CVE-2026-91553

A vulnerability exists in the Product Configurator component of Oracle PeopleSoft Enterprise FIN Product Configurator Brazil (version 9.1 ). This easily exploitable flaw allows a low-privileged attacker with local infrastructure access to compromise the product. Successful exploitation can lead t...

CVE-2026-91486

A vulnerability exists in the General Ledger component of Oracle PeopleSoft Enterprise FIN General Ledger Brazil (version 9.1 ). A low-privileged attacker with access to the infrastructure where the product executes can exploit this flaw to compromise the system. Successful exploitation may lead ...

CVE-2026-91471

A vulnerability exists in the BAM Framework component of Oracle PeopleSoft Enterprise CC Common Application Objects version 9.2 . An unauthenticated attacker with network access via HTTP can exploit this high-complexity vulnerability to gain unauthorized update, insert, or delete access to some a...

CVE-2026-91399

A vulnerability exists in the Web Access component of Oracle Construction and Engineering Primavera P6 Enterprise Project Portfolio Management . Affected versions include 21.12.0.0-21.12.21.9, 22.12.0.0-22.12.21.4, 23.12.0-23.12.20, 24.12.0-24.12.16, and 25.12.0-25.12.8. A low-privileged attacker...

CVE-2026-91395

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Utility. Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1; Oracle GraalVM for JDK: 17.0.20.1 and 21.0.12.1; Oracle GraalVM...

CVE-2026-91396

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Utility. Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1; Oracle GraalVM for JDK: 17.0.20.1 and 21.0.12.1; Oracle GraalVM...

CVE-2026-91396

A vulnerability exists in the Utility component of Oracle Java SE , Oracle GraalVM for JDK , and Oracle GraalVM Enterprise Edition . Affected versions include Oracle Java SE 8u503 , 8u503-perf , and 11.0.32.1 ; Oracle GraalVM for JDK 17.0.20.1 and 21.0.12.1 ; and Oracle GraalVM Enterprise Edition...

CVE-2026-91392

A vulnerability exists in the Open UI component of the Siebel CRM End User product within Oracle Siebel CRM . Affected versions include 17.0-26.9 . An unauthenticated attacker with network access via HTTP could exploit this difficult-to-exploit vulnerability to gain unauthorized update, insert, o...

CVE-2026-91381

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: 2D. Supported versions that are affected are Oracle Java SE: 8u503 and 8u503-perf; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated...

CVE-2026-91366

The Siebel CRM Cloud Applications product (specifically the Siebel Cloud Manager component) is affected by a vulnerability in supported versions 22.3-26.9 . An unauthenticated attacker with access to the physical communication segment attached to the hardware can exploit this difficult-to-exploit...

CVE-2026-91331

A vulnerability exists in the Common Application Objects component of Oracle PeopleSoft Enterprise CC Common Application Objects version 9.2 . A high-privileged attacker with network access via HTTP can exploit this flaw to gain unauthorized read , update , insert , or delete access to specific a...

CVE-2026-91275

A vulnerability exists in the Monitoring and Diagnostics SEC component of Oracle JD Edwards EnterpriseOne Tools (versions 9.2.0.0-9.2.26.5). A high privileged attacker with network access via SQL can exploit this difficult-to-exploit vulnerability to compromise the tools. Successful exploitation ...

CVE-2026-87390

A vulnerability exists in the Content Server component of Oracle WebCenter Content (part of Oracle Fusion Middleware) in supported versions 12.2.1.4.0 and 14.1.2.0.0 . An unauthenticated attacker with network access via HTTP can exploit this issue, though the attack requires human interaction . S...

CVE-2026-87389

A vulnerability exists in the Human Resources component of Oracle JD Edwards EnterpriseOne Human Resources Management (version 9.2 ). This issue allows an unauthenticated attacker with network access via HTTP to compromise the system with high complexity. Successful exploitation can result in una...

CVE-2026-87385

A vulnerability exists in the Human Resources component of Oracle JD Edwards EnterpriseOne Human Resources Management version 9.2 . This difficult to exploit vulnerability allows an unauthenticated attacker with network access via JDENET to compromise the system. Successful exploitation may resul...

CVE-2026-87367

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: JAXP. Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 an...

CVE-2026-87367

A vulnerability exists in the JAXP component of Oracle Java SE , Oracle GraalVM for JDK , and Oracle GraalVM Enterprise Edition . Specifically, affected versions include Oracle Java SE (8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27), Oracle GraalVM for JDK (17.0.20.1, 21.0.12.1...

CVE-2026-87361

The Oracle WebCenter Content product (component: Content Server ) of Oracle Fusion Middleware is affected by this vulnerability in version 12.2.1.4.0 . A low-privileged attacker with network access via HTTP can exploit this issue to compromise the product. Successful exploitation may lead to unau...

CVE-2026-87317

A vulnerability exists in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (specifically the Enterprise Infrastructure SEC component) affecting versions 9.2.0.0-9.2.26.5 . A difficult-to-exploit flaw allows an unauthenticated attacker with network access via SMTP to compromise the ...

CVE-2026-87294

A vulnerability exists in the Security component of Oracle Java SE , Oracle GraalVM for JDK , and Oracle GraalVM Enterprise Edition . Affected versions include Oracle Java SE 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, and 27; Oracle GraalVM for JDK 17.0.20.1 and 21.0.12.1; and ...