CVE-2026-101656

Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTPS to compromise Oracle Mobile...

CVE-2026-101654

Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTPS to compromise Oracle Mobile...

CVE-2026-101649

Vulnerability in the Oracle Partner Management product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTPS to compromise Oracle Partner...

CVE-2026-101642

Vulnerability in the Oracle Report Manager product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTPS to compromise Oracle Report Manager...

CVE-2026-101641

Vulnerability in the Oracle Report Manager product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTPS to compromise Oracle Report Manager...

CVE-2026-101632

Vulnerability in the MySQL Router product of Oracle MySQL component: Router: General. The supported version that is affected is 26.7.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise MySQL Router. Successful attacks require human...

CVE-2026-101631

Vulnerability in the MySQL Router product of Oracle MySQL component: Router: General. The supported version that is affected is 26.7.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTPS to compromise MySQL Router. Successful attacks require human...

CVE-2026-101633

Vulnerability in the MySQL Router product of Oracle MySQL component: Router: General. The supported version that is affected is 26.7.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTPS to compromise MySQL Router. Successful attacks of this vulnerabilit...

CVE-2026-101605

Vulnerability in the Oracle Utilities Network Management System product of Oracle Utilities Applications component: System Wide. Supported versions that are affected are 2.4.0.1.0-2.4.0.1.33, 2.5.0.1.0-2.5.0.1.18, 2.5.0.2.0-2.5.0.2.11, 2.6.0.1.0-2.6.0.1.12, 2.6.0.2.0-2.6.0.2.10 and...

CVE-2026-101589

Vulnerability in the Oracle Utilities Network Management System product of Oracle Utilities Applications component: System Wide. Supported versions that are affected are 2.6.0.1.0-2.6.0.1.12, 2.6.0.2.0-2.6.0.2.10 and 25.12.0.0.0-25.12.0.0.2. Easily exploitable vulnerability allows unauthenticated...

CVE-2026-101521

Vulnerability in Oracle APEX component: General. Supported versions that are affected are 24.1.0-24.1.21, 24.2.0-24.2.20 and 26.1.0-26.1.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle APEX. Successful attacks of this...

CVE-2026-101467

Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM component: Portal Framework. Supported versions that are affected are 17.0-26.9. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Siebel CRM End User. Successful...

CVE-2026-101405

Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM component: Marketing. Supported versions that are affected are 17.0-26.9. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Siebel Apps - Marketing. Successful...

CVE-2026-91536

A vulnerability exists in the Fabric Layer component of Oracle SOA Suite (Oracle Fusion Middleware) affecting versions 12.2.1.4.0 and 14.1.2.0.0 . A low-privileged attacker with network access via HTTPS can exploit this difficult-to-exploit vulnerability to compromise the suite. Successful exploi...

CVE-2026-91528

A vulnerability exists in the BI Platform Security component of the Oracle BI Publisher product within Oracle Analytics, specifically affecting version 12.2.1.4.0 . A low-privileged attacker with network access via HTTPS can exploit this flaw to gain unauthorized read access to a subset of access...

CVE-2026-91337

A vulnerability exists in the iProcurement product of Oracle E-Business Suite (component: Internal operations) affecting versions 12.2.3-12.2.15 . This difficult-to-exploit flaw allows an unauthenticated attacker with network access via HTTPS to compromise the system. Successful exploitation can ...

CVE-2026-91316

A vulnerability exists in the iProcurement product of Oracle E-Business Suite , specifically affecting the E-Content Manager Catalog component in versions 12.2.3-12.2.15 . A high-privileged attacker with network access via HTTPS can easily exploit this flaw to compromise and potentially take over...

CVE-2026-91309

The JD Edwards EnterpriseOne Tools product by Oracle JD Edwards is affected by a vulnerability in the Interoperability SEC component, specifically in versions 9.2.0.0-9.2.26.5 . An unauthenticated attacker with network access via HTTPS can exploit this difficult-to-exploit vulnerability to compro...

CVE-2026-91305

A vulnerability exists in the Installation Security component of Oracle JD Edwards EnterpriseOne Tools (versions 9.2.0.0-9.2.26.5 ). An unauthenticated attacker with network access via HTTPS can easily exploit this flaw to compromise the system. Successful exploitation may result in unauthorized ...

CVE-2026-91272

A vulnerability exists in the Interoperability SEC component of Oracle JD Edwards EnterpriseOne Tools (affected versions 9.2.0.0-9.2.26.5). An unauthenticated attacker with network access via HTTPS can exploit this flaw to compromise the system. Successful exploitation may result in unauthorized ...