CVE-2026-87292

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Networking. Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK:...

CVE-2026-60819

A vulnerability exists in the Application Server - JRE component of Oracle PeopleSoft Enterprise PeopleTools (versions 8.61-8.63). An unauthenticated attacker with network access via SSH could exploit this difficult-to-exploit vulnerability to compromise the product, potentially gaining unauthori...

CVE-2026-101846

A vulnerability exists in the Internal Operations component of the Oracle Purchasing product within Oracle E-Business Suite (versions 12.2.3-12.2.15 ). This easily exploitable flaw allows a low-privileged attacker with network access via HTTP to compromise Oracle Purchasing, provided they can tri...

CVE-2026-101845

A vulnerability exists in the Internal Operations component of the Oracle Purchasing product within Oracle E-Business Suite (versions 12.2.3-12.2.15). This difficult to exploit vulnerability allows a low-privileged attacker with network access via HTTP to compromise Oracle Purchasing. Successful ...

CVE-2026-101740

A vulnerability exists in the Engineering Communication Interface component of the Oracle Agile Engineering Data Management product (version 6.2.1 ). A low-privileged attacker with local infrastructure access can exploit this difficult-to-exploit vulnerability to compromise the product. Successfu...

CVE-2026-101738

The Oracle Agile Engineering Data Management product (component: Engineering Communication Interface ) is affected by a vulnerability in version 6.2.1 . A low-privileged attacker with network access via HTTP can exploit this difficult-to-exploit vulnerability to compromise the system. Successful ...

CVE-2026-101720

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL component: Server: Connection Handling. Supported versions that are affected are MySQL Server: 26.7.0-26.7.1; MySQL Cluster: 26.7.0-26.7.1. Easily exploitable vulnerability allows unauthenticated attacker with network access...

CVE-2026-101720

Oracle MySQL MySQL Server and MySQL Cluster versions 26.7.0-26.7.1 are vulnerable to an easily exploitable flaw in the Connection Handling component. An unauthenticated attacker with network access via multiple protocols can compromise the system, potentially gaining unauthorized update, insert, ...

CVE-2026-101677

A vulnerability exists in the Connector/J component of the Oracle MySQL Connectors product, specifically affecting version 26.7.0 . An unauthenticated attacker with network access via multiple protocols can exploit this vulnerability, although successful execution requires human interaction from ...

CVE-2026-101647

A vulnerability exists in the Oracle iSetup product of Oracle E-Business Suite , specifically affecting the General Ledger Update Transform and Reports components in versions 12.2.3-12.2.15 . A low-privileged attacker with network access via HTTP can exploit this difficult-to-exploit vulnerabilit...

CVE-2026-101646

A vulnerability exists in the Oracle iSetup product within Oracle E-Business Suite , specifically affecting the General Ledger Update Transform and Reports components in versions 12.2.3-12.2.15 . A high-privileged attacker with network access via HTTP can exploit this flaw to compromise Oracle iS...

CVE-2026-101645

The Oracle iSetup product within Oracle E-Business Suite (specifically the General Ledger Update Transform and Reports components) is affected by a high-severity vulnerability in versions 12.2.3-12.2.15 . A low-privileged attacker with network access via HTTP could exploit this difficulty-to-expl...

CVE-2026-101600

A vulnerability exists in the Oracle TimesTen In-Memory Database (specifically the TimesTen IMDB component) affecting versions 26.1-26.1.1.3.0 . A low-privileged attacker with logon access to the infrastructure where the database executes can exploit this difficulty-to-exploit vulnerability to co...

CVE-2026-101595

A vulnerability exists in the Oracle Agile Product Lifecycle Management for Process product, specifically within the Supply Chain Relationship Mgmt component in version 6.2.4 . A low-privileged attacker with network access via HTTP can exploit this issue to compromise the system, though successfu...

CVE-2026-101592

A vulnerability exists in the Oracle Agile Product Lifecycle Management for Process product (specifically the Product Quality Management component) version 6.2.4 . A low-privileged attacker with network access via HTTP can exploit this vulnerability to compromise the system, though the attack req...

CVE-2026-101493

A vulnerability exists in the Core component of Oracle REST Data Services affecting versions 24.2.0-26.2.1 . A low-privileged attacker with network access via HTTP can exploit this issue to gain unauthorized read , update , insert , or delete access to some of the accessible data within Oracle RE...

CVE-2026-101386

A vulnerability exists in Oracle REST Data Services (component: Core ) affecting supported versions 24.2.0-26.1.0 . A low-privileged attacker with network access via HTTP can exploit this difficult-to-exploit flaw to compromise the service. Successful exploitation may result in unauthorized read ...

CVE-2026-101381

A vulnerability exists in Oracle REST Data Services (component: ADP ) affecting supported versions 24.2.0-26.1.0 . A low-privileged attacker with network access via HTTP can exploit this flaw to compromise the service, potentially gaining unauthorized read , update , insert , or delete access to ...

CVE-2026-101378

A vulnerability exists in Oracle REST Data Services (component: ADP ) affecting supported versions 24.2.0-26.1.0 . An attacker with low privileges and network access via HTTP can exploit this flaw to compromise the service. Successful exploitation allows for unauthorized update, insert, or delete...

CVE-2026-101376

A vulnerability exists in the Database Actions component of Oracle REST Data Services (affected versions 24.2.0-26.1.0 ). A high-privileged attacker with network access via HTTP can exploit this to compromise the service. Impact includes unauthorized read , update , insert , or delete access to a...