CVE-2026-91576

A vulnerability exists in the Analytics Server component of Oracle Business Intelligence Enterprise Edition (version 12.2.1.4.0 ). A low-privileged attacker with network access via HTTP can exploit this flaw to compromise the system, potentially resulting in unauthorized access to critical data o...

CVE-2026-91574

A vulnerability exists in the BI Publisher Security component of the Oracle BI Publisher product within Oracle Analytics. Affected versions include 8.2.0.0.0 , 12.2.1.4.0 , and 26.01.0.0.0 . A low-privileged attacker with network access via HTTP can easily exploit this flaw to compromise the prod...

CVE-2026-91565

A vulnerability exists in the Oracle Agile Product Lifecycle Management for Process product, specifically within the Product Quality Management component. The affected version is 6.2.4 . A low-privileged attacker with network access via HTTP can exploit this high-complexity vulnerability to compr...

CVE-2026-91550

A vulnerability exists in the Oracle Agile Product Lifecycle Management for Process product (Oracle Supply Chain), specifically within the Product Quality Management component in version 6.2.4 . This easily exploitable vulnerability allows a low privileged attacker with network access via HTTP to...

CVE-2026-91528

A vulnerability exists in the BI Platform Security component of the Oracle BI Publisher product within Oracle Analytics, specifically affecting version 12.2.1.4.0 . A low-privileged attacker with network access via HTTPS can exploit this flaw to gain unauthorized read access to a subset of access...

CVE-2026-91530

A vulnerability exists in the Oracle GoldenGate Admin Client Executable affecting versions 23.4-23.26.2.0.0 . A high-privileged attacker with network access via HTTP can exploit this difficult-to-exploit flaw to compromise Oracle GoldenGate. Successful exploitation may result in unauthorized acce...

CVE-2026-91520

The Oracle Agile Product Lifecycle Management for Process product (specifically the Product Quality Management component) is vulnerable in version 6.2.4 . A low-privileged attacker with network access via HTTP can exploit this vulnerability to compromise the system. Successful exploitation may re...

CVE-2026-91521

The Oracle Agile Product Lifecycle Management for Process product (specifically the Product Quality Management component) in version 6.2.4 is affected by a vulnerability. A low-privileged attacker with network access via HTTP can easily exploit this flaw to compromise the system. Successful explo...

CVE-2026-91519

A vulnerability exists in the Report Distribution component of Oracle PeopleSoft Enterprise PeopleTools (affected versions 8.61-8.63 ). This easily exploitable flaw allows a low-privileged attacker with network access via HTTP to compromise the system. Successful exploitation can result in unauth...

CVE-2026-91512

The Oracle Agile Product Lifecycle Management for Process product (part of Oracle Supply Chain), specifically the Product Quality Management component in version 6.2.4 , is vulnerable to a high-severity flaw. A high privileged attacker with network access via HTTP can exploit this vulnerability t...

CVE-2026-91511

A vulnerability exists in the Internal Operations component of the Oracle Purchasing product within Oracle E-Business Suite versions 12.2.3-12.2.15 . A low-privileged attacker with network access via HTTP can exploit this difficult-to-exploit vulnerability to compromise Oracle Purchasing. Due to ...

CVE-2026-91494

The Oracle Identity Manager Connector product within Oracle Fusion Middleware is vulnerable in versions 12.2.1.4.0 and 14.1.2.1.0 . Specifically, the LDAP Gateway component contains a vulnerability that allows an unauthenticated attacker with network access via TCP to compromise the system. This ...

CVE-2026-91487

A vulnerability exists in the Compiler component of Oracle Java SE . Affected versions include Oracle Java SE: 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1, 21.0.12.1; and Oracle GraalVM Enterprise Edition: 21.3.19.1.1. An unauthenticated attacker w...

CVE-2026-91487

Vulnerability in Oracle Java SE component: Compiler. Supported versions that are affected are Oracle Java SE: 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and 21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit...

CVE-2026-91482

The PeopleSoft Enterprise SCM Strategic Sourcing product (version 9.2 ) is vulnerable in the Bidder Registration component. A low-privileged attacker with network access via HTTP can exploit this vulnerability to compromise the system. Successful exploitation may result in unauthorized access to ...

CVE-2026-91480

A vulnerability exists in the Strategic Sourcing component of Oracle PeopleSoft Enterprise SCM (version 9.2 ). A low-privileged attacker with network access via HTTP can exploit this issue to compromise the product. Successful exploitation may lead to unauthorized access to critical data or compl...

CVE-2026-91477

A vulnerability exists in the Oracle JavaFX component of Oracle Java SE (specifically versions 25.0.4 and 27 ). This flaw allows an unauthenticated attacker with network access via multiple protocols to compromise Oracle JavaFX, though exploitation is difficult and requires human interaction . Im...

CVE-2026-91462

A vulnerability exists in the JGSS component of Oracle Java SE , Oracle GraalVM for JDK , and Oracle GraalVM Enterprise Edition . Affected versions include Oracle Java SE 8u503, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, and 27; Oracle GraalVM for JDK 17.0.20.1 and 21.0.12.1; and Oracle GraalVM E...

CVE-2026-91463

A vulnerability exists in the JGSS component of Oracle Java SE , Oracle GraalVM for JDK , and Oracle GraalVM Enterprise Edition . Affected versions include Oracle Java SE 8u503, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK 17.0.20.1, 21.0.12.1; and Oracle GraalVM Enterpri...

CVE-2026-91464

A vulnerability exists in the JGSS component of Oracle Java SE , Oracle GraalVM for JDK , and Oracle GraalVM Enterprise Edition . Specifically, it affects Oracle Java SE versions 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, and 27; Oracle GraalVM for JDK 17.0.20.1 and 21.0.12.1; ...