CVE-2026-91366

The Siebel CRM Cloud Applications product (specifically the Siebel Cloud Manager component) is affected by a vulnerability in supported versions 22.3-26.9 . An unauthenticated attacker with access to the physical communication segment attached to the hardware can exploit this difficult-to-exploit...

CVE-2026-91331

A vulnerability exists in the Common Application Objects component of Oracle PeopleSoft Enterprise CC Common Application Objects version 9.2 . A high-privileged attacker with network access via HTTP can exploit this flaw to gain unauthorized read , update , insert , or delete access to specific a...

CVE-2026-91275

A vulnerability exists in the Monitoring and Diagnostics SEC component of Oracle JD Edwards EnterpriseOne Tools (versions 9.2.0.0-9.2.26.5). A high privileged attacker with network access via SQL can exploit this difficult-to-exploit vulnerability to compromise the tools. Successful exploitation ...

CVE-2026-87389

A vulnerability exists in the Human Resources component of Oracle JD Edwards EnterpriseOne Human Resources Management (version 9.2 ). This issue allows an unauthenticated attacker with network access via HTTP to compromise the system with high complexity. Successful exploitation can result in una...

CVE-2026-87390

A vulnerability exists in the Content Server component of Oracle WebCenter Content (part of Oracle Fusion Middleware) in supported versions 12.2.1.4.0 and 14.1.2.0.0 . An unauthenticated attacker with network access via HTTP can exploit this issue, though the attack requires human interaction . S...

CVE-2026-87385

A vulnerability exists in the Human Resources component of Oracle JD Edwards EnterpriseOne Human Resources Management version 9.2 . This difficult to exploit vulnerability allows an unauthenticated attacker with network access via JDENET to compromise the system. Successful exploitation may resul...

CVE-2026-87367

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: JAXP. Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 an...

CVE-2026-87367

A vulnerability exists in the JAXP component of Oracle Java SE , Oracle GraalVM for JDK , and Oracle GraalVM Enterprise Edition . Specifically, affected versions include Oracle Java SE (8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27), Oracle GraalVM for JDK (17.0.20.1, 21.0.12.1...

CVE-2026-87361

The Oracle WebCenter Content product (component: Content Server ) of Oracle Fusion Middleware is affected by this vulnerability in version 12.2.1.4.0 . A low-privileged attacker with network access via HTTP can exploit this issue to compromise the product. Successful exploitation may lead to unau...

CVE-2026-87317

A vulnerability exists in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (specifically the Enterprise Infrastructure SEC component) affecting versions 9.2.0.0-9.2.26.5 . A difficult-to-exploit flaw allows an unauthenticated attacker with network access via SMTP to compromise the ...

CVE-2026-87294

A vulnerability exists in the Security component of Oracle Java SE , Oracle GraalVM for JDK , and Oracle GraalVM Enterprise Edition . Affected versions include Oracle Java SE 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, and 27; Oracle GraalVM for JDK 17.0.20.1 and 21.0.12.1; and ...

CVE-2026-87292

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Networking. Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK:...

CVE-2026-87292

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Networking. Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK:...

CVE-2026-83376

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: JSSE. Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 an...

CVE-2026-60819

A vulnerability exists in the Application Server - JRE component of Oracle PeopleSoft Enterprise PeopleTools (versions 8.61-8.63). An unauthenticated attacker with network access via SSH could exploit this difficult-to-exploit vulnerability to compromise the product, potentially gaining unauthori...

CVE-2026-101846

A vulnerability exists in the Internal Operations component of the Oracle Purchasing product within Oracle E-Business Suite (versions 12.2.3-12.2.15 ). This easily exploitable flaw allows a low-privileged attacker with network access via HTTP to compromise Oracle Purchasing, provided they can tri...

CVE-2026-101845

A vulnerability exists in the Internal Operations component of the Oracle Purchasing product within Oracle E-Business Suite (versions 12.2.3-12.2.15). This difficult to exploit vulnerability allows a low-privileged attacker with network access via HTTP to compromise Oracle Purchasing. Successful ...

CVE-2026-101740

A vulnerability exists in the Engineering Communication Interface component of the Oracle Agile Engineering Data Management product (version 6.2.1 ). A low-privileged attacker with local infrastructure access can exploit this difficult-to-exploit vulnerability to compromise the product. Successfu...

CVE-2026-101738

The Oracle Agile Engineering Data Management product (component: Engineering Communication Interface ) is affected by a vulnerability in version 6.2.1 . A low-privileged attacker with network access via HTTP can exploit this difficult-to-exploit vulnerability to compromise the system. Successful ...

CVE-2026-101720

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL component: Server: Connection Handling. Supported versions that are affected are MySQL Server: 26.7.0-26.7.1; MySQL Cluster: 26.7.0-26.7.1. Easily exploitable vulnerability allows unauthenticated attacker with network access...