CVE-2026-101458

A vulnerability exists in the Siebel CRM Deployment product of Oracle Siebel CRM within the Server Infrastructure component, affecting supported versions 17.0-26.9 . An unauthenticated attacker with network access via HTTP can exploit this flaw to compromise the system. Successful exploitation ma...

CVE-2026-101451

A vulnerability exists in the Web UI component of Oracle Siebel CRM 's Siebel Life Sciences product, specifically affecting supported versions 17.0-26.9 . A low-privileged attacker with network access via HTTP can compromise the system, though the attack requires human interaction . Successful ex...

CVE-2026-101448

A vulnerability exists in the Siebel Management Console component of Oracle Siebel CRM Deployment (versions 17.0-26.9 ). An unauthenticated attacker with network access via HTTP can exploit this issue to achieve unauthorized read access to a subset of accessible data. The vulnerability is classif...

CVE-2026-101450

A vulnerability exists in the Integration Broker component of Oracle PeopleSoft Enterprise PeopleTools (versions 8.61-8.63 ). An unauthenticated attacker with network access via HTTP can exploit this vulnerability to compromise the system, provided they can leverage human interaction from a third...

CVE-2026-101447

A vulnerability exists in the Workflow component of Oracle Siebel CRM (Siebel CRM Development product) affecting versions 25.12-26.9 . A low-privileged attacker with network access via HTTP can compromise the system with high complexity and required human interaction. Successful exploitation can ...

CVE-2026-101446

A vulnerability exists in the Siebel Cloud Manager component of Oracle Siebel CRM Cloud Applications (affected versions 17.0-26.9 ). A low-privileged attacker with network access via HTTP can easily exploit this flaw to compromise the application, potentially leading to a full takeover of the Sie...

CVE-2026-101442

A vulnerability exists in the Siebel Cloud Manager component of Oracle Siebel CRM Cloud Applications (affected versions 22.3-26.9 ). A low-privileged attacker with network access via HTTP can exploit this difficult to exploit vulnerability to achieve unauthorized read access to a subset of access...

CVE-2026-101437

A vulnerability exists in the Siebel Cloud Manager component of Oracle Siebel CRM Cloud Applications (affected versions 22.3-26.9 ). A high-privileged attacker with network access via HTTP can exploit this difficult-to-exploit flaw to compromise the applications, potentially impacting additional ...

CVE-2026-101434

The PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft, specifically the Database Server component in versions 8.61-8.63 , is vulnerable to a flaw that allows an unauthenticated attacker with network access via HTTP to compromise the system. Exploitation requires human interaction fro...

CVE-2026-101431

A vulnerability exists in the Test Framework component of Oracle PeopleSoft Enterprise PeopleTools (affected versions 8.61-8.63 ). A low-privileged attacker with network access via HTTP can exploit this issue, which requires human interaction from another person. The vulnerability allows for a sc...

CVE-2026-101433

The PeopleSoft Enterprise PeopleTools product, specifically the Test Framework component in versions 8.61-8.63 , is vulnerable to an easily exploitable security flaw. An unauthenticated attacker with network access via HTTP can compromise the system to gain unauthorized read access to a subset of...

CVE-2026-101428

A vulnerability exists in the SQR component of the PeopleSoft Enterprise PeopleTools product by Oracle PeopleSoft , affecting supported versions 8.61-8.63 . This high-complexity vulnerability allows a low-privileged attacker with network access via HTTP to compromise the system. A successful atta...

CVE-2026-101427

A vulnerability exists in the Report Distribution component of Oracle PeopleSoft Enterprise PeopleTools (affected versions 8.61-8.63 ). This easily exploitable flaw allows an unauthenticated attacker with network access via HTTP to compromise the system, though successful exploitation requires hu...

CVE-2026-101424

A vulnerability exists in the Report Distribution component of Oracle PeopleSoft Enterprise PeopleTools (affected versions 8.61-8.63 ). This difficult to exploit vulnerability allows a high privileged attacker with network access via HTTP to compromise the system, potentially leading to unauthori...

CVE-2026-101422

A vulnerability exists in the Report Distribution component of Oracle PeopleSoft Enterprise PeopleTools (affected versions 8.61-8.63 ). A low-privileged attacker with network access via HTTP can exploit this flaw to compromise the system, potentially gaining unauthorized access to create, delete,...

CVE-2026-101423

A vulnerability exists in the Report Distribution component of Oracle PeopleSoft (PeopleTools) affecting versions 8.61-8.63 . A low-privileged attacker with network access via HTTP can exploit this flaw to gain unauthorized read access to a subset of accessible PeopleSoft Enterprise PeopleTools d...

CVE-2026-101420

The PeopleSoft Enterprise PeopleTools product (specifically the SQR component) is affected by a critical vulnerability in supported versions 8.61-8.63 . This flaw allows a low-privileged attacker with network access via HTTP to compromise the system, potentially resulting in unauthorized creation...

CVE-2026-101421

A vulnerability exists in the SQR component of Oracle PeopleSoft Enterprise PeopleTools (versions 8.61-8.63). An unauthenticated attacker with network access via HTTP can easily exploit this flaw to compromise the system, potentially leading to unauthorized access to critical data or complete acc...

CVE-2026-101419

A vulnerability exists in the SQR component of the Oracle PeopleSoft Enterprise PeopleTools product (versions 8.61-8.63 ). A low-privileged attacker with network access via HTTP can easily exploit this flaw to compromise the system, potentially resulting in unauthorized access to critical data or...

CVE-2026-101417

A vulnerability exists in the Tuxedo component of Oracle PeopleSoft Enterprise PeopleTools (versions 8.61-8.63 ). An unauthenticated attacker with network access via HTTP can exploit this difficult-to-exploit vulnerability to gain unauthorized read access to a subset of accessible data. While no ...