the UIF Open UI component of the Oracle Siebel CRM End User product (affected versions 17.0-26.9 ). An unauthenticated attacker with network access via HTTP can easily exploit this flaw to compromise the system. Successful exploitation may result in unauthorized access t...

CVE-2026-101459

The Siebel CRM Deployment product of Oracle Siebel CRM (specifically the Server Infrastructure component) is affected by a vulnerability in versions 17.0-26.9 . A low-privileged attacker with network access via HTTP can exploit this flaw to compromise the deployment. Successful exploitation may r...

CVE-2026-101458

A vulnerability exists in the Siebel CRM Deployment product of Oracle Siebel CRM within the Server Infrastructure component, affecting supported versions 17.0-26.9 . An unauthenticated attacker with network access via HTTP can exploit this flaw to compromise the system. Successful exploitation ma...

CVE-2026-101451

A vulnerability exists in the Web UI component of Oracle Siebel CRM 's Siebel Life Sciences product, specifically affecting supported versions 17.0-26.9 . A low-privileged attacker with network access via HTTP can compromise the system, though the attack requires human interaction . Successful ex...

CVE-2026-101448

A vulnerability exists in the Siebel Management Console component of Oracle Siebel CRM Deployment (versions 17.0-26.9 ). An unauthenticated attacker with network access via HTTP can exploit this issue to achieve unauthorized read access to a subset of accessible data. The vulnerability is classif...

CVE-2026-101450

A vulnerability exists in the Integration Broker component of Oracle PeopleSoft Enterprise PeopleTools (versions 8.61-8.63 ). An unauthenticated attacker with network access via HTTP can exploit this vulnerability to compromise the system, provided they can leverage human interaction from a third...

CVE-2026-101447

A vulnerability exists in the Workflow component of Oracle Siebel CRM (Siebel CRM Development product) affecting versions 25.12-26.9 . A low-privileged attacker with network access via HTTP can compromise the system with high complexity and required human interaction. Successful exploitation can ...

CVE-2026-101446

A vulnerability exists in the Siebel Cloud Manager component of Oracle Siebel CRM Cloud Applications (affected versions 17.0-26.9 ). A low-privileged attacker with network access via HTTP can easily exploit this flaw to compromise the application, potentially leading to a full takeover of the Sie...

CVE-2026-101442

A vulnerability exists in the Siebel Cloud Manager component of Oracle Siebel CRM Cloud Applications (affected versions 22.3-26.9 ). A low-privileged attacker with network access via HTTP can exploit this difficult to exploit vulnerability to achieve unauthorized read access to a subset of access...

CVE-2026-101437

A vulnerability exists in the Siebel Cloud Manager component of Oracle Siebel CRM Cloud Applications (affected versions 22.3-26.9 ). A high-privileged attacker with network access via HTTP can exploit this difficult-to-exploit flaw to compromise the applications, potentially impacting additional ...

CVE-2026-101434

The PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft, specifically the Database Server component in versions 8.61-8.63 , is vulnerable to a flaw that allows an unauthenticated attacker with network access via HTTP to compromise the system. Exploitation requires human interaction fro...

CVE-2026-101431

A vulnerability exists in the Test Framework component of Oracle PeopleSoft Enterprise PeopleTools (affected versions 8.61-8.63 ). A low-privileged attacker with network access via HTTP can exploit this issue, which requires human interaction from another person. The vulnerability allows for a sc...

CVE-2026-101433

The PeopleSoft Enterprise PeopleTools product, specifically the Test Framework component in versions 8.61-8.63 , is vulnerable to an easily exploitable security flaw. An unauthenticated attacker with network access via HTTP can compromise the system to gain unauthorized read access to a subset of...

CVE-2026-101428

A vulnerability exists in the SQR component of the PeopleSoft Enterprise PeopleTools product by Oracle PeopleSoft , affecting supported versions 8.61-8.63 . This high-complexity vulnerability allows a low-privileged attacker with network access via HTTP to compromise the system. A successful atta...

CVE-2026-101427

A vulnerability exists in the Report Distribution component of Oracle PeopleSoft Enterprise PeopleTools (affected versions 8.61-8.63 ). This easily exploitable flaw allows an unauthenticated attacker with network access via HTTP to compromise the system, though successful exploitation requires hu...