CVE-2026-101372

Vulnerability in Oracle REST Data Services component: Core. Supported versions that are affected are 24.2.0-26.1.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle REST Data Services. Successful attacks of this vulnerability can...

CVE-2026-101374

Vulnerability in Oracle REST Data Services component: Backend-as-a-Service. Supported versions that are affected are 24.2.0-26.1.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle REST Data Services. Successful attacks of this...

CVE-2026-101373

Vulnerability in Oracle REST Data Services component: Core. Supported versions that are affected are 24.2.0-26.1.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle REST Data Services. Successful attacks require human interaction...

CVE-2026-101359

Vulnerability in Oracle REST Data Services component: Core. Supported versions that are affected are 24.2.0-26.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle REST Data Services. Successful attacks of this vulnerability can...

CVE-2026-101360

Vulnerability in Oracle REST Data Services component: Core. Supported versions that are affected are 24.2.0-26.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle REST Data Services. Successful attacks of this vulnerability can...

CVE-2026-101362

Vulnerability in Oracle REST Data Services component: Core. Supported versions that are affected are 24.2.0-26.1.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle REST Data Services. Successful attacks require human interaction...

CVE-2026-101361

Vulnerability in Oracle REST Data Services component: Core. Supported versions that are affected are 24.2.0-26.1.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle REST Data Services. Successful attacks of this vulnerability can...

CVE-2026-101363

Vulnerability in Oracle REST Data Services component: Graph QL. Supported versions that are affected are 24.2.0-26.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle REST Data Services. Successful attacks of this vulnerability c...

CVE-2026-101364

Vulnerability in Oracle REST Data Services component: Database Actions. Supported versions that are affected are 24.2.0-26.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle REST Data Services. Successful attacks require human...

CVE-2026-101366

Vulnerability in Oracle REST Data Services component: ADP. Supported versions that are affected are 24.2.0-26.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle REST Data Services. Successful attacks of this vulnerability can...

CVE-2026-101365

Vulnerability in Oracle REST Data Services component: Database Actions. Supported versions that are affected are 24.2.0-26.1.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle REST Data Services. Successful attacks of this...

dotnet8.0: Active Directory Federation Services (AD FS) Spoofing Vulnerability

Improper certificate validation in Active Directory Federation Services AD FS allows an unauthorized attacker to perform spoofing over a network...

CVE-2026-91609

A vulnerability exists in the Oracle REST Data Services (component: Graph QL ) affecting supported versions 24.2.0-26.2.1 . This easily exploitable flaw allows a low-privileged attacker with network access via HTTP to compromise the service. Successful exploitation can lead to unauthorized access...

CVE-2026-91610

A vulnerability exists in Oracle REST Data Services (component: General) affecting supported versions 24.2.0-26.2.2 . A low-privileged attacker with network access via HTTP can easily exploit this flaw to compromise the service. Successful exploitation may lead to a complete takeover of Oracle RE...

CVE-2026-91539

A vulnerability exists in the Presentation Services component of Oracle Business Intelligence Enterprise Edition (Oracle Analytics), specifically affecting version 12.2.1.4.0 . A low-privileged attacker with local access to the infrastructure can exploit this vulnerability to compromise the syste...

CVE-2026-91256

A vulnerability exists in the Services component of Oracle Solaris version 11.4 . A low-privileged attacker with network access via HTTP can exploit this flaw to compromise the system. Successful exploitation can lead to a complete Denial of Service (DoS) , characterized by a hang or frequently r...

CVE-2026-91252

A vulnerability exists in the Services component of Oracle Solaris version 11.4 . An unauthenticated attacker with network access via HTTP can easily exploit this flaw to cause a complete Denial of Service (DoS) by inducing a hang or a frequently repeatable crash. Additionally, the vulnerability ...

CVE-2026-91244

A vulnerability exists in the Services component of Oracle Solaris version 11.4 . This difficult to exploit flaw allows a low privileged attacker with logon access to the underlying infrastructure to compromise the system. Successful exploitation can result in a hang or a frequently repeatable cr...

CVE-2026-91208

A vulnerability exists in the Services component of Oracle Solaris version 11.4 . This difficult to exploit vulnerability allows an unauthenticated attacker with access to the infrastructure where Oracle Solaris executes to compromise the system. A successful attack can result in a hang or a freq...

CVE-2026-87422

A vulnerability exists in the Services component of Oracle Solaris version 11.4 . This difficult-to-exploit vulnerability allows an unauthenticated attacker with access to the underlying infrastructure to compromise the system. The attack requires human interaction from a user other than the atta...