CVE-2026-101738

The Oracle Agile Engineering Data Management product (component: Engineering Communication Interface ) is affected by a vulnerability in version 6.2.1 . A low-privileged attacker with network access via HTTP can exploit this difficult-to-exploit vulnerability to compromise the system. Successful ...

CVE-2026-101720

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL component: Server: Connection Handling. Supported versions that are affected are MySQL Server: 26.7.0-26.7.1; MySQL Cluster: 26.7.0-26.7.1. Easily exploitable vulnerability allows unauthenticated attacker with network access...

CVE-2026-101720

Oracle MySQL MySQL Server and MySQL Cluster versions 26.7.0-26.7.1 are vulnerable to an easily exploitable flaw in the Connection Handling component. An unauthenticated attacker with network access via multiple protocols can compromise the system, potentially gaining unauthorized update, insert, ...

CVE-2026-101677

Vulnerability in the MySQL Connectors product of Oracle MySQL component: Connector/J. The supported version that is affected is 26.7.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Connectors. Successful attacks...

CVE-2026-101677

A vulnerability exists in the Connector/J component of the Oracle MySQL Connectors product, specifically affecting version 26.7.0 . An unauthenticated attacker with network access via multiple protocols can exploit this vulnerability, although successful execution requires human interaction from ...

CVE-2026-101647

A vulnerability exists in the Oracle iSetup product of Oracle E-Business Suite , specifically affecting the General Ledger Update Transform and Reports components in versions 12.2.3-12.2.15 . A low-privileged attacker with network access via HTTP can exploit this difficult-to-exploit vulnerabilit...

CVE-2026-101645

The Oracle iSetup product within Oracle E-Business Suite (specifically the General Ledger Update Transform and Reports components) is affected by a high-severity vulnerability in versions 12.2.3-12.2.15 . A low-privileged attacker with network access via HTTP could exploit this difficulty-to-expl...

CVE-2026-101646

A vulnerability exists in the Oracle iSetup product within Oracle E-Business Suite , specifically affecting the General Ledger Update Transform and Reports components in versions 12.2.3-12.2.15 . A high-privileged attacker with network access via HTTP can exploit this flaw to compromise Oracle iS...

CVE-2026-101600

A vulnerability exists in the Oracle TimesTen In-Memory Database (specifically the TimesTen IMDB component) affecting versions 26.1-26.1.1.3.0 . A low-privileged attacker with logon access to the infrastructure where the database executes can exploit this difficulty-to-exploit vulnerability to co...

CVE-2026-101595

A vulnerability exists in the Oracle Agile Product Lifecycle Management for Process product, specifically within the Supply Chain Relationship Mgmt component in version 6.2.4 . A low-privileged attacker with network access via HTTP can exploit this issue to compromise the system, though successfu...

CVE-2026-101592

A vulnerability exists in the Oracle Agile Product Lifecycle Management for Process product (specifically the Product Quality Management component) version 6.2.4 . A low-privileged attacker with network access via HTTP can exploit this vulnerability to compromise the system, though the attack req...

CVE-2026-101493

A vulnerability exists in the Core component of Oracle REST Data Services affecting versions 24.2.0-26.2.1 . A low-privileged attacker with network access via HTTP can exploit this issue to gain unauthorized read , update , insert , or delete access to some of the accessible data within Oracle RE...

CVE-2026-101386

A vulnerability exists in Oracle REST Data Services (component: Core ) affecting supported versions 24.2.0-26.1.0 . A low-privileged attacker with network access via HTTP can exploit this difficult-to-exploit flaw to compromise the service. Successful exploitation may result in unauthorized read ...

CVE-2026-101381

A vulnerability exists in Oracle REST Data Services (component: ADP ) affecting supported versions 24.2.0-26.1.0 . A low-privileged attacker with network access via HTTP can exploit this flaw to compromise the service, potentially gaining unauthorized read , update , insert , or delete access to ...

CVE-2026-101378

A vulnerability exists in Oracle REST Data Services (component: ADP ) affecting supported versions 24.2.0-26.1.0 . An attacker with low privileges and network access via HTTP can exploit this flaw to compromise the service. Successful exploitation allows for unauthorized update, insert, or delete...

CVE-2026-101375

A vulnerability exists in Oracle REST Data Services (component: Database Actions ) affecting supported versions 24.2.0-26.1.0 . A low-privileged attacker with network access via HTTP can exploit this flaw to compromise the service. Successful exploitation may lead to unauthorized read, update, in...

CVE-2026-101376

A vulnerability exists in the Database Actions component of Oracle REST Data Services (affected versions 24.2.0-26.1.0 ). A high-privileged attacker with network access via HTTP can exploit this to compromise the service. Impact includes unauthorized read , update , insert , or delete access to a...

CVE-2026-101373

A vulnerability exists in Oracle REST Data Services (component: Core ) in supported versions 24.2.0-26.1.0 . A high-privileged attacker with network access via HTTP can compromise the service, but the attack requires human interaction from a third party. Successful exploitation can result in unau...

CVE-2026-101371

A vulnerability exists in the Core component of Oracle REST Data Services affecting versions 24.2.0-26.1.0 . A high privileged attacker with network access via HTTP can compromise the service, though the attack is difficult to exploit and requires human interaction from a person other than the at...

CVE-2026-101367

A vulnerability exists in Oracle REST Data Services (component: ADP ) affecting supported versions 24.2.0-26.1.0 . A low privileged attacker with network access via HTTP can easily exploit this flaw to compromise the service. Successful exploitation allows for unauthorized read access to a subset...