CVE-2026-87354

A vulnerability exists in the Kubernetes Operator component of the Oracle TimesTen In-Memory Database (affected versions 22.1-22.1.40.0 and 26.1-26.1.1.2.0 ). A low-privileged attacker with network access via HTTPS can exploit this flaw to compromise the database, potentially leading to unauthori...

CVE-2026-87351

A vulnerability exists in the Oracle GoldenGate Admin Server Executable affecting versions 19.1.0.0.0-19.32.0.0 , 21.3-21.23 , and 23.4-23.26.3.0.0 . A low-privileged attacker with network access via HTTPS can easily exploit this flaw to compromise the system, potentially resulting in a full take...

CVE-2026-83402

A vulnerability exists in the OIM Legacy UI component of the Oracle Identity Manager product within Oracle Fusion Middleware . Affected versions include 12.2.1.4.0 and 14.1.2.1.0 . A low-privileged attacker with network access via HTTPS can easily exploit this flaw to compromise the Oracle Identi...

CVE-2026-83382

A vulnerability exists in the Internal Operations component of the Oracle Report Manager product within Oracle E-Business Suite , affecting supported versions 12.2.3-12.2.15 . An attacker with low privileges and network access via HTTPS can exploit this flaw to compromise the product. Successful ...

CVE-2026-101783

The MySQL Router product from Oracle MySQL (specifically component Router: General ) is affected by a vulnerability in version 26.7.0 . A difficult-to-exploit flaw allows an unauthenticated attacker with network access via HTTPS to compromise the MySQL Router. Successful exploitation may lead to ...

CVE-2026-101694

A vulnerability exists in the Admin UI component of the Oracle Mobile Field Service product within Oracle E-Business Suite , affecting supported versions 12.2.3-12.2.15 . A high privileged attacker with network access via HTTPS can exploit this flaw to compromise the service, potentially resultin...

CVE-2026-101656

A vulnerability exists in the Oracle Mobile Field Service product (component: Internal Operations ) within Oracle E-Business Suite versions 12.2.3-12.2.15 . A low-privileged attacker with network access via HTTPS can easily exploit this flaw to compromise the service, potentially leading to a com...

CVE-2026-101654

A vulnerability exists in the Internal Operations component of Oracle Mobile Field Service within Oracle E-Business Suite (versions 12.2.3-12.2.15). A low privileged attacker with network access via HTTPS can exploit this flaw to compromise the service, potentially leading to a full takeover of O...

CVE-2026-101653

A vulnerability exists in the Internal Operations component of Oracle Mobile Field Service (part of Oracle E-Business Suite). Affected versions are 12.2.3-12.2.15 . A low-privileged attacker with network access via HTTPS can easily exploit this flaw to compromise the service, potentially leading ...

CVE-2026-101649

The Oracle Partner Management product within Oracle E-Business Suite (component: Internal Operations ) is affected by a vulnerability in versions 12.2.3-12.2.15 . A low-privileged attacker with network access via HTTPS can easily exploit this flaw to compromise the product. Successful exploitatio...

CVE-2026-101642

A vulnerability exists in the Oracle Report Manager product within Oracle E-Business Suite (component: Internal Operations ) affecting versions 12.2.3-12.2.15 . An attacker with low privileges and network access via HTTPS can exploit this flaw to compromise the report manager. Successful exploita...

CVE-2026-101641

A vulnerability exists in the Oracle Report Manager product of Oracle E-Business Suite (component: Internal Operations ) affecting supported versions 12.2.3-12.2.15 . A low-privileged attacker with network access via HTTPS can exploit this issue to compromise the product. Successful exploitation ...

CVE-2026-101631

A vulnerability exists in the Router: General component of Oracle MySQL Router version 26.7.0 . An unauthenticated attacker with network access via HTTPS can compromise the service, though the attack is considered difficult to execute and requires human interaction from a third party. Successful ...

CVE-2026-101633

A vulnerability exists in the MySQL Router product of Oracle MySQL (component: Router: General ) in version 26.7.0 . A low-privileged attacker with network access via HTTPS can exploit this flaw to compromise the MySQL Router, potentially resulting in unauthorized read access to a subset of acces...

CVE-2026-101632

A vulnerability exists in the Router: General component of Oracle MySQL Router version 26.7.0 . An unauthenticated attacker with network access via HTTPS can compromise the product, provided there is human interaction from a user other than the attacker. Successful exploitation can lead to unauth...

CVE-2026-101605

The Oracle Utilities Network Management System product (component: System Wide ) contains a vulnerability affecting versions 2.4.0.1.0-2.4.0.1.33 , 2.5.0.1.0-2.5.0.1.18 , 2.5.0.2.0-2.5.0.2.11 , 2.6.0.1.0-2.6.0.1.12 , 2.6.0.2.0-2.6.0.2.10 , and 25.12.0.0.0-25.12.0.0.2 . This easily exploitable vul...

CVE-2026-101589

The Oracle Utilities Network Management System product (component: System Wide ) is affected by a vulnerability in versions 2.6.0.1.0-2.6.0.1.12 , 2.6.0.2.0-2.6.0.2.10 , and 25.12.0.0.0-25.12.0.0.2 . An unauthenticated attacker with network access via HTTPS can exploit this issue to gain unauthor...

CVE-2026-101521

A critical vulnerability in Oracle APEX (component: General) affects versions 24.1.0-24.1.21 , 24.2.0-24.2.20 , and 26.1.0-26.1.4 . This easily exploitable flaw allows an unauthenticated attacker with network access via HTTPS to compromise the system, potentially leading to a complete takeover of...

CVE-2026-101467

A vulnerability exists in the Portal Framework component of Oracle Siebel CRM End User (affected versions 17.0-26.9 ). A difficult-to-exploit flaw allows an unauthenticated attacker with network access via HTTPS to compromise the system. Successful exploitation can lead to unauthorized creation, ...

CVE-2026-101405

The Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing) is affected by a vulnerability in versions 17.0-26.9 . A difficult-to-exploit vulnerability allows an unauthenticated attacker with network access via HTTPS to compromise the product. Successful exploitation can lead ...