CVE-2026-91609

A vulnerability exists in the Oracle REST Data Services (component: Graph QL ) affecting supported versions 24.2.0-26.2.1 . This easily exploitable flaw allows a low-privileged attacker with network access via HTTP to compromise the service. Successful exploitation can lead to unauthorized access...

CVE-2026-91610

A vulnerability exists in Oracle REST Data Services (component: General) affecting supported versions 24.2.0-26.2.2 . A low-privileged attacker with network access via HTTP can easily exploit this flaw to compromise the service. Successful exploitation may lead to a complete takeover of Oracle RE...

CVE-2026-101494

A vulnerability in the Core component of Oracle REST Data Services affects supported versions 24.2.0-26.2.2 . A low-privileged attacker with network access via HTTP can easily exploit this flaw to compromise the service. Successful exploitation may lead to unauthorized access to critical data or ...

CVE-2026-101493

A vulnerability exists in the Core component of Oracle REST Data Services affecting versions 24.2.0-26.2.1 . A low-privileged attacker with network access via HTTP can exploit this issue to gain unauthorized read , update , insert , or delete access to some of the accessible data within Oracle RE...

CVE-2026-101386

A vulnerability exists in Oracle REST Data Services (component: Core ) affecting supported versions 24.2.0-26.1.0 . A low-privileged attacker with network access via HTTP can exploit this difficult-to-exploit flaw to compromise the service. Successful exploitation may result in unauthorized read ...

CVE-2026-101384

A vulnerability exists in the Core component of Oracle REST Data Services affecting versions 24.2.0-26.1.0 . A low-privileged attacker with network access via HTTP can exploit this to compromise the service, potentially impacting additional products due to a scope change . Successful exploitation...

CVE-2026-101385

A vulnerability exists in the Oracle REST Data Services (Core component) affecting supported versions 24.2.0-26.1.0 . A high privileged attacker with network access via HTTP can exploit this flaw to compromise the service. Successful exploitation may result in unauthorized creation, deletion, or ...

CVE-2026-101383

A vulnerability exists in the Core component of Oracle REST Data Services (affected versions 24.2.0-26.1.0 ). An unauthenticated attacker with network access via HTTP can compromise the service, though successful exploitation requires human interaction from a person other than the attacker. The i...

CVE-2026-101381

A vulnerability exists in Oracle REST Data Services (component: ADP ) affecting supported versions 24.2.0-26.1.0 . A low-privileged attacker with network access via HTTP can exploit this flaw to compromise the service, potentially gaining unauthorized read , update , insert , or delete access to ...

CVE-2026-101382

A vulnerability exists in the Core component of Oracle REST Data Services affecting supported versions 24.2.0-26.1.0 . This high-complexity vulnerability allows a low privileged attacker with network access via HTTP to compromise the service. Successful exploitation can lead to unauthorized read ...

CVE-2026-101378

A vulnerability exists in Oracle REST Data Services (component: ADP ) affecting supported versions 24.2.0-26.1.0 . An attacker with low privileges and network access via HTTP can exploit this flaw to compromise the service. Successful exploitation allows for unauthorized update, insert, or delete...

CVE-2026-101379

A vulnerability exists in Oracle REST Data Services (component: ADP ) in supported versions 24.2.0-26.1.0 . An unauthenticated attacker with network access via HTTP can exploit this flaw to compromise the service, potentially resulting in unauthorized read access to a subset of accessible data. W...

CVE-2026-101380

A vulnerability in the Oracle REST Data Services (component: ADP ) affects supported versions 24.2.0-26.1.0 . A low-privileged attacker with network access via HTTP can exploit this flaw to compromise the service, provided there is human interaction from a third party. Successful exploitation may...

CVE-2026-101375

A vulnerability exists in Oracle REST Data Services (component: Database Actions ) affecting supported versions 24.2.0-26.1.0 . A low-privileged attacker with network access via HTTP can exploit this flaw to compromise the service. Successful exploitation may lead to unauthorized read, update, in...

CVE-2026-101376

A vulnerability exists in the Database Actions component of Oracle REST Data Services (affected versions 24.2.0-26.1.0 ). A high-privileged attacker with network access via HTTP can exploit this to compromise the service. Impact includes unauthorized read , update , insert , or delete access to a...

CVE-2026-101377

A vulnerability exists in Oracle REST Data Services (component: Database Actions ) affecting supported versions 24.2.0-26.1.0 . A high-privileged attacker with network access via HTTP can exploit this issue to compromise the service. Successful exploitation may lead to a partial denial of service...

CVE-2026-101374

A vulnerability exists in Oracle REST Data Services (component: Backend-as-a-Service ) affecting supported versions 24.2.0-26.1.0 . An unauthenticated attacker with network access via HTTP can exploit this difficult-to-exploit vulnerability to compromise the service. Successful exploitation may l...

CVE-2026-101372

A vulnerability exists in the Oracle REST Data Services (component: Core ) affecting versions 24.2.0-26.1.0 . An unauthenticated attacker with network access via HTTP can exploit this difficulty-to-exploit vulnerability to compromise the service. Successful exploitation may lead to unauthorized r...

CVE-2026-101373

A vulnerability exists in Oracle REST Data Services (component: Core ) in supported versions 24.2.0-26.1.0 . A high-privileged attacker with network access via HTTP can compromise the service, but the attack requires human interaction from a third party. Successful exploitation can result in unau...

CVE-2026-101370

A vulnerability exists in the Core component of Oracle REST Data Services , affecting versions 24.2.0-26.1.0 . This high-complexity vulnerability allows an unauthenticated attacker with network access via HTTP to compromise the service, though it requires human interaction from a user other than ...