{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/cpes/cpe2.3aoracleidentity_manager_connector12.2.1.4.0/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:oracle:identity_manager_connector:12.2.1.4.0:*:*:*:*:*:*:*","cpe:2.3:a:oracle:identity_manager_connector:14.1.2.1.0:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":9.9,"id":"CVE-2026-101446"},{"cvss":9.8,"id":"CVE-2026-101484"},{"cvss":9.8,"id":"CVE-2026-101499"},{"cvss":9.9,"id":"CVE-2026-101501"},{"cvss":9.9,"id":"CVE-2026-101503"},{"cvss":9.8,"id":"CVE-2026-101521"},{"cvss":9.9,"id":"CVE-2026-101528"},{"cvss":9.9,"id":"CVE-2026-101529"},{"cvss":9.8,"id":"CVE-2026-101537"},{"cvss":9.1,"id":"CVE-2026-101590"},{"cvss":9.1,"id":"CVE-2026-101634"},{"cvss":9.8,"id":"CVE-2026-101763"},{"cvss":9.1,"id":"CVE-2026-101765"},{"cvss":9.8,"id":"CVE-2026-101767"},{"cvss":9.1,"id":"CVE-2026-101808"},{"cvss":10,"id":"CVE-2026-101809"},{"cvss":9.8,"id":"CVE-2026-60432"},{"cvss":9.8,"id":"CVE-2026-83396"},{"cvss":9.8,"id":"CVE-2026-83397"},{"cvss":9.8,"id":"CVE-2026-83399"},{"cvss":9.8,"id":"CVE-2026-87251"},{"cvss":9.1,"id":"CVE-2026-87302"},{"cvss":10,"id":"CVE-2026-87337"},{"cvss":9.6,"id":"CVE-2026-87347"},{"cvss":9.8,"id":"CVE-2026-91214"},{"cvss":10,"id":"CVE-2026-91216"},{"cvss":9.6,"id":"CVE-2026-91218"},{"cvss":10,"id":"CVE-2026-91221"},{"cvss":9.9,"id":"CVE-2026-91222"},{"cvss":9.9,"id":"CVE-2026-91224"},{"cvss":9.1,"id":"CVE-2026-91225"},{"cvss":10,"id":"CVE-2026-91231"},{"cvss":9.9,"id":"CVE-2026-91232"},{"cvss":9.8,"id":"CVE-2026-91233"},{"cvss":9.8,"id":"CVE-2026-91234"},{"cvss":9.8,"id":"CVE-2026-91235"},{"cvss":9.1,"id":"CVE-2026-91241"},{"cvss":9.6,"id":"CVE-2026-91243"},{"cvss":9.9,"id":"CVE-2026-91250"},{"cvss":9.9,"id":"CVE-2026-91251"},{"cvss":9.1,"id":"CVE-2026-91265"},{"cvss":10,"id":"CVE-2026-91299"},{"cvss":9.1,"id":"CVE-2026-91305"},{"cvss":9.8,"id":"CVE-2026-91323"},{"cvss":9.1,"id":"CVE-2026-91341"},{"cvss":9.9,"id":"CVE-2026-91354"},{"cvss":9.8,"id":"CVE-2026-91408"},{"cvss":9.1,"id":"CVE-2026-91490"},{"cvss":9.8,"id":"CVE-2026-91495"},{"cvss":9.1,"id":"CVE-2026-91624"},{"cvss":9.9,"id":"CVE-2026-91637"},{"cvss":9.9,"id":"CVE-2026-91638"},{"cvss":9.3,"id":"CVE-2026-91644"},{"cvss":9.9,"id":"CVE-2026-91658"},{"cvss":9.9,"id":"CVE-2026-91663"},{"cvss":9.8,"id":"CVE-2026-91665"},{"cvss":7.6,"id":"CVE-2026-101398"},{"cvss":8,"id":"CVE-2026-101438"},{"cvss":7.1,"id":"CVE-2026-101447"},{"cvss":8.8,"id":"CVE-2026-101457"},{"cvss":7.5,"id":"CVE-2026-101460"},{"cvss":7.4,"id":"CVE-2026-101467"},{"cvss":8.6,"id":"CVE-2026-101479"},{"cvss":7.7,"id":"CVE-2026-101494"},{"cvss":8.8,"id":"CVE-2026-101495"},{"cvss":8.1,"id":"CVE-2026-101498"},{"cvss":7.7,"id":"CVE-2026-101506"},{"cvss":8.8,"id":"CVE-2026-101518"},{"cvss":7.5,"id":"CVE-2026-101520"},{"cvss":8.8,"id":"CVE-2026-101525"},{"cvss":8.8,"id":"CVE-2026-101526"},{"cvss":7,"id":"CVE-2026-101545"},{"cvss":8.8,"id":"CVE-2026-101557"},{"cvss":7.5,"id":"CVE-2026-101461"},{"cvss":7.5,"id":"CVE-2026-101599"},{"cvss":7.1,"id":"CVE-2026-101464"},{"id":"CVE-2026-91236"},{"id":"CVE-2026-91622"},{"id":"CVE-2026-101459"},{"id":"CVE-2026-101466"},{"id":"CVE-2026-101527"},{"id":"CVE-2026-101531"},{"id":"CVE-2026-101562"},{"id":"CVE-2026-101566"},{"id":"CVE-2026-101567"},{"id":"CVE-2026-101572"},{"id":"CVE-2026-91403"},{"id":"CVE-2026-114820"},{"id":"CVE-2026-91220"},{"id":"CVE-2026-91230"},{"id":"CVE-2026-91491"},{"id":"CVE-2026-91655"},{"id":"CVE-2026-91656"},{"id":"CVE-2026-101387"},{"id":"CVE-2026-101451"},{"id":"CVE-2026-101452"},{"id":"CVE-2026-101458"},{"id":"CVE-2026-101463"},{"id":"CVE-2026-101468"},{"id":"CVE-2026-101469"},{"id":"CVE-2026-101473"},{"id":"CVE-2026-101477"},{"id":"CVE-2026-101478"},{"id":"CVE-2026-101481"},{"id":"CVE-2026-101482"},{"id":"CVE-2026-101504"},{"id":"CVE-2026-101505"},{"id":"CVE-2026-101508"},{"id":"CVE-2026-101519"},{"id":"CVE-2026-101532"},{"id":"CVE-2026-101534"},{"id":"CVE-2026-101535"},{"id":"CVE-2026-101536"},{"id":"CVE-2026-101540"},{"id":"CVE-2026-101541"},{"id":"CVE-2026-101542"},{"id":"CVE-2026-101543"},{"id":"CVE-2026-101544"},{"id":"CVE-2026-101546"},{"id":"CVE-2026-101548"},{"id":"CVE-2026-101549"},{"id":"CVE-2026-101551"},{"id":"CVE-2026-101552"},{"id":"CVE-2026-101554"},{"id":"CVE-2026-101555"},{"id":"CVE-2026-101556"},{"id":"CVE-2026-101560"},{"id":"CVE-2026-101579"},{"id":"CVE-2026-101583"},{"id":"CVE-2026-101585"},{"id":"CVE-2026-101593"},{"id":"CVE-2026-101594"},{"id":"CVE-2026-101596"},{"id":"CVE-2026-101598"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":[],"_cs_severities":["high"],"_cs_tags":["roundup"],"_cs_type":"threat","_cs_vendors":["Oracle"],"content_html":"\u003cp\u003eThis roundup covers 133 Oracle security vulnerabilities. CVSS base scores range from 7.0 to 10.0. None are reported as actively exploited at the time of release. The issues affect APEX, Agile PLM, Agile Product Lifecycle Management for Process, Application Testing Suite, Autonomous Health Framework, Business Process Management Suite, Communications Billing and Revenue Management, Data Integrator, E-Business Suite, Enterprise Manager for Oracle Database, Essbase, Fusion Middleware, Helidon, Identity Manager Connector, JD Edwards EnterpriseOne Orchestrator, JD Edwards EnterpriseOne Tools, Java SE, Oracle Access Manager, Oracle Business Intelligence Enterprise Edition, Oracle Business Process Management Suite, Oracle Communications BRM - Elastic Charging Engine, Oracle Data Integrator, Oracle E-Business Suite, Oracle Enterprise Manager Base Platform, Oracle Enterprise Manager for Siebel, Oracle HTTP Server, Oracle Identity Manager, Oracle Identity Manager Connector, Oracle SOA Suite, Oracle VM VirtualBox, Outside In Technology, Product Lifecycle Analytics, REST Data Services, SOA Suite, Secure Backup, Siebel CRM, Siebel CRM Cloud Applications, Siebel CRM Deployment, Siebel CRM Development, Solaris, Trusted Answer Search, VM VirtualBox, WebCenter Content, WebCenter Sites, WebLogic Server.\u003c/p\u003e\n\u003ch2 id=\"summary\"\u003eSummary\u003c/h2\u003e\n\u003ctable\u003e\n\t\u003cthead\u003e\n\t\t\t\u003ctr\u003e\n\t\t\t\t\t\u003cth\u003eCVE\u003c/th\u003e\n\t\t\t\t\t\u003cth\u003eProduct\u003c/th\u003e\n\t\t\t\t\t\u003cth\u003eSeverity\u003c/th\u003e\n\t\t\t\t\t\u003cth\u003eCVSS\u003c/th\u003e\n\t\t\t\t\t\u003cth\u003eEPSS\u003c/th\u003e\n\t\t\t\t\t\u003cth\u003eKEV\u003c/th\u003e\n\t\t\t\t\t\u003cth\u003eSource\u003c/th\u003e\n\t\t\t\u003c/tr\u003e\n\t\u003c/thead\u003e\n\t\u003ctbody\u003e\n\t\t\t\u003ctr\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"#cve-2026-101446\"\u003eCVE-2026-101446\u003c/a\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eSiebel CRM Cloud Applications (17.0-26.9)\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eCritical\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e9.9\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eno\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-101446\"\u003eNVD\u003c/a\u003e (authoritative)\u003c/td\u003e\n\t\t\t\u003c/tr\u003e\n\t\t\t\u003ctr\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"#cve-2026-101484\"\u003eCVE-2026-101484\u003c/a\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eSecure Backup (19.1.0.0.0, 19.1.0.1.0)\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eCritical\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e9.8\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eno\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-101484\"\u003eNVD\u003c/a\u003e (authoritative)\u003c/td\u003e\n\t\t\t\u003c/tr\u003e\n\t\t\t\u003ctr\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"#cve-2026-101499\"\u003eCVE-2026-101499\u003c/a\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eWebCenter Sites (12.2.1.4.0, 14.1.2.0.0)\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eCritical\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e9.8\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eno\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-101499\"\u003eNVD\u003c/a\u003e (authoritative)\u003c/td\u003e\n\t\t\t\u003c/tr\u003e\n\t\t\t\u003ctr\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"#cve-2026-101501\"\u003eCVE-2026-101501\u003c/a\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eTrusted Answer Search (26.1)\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eCritical\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e9.9\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eno\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-101501\"\u003eNVD\u003c/a\u003e (authoritative)\u003c/td\u003e\n\t\t\t\u003c/tr\u003e\n\t\t\t\u003ctr\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"#cve-2026-101503\"\u003eCVE-2026-101503\u003c/a\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eTrusted Answer Search (26.1)\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eCritical\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e9.9\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eno\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-101503\"\u003eNVD\u003c/a\u003e (authoritative)\u003c/td\u003e\n\t\t\t\u003c/tr\u003e\n\t\t\t\u003ctr\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"#cve-2026-101521\"\u003eCVE-2026-101521\u003c/a\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eAPEX (24.1.0-24.1.21, 24.2.0-24.2.20, 26.1.0-26.1.4)\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eCritical\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e9.8\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eno\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-101521\"\u003eNVD\u003c/a\u003e (authoritative)\u003c/td\u003e\n\t\t\t\u003c/tr\u003e\n\t\t\t\u003ctr\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"#cve-2026-101528\"\u003eCVE-2026-101528\u003c/a\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003en/a\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eCritical\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e9.9\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eno\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-101528\"\u003eNVD\u003c/a\u003e (authoritative)\u003c/td\u003e\n\t\t\t\u003c/tr\u003e\n\t\t\t\u003ctr\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"#cve-2026-101529\"\u003eCVE-2026-101529\u003c/a\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eEnterprise Manager for Oracle Database (13.5, 24.1)\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eCritical\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e9.9\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eno\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-101529\"\u003eNVD\u003c/a\u003e (authoritative)\u003c/td\u003e\n\t\t\t\u003c/tr\u003e\n\t\t\t\u003ctr\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"#cve-2026-101537\"\u003eCVE-2026-101537\u003c/a\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eSolaris (11.4)\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eCritical\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e9.8\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eno\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-101537\"\u003eNVD\u003c/a\u003e (authoritative)\u003c/td\u003e\n\t\t\t\u003c/tr\u003e\n\t\t\t\u003ctr\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"#cve-2026-101590\"\u003eCVE-2026-101590\u003c/a\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eHelidon (4.0.0-4.5.5)\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eCritical\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e9.1\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eno\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-101590\"\u003eNVD\u003c/a\u003e (authoritative)\u003c/td\u003e\n\t\t\t\u003c/tr\u003e\n\t\t\t\u003ctr\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"#cve-2026-101634\"\u003eCVE-2026-101634\u003c/a\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eOracle E-Business Suite (12.2.3-12.2.15)\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eCritical\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e9.1\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eno\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-101634\"\u003eNVD\u003c/a\u003e (authoritative)\u003c/td\u003e\n\t\t\t\u003c/tr\u003e\n\t\t\t\u003ctr\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"#cve-2026-101763\"\u003eCVE-2026-101763\u003c/a\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eOracle Communications BRM - Elastic Charging Engine (15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0, 15.2.0.0.0)\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eCritical\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e9.8\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eno\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-101763\"\u003eNVD\u003c/a\u003e (authoritative)\u003c/td\u003e\n\t\t\t\u003c/tr\u003e\n\t\t\t\u003ctr\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"#cve-2026-101765\"\u003eCVE-2026-101765\u003c/a\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eCommunications Billing and Revenue Management (15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0, 15.2.0.0.0)\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eCritical\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e9.1\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eno\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-101765\"\u003eNVD\u003c/a\u003e (authoritative)\u003c/td\u003e\n\t\t\t\u003c/tr\u003e\n\t\t\t\u003ctr\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"#cve-2026-101767\"\u003eCVE-2026-101767\u003c/a\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eOracle E-Business Suite (12.2.3-12.2.15)\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eCritical\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e9.8\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eno\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-101767\"\u003eNVD\u003c/a\u003e (authoritative)\u003c/td\u003e\n\t\t\t\u003c/tr\u003e\n\t\t\t\u003ctr\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"#cve-2026-101808\"\u003eCVE-2026-101808\u003c/a\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eE-Business Suite (12.2.3-12.2.15)\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eCritical\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e9.1\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e0.43%\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eno\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-101808\"\u003eNVD\u003c/a\u003e (authoritative)\u003c/td\u003e\n\t\t\t\u003c/tr\u003e\n\t\t\t\u003ctr\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"#cve-2026-101809\"\u003eCVE-2026-101809\u003c/a\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eE-Business Suite (12.2.3-12.2.15)\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eCritical\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e10.0\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eno\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-101809\"\u003eNVD\u003c/a\u003e (authoritative)\u003c/td\u003e\n\t\t\t\u003c/tr\u003e\n\t\t\t\u003ctr\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"#cve-2026-60432\"\u003eCVE-2026-60432\u003c/a\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eSolaris (11.3, 11.4)\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eCritical\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e9.8\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eno\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-60432\"\u003eNVD\u003c/a\u003e (authoritative)\u003c/td\u003e\n\t\t\t\u003c/tr\u003e\n\t\t\t\u003ctr\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"#cve-2026-83396\"\u003eCVE-2026-83396\u003c/a\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eOracle Data Integrator (12.2.1.4.0, 14.1.2.0.0)\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eCritical\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e9.8\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eno\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-83396\"\u003eNVD\u003c/a\u003e (authoritative)\u003c/td\u003e\n\t\t\t\u003c/tr\u003e\n\t\t\t\u003ctr\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"#cve-2026-83397\"\u003eCVE-2026-83397\u003c/a\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eData Integrator (12.2.1.4.0, 14.1.2.0.0)\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eCritical\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e9.8\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eno\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-83397\"\u003eNVD\u003c/a\u003e (authoritative)\u003c/td\u003e\n\t\t\t\u003c/tr\u003e\n\t\t\t\u003ctr\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"#cve-2026-83399\"\u003eCVE-2026-83399\u003c/a\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eWebLogic Server (12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, 15.1.1.0.0)\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eCritical\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e9.8\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e0.52%\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eno\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-83399\"\u003eNVD\u003c/a\u003e (authoritative)\u003c/td\u003e\n\t\t\t\u003c/tr\u003e\n\t\t\t\u003ctr\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"#cve-2026-87251\"\u003eCVE-2026-87251\u003c/a\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eOracle Access Manager (12.2.1.4.0, 14.1.2.1.0)\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eCritical\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e9.8\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eno\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-87251\"\u003eNVD\u003c/a\u003e (authoritative)\u003c/td\u003e\n\t\t\t\u003c/tr\u003e\n\t\t\t\u003ctr\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"#cve-2026-87302\"\u003eCVE-2026-87302\u003c/a\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eWebLogic Server (12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, 15.1.1.0.0)\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eCritical\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e9.1\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eno\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-87302\"\u003eNVD\u003c/a\u003e (authoritative)\u003c/td\u003e\n\t\t\t\u003c/tr\u003e\n\t\t\t\u003ctr\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"#cve-2026-87337\"\u003eCVE-2026-87337\u003c/a\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eOracle Access Manager (12.2.1.4.0, 14.1.2.1.0)\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eCritical\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e10.0\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eno\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-87337\"\u003eNVD\u003c/a\u003e (authoritative)\u003c/td\u003e\n\t\t\t\u003c/tr\u003e\n\t\t\t\u003ctr\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"#cve-2026-87347\"\u003eCVE-2026-87347\u003c/a\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eOracle HTTP Server (12.2.1.4.0, 14.1.2.0.0)\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eCritical\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e9.6\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eno\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-87347\"\u003eNVD\u003c/a\u003e (authoritative)\u003c/td\u003e\n\t\t\t\u003c/tr\u003e\n\t\t\t\u003ctr\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"#cve-2026-91214\"\u003eCVE-2026-91214\u003c/a\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eSOA Suite (12.2.1.4.0, 14.1.2.0.0)\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eCritical\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e9.8\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eno\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-91214\"\u003eNVD\u003c/a\u003e (authoritative)\u003c/td\u003e\n\t\t\t\u003c/tr\u003e\n\t\t\t\u003ctr\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"#cve-2026-91216\"\u003eCVE-2026-91216\u003c/a\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eSOA Suite (12.2.1.4.0, 14.1.2.0.0)\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eCritical\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e10.0\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eno\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-91216\"\u003eNVD\u003c/a\u003e (authoritative)\u003c/td\u003e\n\t\t\t\u003c/tr\u003e\n\t\t\t\u003ctr\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"#cve-2026-91218\"\u003eCVE-2026-91218\u003c/a\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eOracle SOA Suite (12.2.1.4.0, 14.1.2.0.0)\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eCritical\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e9.6\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eno\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-91218\"\u003eNVD\u003c/a\u003e (authoritative)\u003c/td\u003e\n\t\t\t\u003c/tr\u003e\n\t\t\t\u003ctr\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"#cve-2026-91220\"\u003eCVE-2026-91220\u003c/a\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eOracle Business Process Management Suite (12.2.1.4.0, 14.1.2.0.0)\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eno\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-91220\"\u003eNVD\u003c/a\u003e (authoritative)\u003c/td\u003e\n\t\t\t\u003c/tr\u003e\n\t\t\t\u003ctr\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"#cve-2026-91221\"\u003eCVE-2026-91221\u003c/a\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eOracle SOA Suite (12.2.1.4.0, 14.1.2.0.0)\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eCritical\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e10.0\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eno\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-91221\"\u003eNVD\u003c/a\u003e (authoritative)\u003c/td\u003e\n\t\t\t\u003c/tr\u003e\n\t\t\t\u003ctr\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"#cve-2026-91222\"\u003eCVE-2026-91222\u003c/a\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eBusiness Process Management Suite (12.2.1.4.0, 14.1.2.0.0)\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eCritical\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e9.9\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eno\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-91222\"\u003eNVD\u003c/a\u003e (authoritative)\u003c/td\u003e\n\t\t\t\u003c/tr\u003e\n\t\t\t\u003ctr\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"#cve-2026-91224\"\u003eCVE-2026-91224\u003c/a\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eSOA Suite (12.2.1.4.0, 14.1.2.0.0)\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eCritical\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e9.9\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eno\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-91224\"\u003eNVD\u003c/a\u003e (authoritative)\u003c/td\u003e\n\t\t\t\u003c/tr\u003e\n\t\t\t\u003ctr\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"#cve-2026-91225\"\u003eCVE-2026-91225\u003c/a\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eSOA Suite (12.2.1.4.0, 14.1.2.0.0)\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eCritical\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e9.1\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eno\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-91225\"\u003eNVD\u003c/a\u003e (authoritative)\u003c/td\u003e\n\t\t\t\u003c/tr\u003e\n\t\t\t\u003ctr\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"#cve-2026-91230\"\u003eCVE-2026-91230\u003c/a\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eSOA Suite (12.2.1.4.0, 14.1.2.0.0)\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eno\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-91230\"\u003eNVD\u003c/a\u003e (authoritative)\u003c/td\u003e\n\t\t\t\u003c/tr\u003e\n\t\t\t\u003ctr\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"#cve-2026-91231\"\u003eCVE-2026-91231\u003c/a\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eSOA Suite (12.2.1.4.0, 14.1.2.0.0)\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eCritical\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e10.0\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eno\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-91231\"\u003eNVD\u003c/a\u003e (authoritative)\u003c/td\u003e\n\t\t\t\u003c/tr\u003e\n\t\t\t\u003ctr\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"#cve-2026-91232\"\u003eCVE-2026-91232\u003c/a\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eSOA Suite (12.2.1.4.0, 14.1.2.0.0)\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eCritical\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e9.9\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eno\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-91232\"\u003eNVD\u003c/a\u003e (authoritative)\u003c/td\u003e\n\t\t\t\u003c/tr\u003e\n\t\t\t\u003ctr\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"#cve-2026-91233\"\u003eCVE-2026-91233\u003c/a\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003en/a\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eCritical\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e9.8\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eno\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-91233\"\u003eNVD\u003c/a\u003e (authoritative)\u003c/td\u003e\n\t\t\t\u003c/tr\u003e\n\t\t\t\u003ctr\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"#cve-2026-91234\"\u003eCVE-2026-91234\u003c/a\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eSOA Suite (12.2.1.4.0, 14.1.2.0.0)\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eCritical\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e9.8\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eno\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-91234\"\u003eNVD\u003c/a\u003e (authoritative)\u003c/td\u003e\n\t\t\t\u003c/tr\u003e\n\t\t\t\u003ctr\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"#cve-2026-91235\"\u003eCVE-2026-91235\u003c/a\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eSOA Suite (12.2.1.4.0, 14.1.2.0.0)\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eCritical\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e9.8\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eno\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-91235\"\u003eNVD\u003c/a\u003e (authoritative)\u003c/td\u003e\n\t\t\t\u003c/tr\u003e\n\t\t\t\u003ctr\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"#cve-2026-91236\"\u003eCVE-2026-91236\u003c/a\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eSOA Suite (12.2.1.4.0, 14.1.2.0.0)\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eno\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-91236\"\u003eNVD\u003c/a\u003e (authoritative)\u003c/td\u003e\n\t\t\t\u003c/tr\u003e\n\t\t\t\u003ctr\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"#cve-2026-91241\"\u003eCVE-2026-91241\u003c/a\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eOracle Business Intelligence Enterprise Edition (8.2.0.0.0, 12.2.1.4.0, 26.01.0.0.0)\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eCritical\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e9.1\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eno\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-91241\"\u003eNVD\u003c/a\u003e (authoritative)\u003c/td\u003e\n\t\t\t\u003c/tr\u003e\n\t\t\t\u003ctr\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"#cve-2026-91243\"\u003eCVE-2026-91243\u003c/a\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eOracle Business Process Management Suite (12.2.1.4.0, 14.1.2.0.0)\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eCritical\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e9.6\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eno\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-91243\"\u003eNVD\u003c/a\u003e (authoritative)\u003c/td\u003e\n\t\t\t\u003c/tr\u003e\n\t\t\t\u003ctr\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"#cve-2026-91250\"\u003eCVE-2026-91250\u003c/a\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eSOA Suite (12.2.1.4.0, 14.1.2.0.0)\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eCritical\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e9.9\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eno\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-91250\"\u003eNVD\u003c/a\u003e (authoritative)\u003c/td\u003e\n\t\t\t\u003c/tr\u003e\n\t\t\t\u003ctr\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"#cve-2026-91251\"\u003eCVE-2026-91251\u003c/a\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eOracle SOA Suite (12.2.1.4.0, 14.1.2.0.0)\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eCritical\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e9.9\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eno\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-91251\"\u003eNVD\u003c/a\u003e (authoritative)\u003c/td\u003e\n\t\t\t\u003c/tr\u003e\n\t\t\t\u003ctr\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"#cve-2026-91265\"\u003eCVE-2026-91265\u003c/a\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eJD Edwards EnterpriseOne Tools (9.2.0.0-9.2.26.5)\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eCritical\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e9.1\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eno\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-91265\"\u003eNVD\u003c/a\u003e (authoritative)\u003c/td\u003e\n\t\t\t\u003c/tr\u003e\n\t\t\t\u003ctr\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"#cve-2026-91299\"\u003eCVE-2026-91299\u003c/a\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eJD Edwards EnterpriseOne Orchestrator (9.2.0.0-9.2.26.5)\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eCritical\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e10.0\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eno\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-91299\"\u003eNVD\u003c/a\u003e (authoritative)\u003c/td\u003e\n\t\t\t\u003c/tr\u003e\n\t\t\t\u003ctr\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"#cve-2026-91305\"\u003eCVE-2026-91305\u003c/a\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eJD Edwards EnterpriseOne Tools (9.2.0.0-9.2.26.5)\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eCritical\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e9.1\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eno\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-91305\"\u003eNVD\u003c/a\u003e (authoritative)\u003c/td\u003e\n\t\t\t\u003c/tr\u003e\n\t\t\t\u003ctr\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"#cve-2026-91323\"\u003eCVE-2026-91323\u003c/a\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eWebLogic Server (12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, 15.1.1.0.0)\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eCritical\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e9.8\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eno\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-91323\"\u003eNVD\u003c/a\u003e (authoritative)\u003c/td\u003e\n\t\t\t\u003c/tr\u003e\n\t\t\t\u003ctr\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"#cve-2026-91341\"\u003eCVE-2026-91341\u003c/a\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eOutside In Technology (8.5.8)\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eCritical\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e9.1\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eno\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-91341\"\u003eNVD\u003c/a\u003e (authoritative)\u003c/td\u003e\n\t\t\t\u003c/tr\u003e\n\t\t\t\u003ctr\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"#cve-2026-91354\"\u003eCVE-2026-91354\u003c/a\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eOutside In Technology (8.5.8)\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eCritical\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e9.9\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eno\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-91354\"\u003eNVD\u003c/a\u003e (authoritative)\u003c/td\u003e\n\t\t\t\u003c/tr\u003e\n\t\t\t\u003ctr\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"#cve-2026-91408\"\u003eCVE-2026-91408\u003c/a\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eOracle Identity Manager (12.2.1.4.0, 14.1.2.1.0)\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eCritical\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e9.8\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eno\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-91408\"\u003eNVD\u003c/a\u003e (authoritative)\u003c/td\u003e\n\t\t\t\u003c/tr\u003e\n\t\t\t\u003ctr\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"#cve-2026-91490\"\u003eCVE-2026-91490\u003c/a\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eIdentity Manager Connector (12.2.1.4.0, 14.1.2.1.0)\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eCritical\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e9.1\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eno\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-91490\"\u003eNVD\u003c/a\u003e (authoritative)\u003c/td\u003e\n\t\t\t\u003c/tr\u003e\n\t\t\t\u003ctr\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"#cve-2026-91491\"\u003eCVE-2026-91491\u003c/a\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eOracle Identity Manager Connector (12.2.1.4.0, 14.1.2.1.0)\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eno\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-91491\"\u003eNVD\u003c/a\u003e (authoritative)\u003c/td\u003e\n\t\t\t\u003c/tr\u003e\n\t\t\t\u003ctr\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"#cve-2026-91495\"\u003eCVE-2026-91495\u003c/a\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eWebCenter Content (12.2.1.4.0, 14.1.2.0.0)\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eCritical\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e9.8\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eno\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-91495\"\u003eNVD\u003c/a\u003e (authoritative)\u003c/td\u003e\n\t\t\t\u003c/tr\u003e\n\t\t\t\u003ctr\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"#cve-2026-91622\"\u003eCVE-2026-91622\u003c/a\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eAgile Product Lifecycle Management for Process (6.2.4)\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eno\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-91622\"\u003eNVD\u003c/a\u003e (authoritative)\u003c/td\u003e\n\t\t\t\u003c/tr\u003e\n\t\t\t\u003ctr\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"#cve-2026-91624\"\u003eCVE-2026-91624\u003c/a\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eAgile Product Lifecycle Management for Process (6.2.4)\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eCritical\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e9.1\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eno\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-91624\"\u003eNVD\u003c/a\u003e (authoritative)\u003c/td\u003e\n\t\t\t\u003c/tr\u003e\n\t\t\t\u003ctr\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"#cve-2026-91637\"\u003eCVE-2026-91637\u003c/a\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eEssbase (21.8.3.0.0)\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eCritical\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e9.9\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eno\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-91637\"\u003eNVD\u003c/a\u003e (authoritative)\u003c/td\u003e\n\t\t\t\u003c/tr\u003e\n\t\t\t\u003ctr\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"#cve-2026-91638\"\u003eCVE-2026-91638\u003c/a\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eEssbase (21.8.3.0.0)\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eCritical\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e9.9\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eno\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-91638\"\u003eNVD\u003c/a\u003e (authoritative)\u003c/td\u003e\n\t\t\t\u003c/tr\u003e\n\t\t\t\u003ctr\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"#cve-2026-91644\"\u003eCVE-2026-91644\u003c/a\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eEssbase (21.8.3.0.0)\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eCritical\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e9.3\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eno\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-91644\"\u003eNVD\u003c/a\u003e (authoritative)\u003c/td\u003e\n\t\t\t\u003c/tr\u003e\n\t\t\t\u003ctr\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"#cve-2026-91655\"\u003eCVE-2026-91655\u003c/a\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eEssbase (21.8.3.0.0)\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eno\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-91655\"\u003eNVD\u003c/a\u003e (authoritative)\u003c/td\u003e\n\t\t\t\u003c/tr\u003e\n\t\t\t\u003ctr\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"#cve-2026-91656\"\u003eCVE-2026-91656\u003c/a\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003en/a\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eno\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-91656\"\u003eNVD\u003c/a\u003e (authoritative)\u003c/td\u003e\n\t\t\t\u003c/tr\u003e\n\t\t\t\u003ctr\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"#cve-2026-91658\"\u003eCVE-2026-91658\u003c/a\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eEssbase (21.8.3.0.0)\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eCritical\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e9.9\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e0.29%\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eno\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-91658\"\u003eNVD\u003c/a\u003e (authoritative)\u003c/td\u003e\n\t\t\t\u003c/tr\u003e\n\t\t\t\u003ctr\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"#cve-2026-91663\"\u003eCVE-2026-91663\u003c/a\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eEssbase (21.8.3.0.0)\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eCritical\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e9.9\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eno\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-91663\"\u003eNVD\u003c/a\u003e (authoritative)\u003c/td\u003e\n\t\t\t\u003c/tr\u003e\n\t\t\t\u003ctr\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"#cve-2026-91665\"\u003eCVE-2026-91665\u003c/a\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eEssbase (21.8.3.0.0)\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eCritical\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e9.8\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eno\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-91665\"\u003eNVD\u003c/a\u003e (authoritative)\u003c/td\u003e\n\t\t\t\u003c/tr\u003e\n\t\t\t\u003ctr\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"#cve-2026-101387\"\u003eCVE-2026-101387\u003c/a\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eE-Business Suite (12.2.3-12.2.15)\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eno\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-101387\"\u003eNVD\u003c/a\u003e (authoritative)\u003c/td\u003e\n\t\t\t\u003c/tr\u003e\n\t\t\t\u003ctr\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"#cve-2026-101398\"\u003eCVE-2026-101398\u003c/a\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eOracle E-Business Suite (12.2.3-12.2.15)\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eHigh\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e7.6\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eno\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-101398\"\u003eNVD\u003c/a\u003e (authoritative)\u003c/td\u003e\n\t\t\t\u003c/tr\u003e\n\t\t\t\u003ctr\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"#cve-2026-101438\"\u003eCVE-2026-101438\u003c/a\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eSiebel CRM Cloud Applications (22.3-26.9)\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eHigh\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e8.0\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eno\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-101438\"\u003eNVD\u003c/a\u003e (authoritative)\u003c/td\u003e\n\t\t\t\u003c/tr\u003e\n\t\t\t\u003ctr\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"#cve-2026-101447\"\u003eCVE-2026-101447\u003c/a\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eSiebel CRM Development (25.12-26.9)\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eHigh\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e7.1\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eno\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-101447\"\u003eNVD\u003c/a\u003e (authoritative)\u003c/td\u003e\n\t\t\t\u003c/tr\u003e\n\t\t\t\u003ctr\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"#cve-2026-101451\"\u003eCVE-2026-101451\u003c/a\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eSiebel CRM (17.0-26.9)\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eno\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-101451\"\u003eNVD\u003c/a\u003e (authoritative)\u003c/td\u003e\n\t\t\t\u003c/tr\u003e\n\t\t\t\u003ctr\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"#cve-2026-101452\"\u003eCVE-2026-101452\u003c/a\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eAutonomous Health Framework (26.3-26.8)\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eno\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-101452\"\u003eNVD\u003c/a\u003e (authoritative)\u003c/td\u003e\n\t\t\t\u003c/tr\u003e\n\t\t\t\u003ctr\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"#cve-2026-101457\"\u003eCVE-2026-101457\u003c/a\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eSiebel CRM (17.0-26.9)\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eHigh\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e8.8\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eno\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-101457\"\u003eNVD\u003c/a\u003e (authoritative)\u003c/td\u003e\n\t\t\t\u003c/tr\u003e\n\t\t\t\u003ctr\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"#cve-2026-101458\"\u003eCVE-2026-101458\u003c/a\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eSiebel CRM (17.0-26.9)\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eno\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-101458\"\u003eNVD\u003c/a\u003e (authoritative)\u003c/td\u003e\n\t\t\t\u003c/tr\u003e\n\t\t\t\u003ctr\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"#cve-2026-101459\"\u003eCVE-2026-101459\u003c/a\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eSiebel CRM Deployment (17.0-26.9)\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eno\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-101459\"\u003eNVD\u003c/a\u003e (authoritative)\u003c/td\u003e\n\t\t\t\u003c/tr\u003e\n\t\t\t\u003ctr\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"#cve-2026-101460\"\u003eCVE-2026-101460\u003c/a\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eSiebel CRM (17.0-26.9)\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eHigh\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e7.5\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eno\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-101460\"\u003eNVD\u003c/a\u003e (authoritative)\u003c/td\u003e\n\t\t\t\u003c/tr\u003e\n\t\t\t\u003ctr\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"#cve-2026-101461\"\u003eCVE-2026-101461\u003c/a\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003en/a\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eHigh\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e7.5\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e0.40%\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eno\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-101461\"\u003eNVD\u003c/a\u003e (authoritative)\u003c/td\u003e\n\t\t\t\u003c/tr\u003e\n\t\t\t\u003ctr\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"#cve-2026-101463\"\u003eCVE-2026-101463\u003c/a\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eSiebel CRM (17.0-26.9)\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eno\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-101463\"\u003eNVD\u003c/a\u003e (authoritative)\u003c/td\u003e\n\t\t\t\u003c/tr\u003e\n\t\t\t\u003ctr\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"#cve-2026-101464\"\u003eCVE-2026-101464\u003c/a\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eSiebel CRM (17.0 - 26.9)\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eno\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-101464\"\u003eNVD\u003c/a\u003e (authoritative)\u003c/td\u003e\n\t\t\t\u003c/tr\u003e\n\t\t\t\u003ctr\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"#cve-2026-101466\"\u003eCVE-2026-101466\u003c/a\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eOracle E-Business Suite (12.2.3-12.2.15)\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eno\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-101466\"\u003eNVD\u003c/a\u003e (authoritative)\u003c/td\u003e\n\t\t\t\u003c/tr\u003e\n\t\t\t\u003ctr\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"#cve-2026-101467\"\u003eCVE-2026-101467\u003c/a\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eSiebel CRM (17.0-26.9)\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eHigh\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e7.4\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eno\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-101467\"\u003eNVD\u003c/a\u003e (authoritative)\u003c/td\u003e\n\t\t\t\u003c/tr\u003e\n\t\t\t\u003ctr\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"#cve-2026-101468\"\u003eCVE-2026-101468\u003c/a\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003en/a\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eno\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-101468\"\u003eNVD\u003c/a\u003e (authoritative)\u003c/td\u003e\n\t\t\t\u003c/tr\u003e\n\t\t\t\u003ctr\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"#cve-2026-101469\"\u003eCVE-2026-101469\u003c/a\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eProduct Lifecycle Analytics (3.6.1)\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eno\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-101469\"\u003eNVD\u003c/a\u003e (authoritative)\u003c/td\u003e\n\t\t\t\u003c/tr\u003e\n\t\t\t\u003ctr\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"#cve-2026-101473\"\u003eCVE-2026-101473\u003c/a\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eAgile Product Lifecycle Management for Process (6.2.4)\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eno\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-101473\"\u003eNVD\u003c/a\u003e (authoritative)\u003c/td\u003e\n\t\t\t\u003c/tr\u003e\n\t\t\t\u003ctr\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"#cve-2026-101477\"\u003eCVE-2026-101477\u003c/a\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eAutonomous Health Framework (26.3-26.8)\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eno\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-101477\"\u003eNVD\u003c/a\u003e (authoritative)\u003c/td\u003e\n\t\t\t\u003c/tr\u003e\n\t\t\t\u003ctr\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"#cve-2026-101478\"\u003eCVE-2026-101478\u003c/a\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eAutonomous Health Framework (26.3-26.8)\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eno\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-101478\"\u003eNVD\u003c/a\u003e (authoritative)\u003c/td\u003e\n\t\t\t\u003c/tr\u003e\n\t\t\t\u003ctr\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"#cve-2026-101479\"\u003eCVE-2026-101479\u003c/a\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eSecure Backup (19.1.0.0.0, 19.1.0.1.0)\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eHigh\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e8.6\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eno\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-101479\"\u003eNVD\u003c/a\u003e (authoritative)\u003c/td\u003e\n\t\t\t\u003c/tr\u003e\n\t\t\t\u003ctr\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"#cve-2026-101481\"\u003eCVE-2026-101481\u003c/a\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eSecure Backup (19.1.0.0.0, 19.1.0.1.0)\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eno\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-101481\"\u003eNVD\u003c/a\u003e (authoritative)\u003c/td\u003e\n\t\t\t\u003c/tr\u003e\n\t\t\t\u003ctr\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"#cve-2026-101482\"\u003eCVE-2026-101482\u003c/a\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eSecure Backup (19.1.0.0.0, 19.1.0.1.0)\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eno\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-101482\"\u003eNVD\u003c/a\u003e (authoritative)\u003c/td\u003e\n\t\t\t\u003c/tr\u003e\n\t\t\t\u003ctr\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"#cve-2026-101494\"\u003eCVE-2026-101494\u003c/a\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eREST Data Services (24.2.0-26.2.2)\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eHigh\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e7.7\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eno\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-101494\"\u003eNVD\u003c/a\u003e (authoritative)\u003c/td\u003e\n\t\t\t\u003c/tr\u003e\n\t\t\t\u003ctr\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"#cve-2026-101495\"\u003eCVE-2026-101495\u003c/a\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eSiebel CRM (17.0-26.9)\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eHigh\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e8.8\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eno\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-101495\"\u003eNVD\u003c/a\u003e (authoritative)\u003c/td\u003e\n\t\t\t\u003c/tr\u003e\n\t\t\t\u003ctr\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"#cve-2026-101498\"\u003eCVE-2026-101498\u003c/a\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eTrusted Answer Search (26.1)\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eHigh\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e8.1\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eno\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-101498\"\u003eNVD\u003c/a\u003e (authoritative)\u003c/td\u003e\n\t\t\t\u003c/tr\u003e\n\t\t\t\u003ctr\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"#cve-2026-101504\"\u003eCVE-2026-101504\u003c/a\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eTrusted Answer Search (26.1)\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eno\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-101504\"\u003eNVD\u003c/a\u003e (authoritative)\u003c/td\u003e\n\t\t\t\u003c/tr\u003e\n\t\t\t\u003ctr\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"#cve-2026-101505\"\u003eCVE-2026-101505\u003c/a\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eTrusted Answer Search (26.1)\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eno\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-101505\"\u003eNVD\u003c/a\u003e (authoritative)\u003c/td\u003e\n\t\t\t\u003c/tr\u003e\n\t\t\t\u003ctr\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"#cve-2026-101506\"\u003eCVE-2026-101506\u003c/a\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eTrusted Answer Search (26.1)\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eHigh\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e7.7\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eno\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-101506\"\u003eNVD\u003c/a\u003e (authoritative)\u003c/td\u003e\n\t\t\t\u003c/tr\u003e\n\t\t\t\u003ctr\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"#cve-2026-101508\"\u003eCVE-2026-101508\u003c/a\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eSiebel CRM (17.0-26.9)\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eno\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-101508\"\u003eNVD\u003c/a\u003e (authoritative)\u003c/td\u003e\n\t\t\t\u003c/tr\u003e\n\t\t\t\u003ctr\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"#cve-2026-101518\"\u003eCVE-2026-101518\u003c/a\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eOracle Enterprise Manager Base Platform (13.5, 24.1)\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eHigh\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e8.8\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eno\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-101518\"\u003eNVD\u003c/a\u003e (authoritative)\u003c/td\u003e\n\t\t\t\u003c/tr\u003e\n\t\t\t\u003ctr\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"#cve-2026-101519\"\u003eCVE-2026-101519\u003c/a\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eOracle E-Business Suite (12.2.3-12.2.15)\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eno\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-101519\"\u003eNVD\u003c/a\u003e (authoritative)\u003c/td\u003e\n\t\t\t\u003c/tr\u003e\n\t\t\t\u003ctr\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"#cve-2026-101520\"\u003eCVE-2026-101520\u003c/a\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eFusion Middleware (12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, 14.1.2.1.0, 15.1.1.0.0)\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eHigh\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e7.5\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eno\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-101520\"\u003eNVD\u003c/a\u003e (authoritative)\u003c/td\u003e\n\t\t\t\u003c/tr\u003e\n\t\t\t\u003ctr\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"#cve-2026-101525\"\u003eCVE-2026-101525\u003c/a\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eOracle Enterprise Manager for Siebel (13.5, 24.1)\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eHigh\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e8.8\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eno\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-101525\"\u003eNVD\u003c/a\u003e (authoritative)\u003c/td\u003e\n\t\t\t\u003c/tr\u003e\n\t\t\t\u003ctr\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"#cve-2026-101526\"\u003eCVE-2026-101526\u003c/a\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003en/a\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eHigh\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e8.8\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eno\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-101526\"\u003eNVD\u003c/a\u003e (authoritative)\u003c/td\u003e\n\t\t\t\u003c/tr\u003e\n\t\t\t\u003ctr\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"#cve-2026-101527\"\u003eCVE-2026-101527\u003c/a\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003en/a\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eno\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-101527\"\u003eNVD\u003c/a\u003e (authoritative)\u003c/td\u003e\n\t\t\t\u003c/tr\u003e\n\t\t\t\u003ctr\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"#cve-2026-101531\"\u003eCVE-2026-101531\u003c/a\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eOracle Business Intelligence Enterprise Edition (8.2.0.0.0, 26.01.0.0.0)\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eno\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-101531\"\u003eNVD\u003c/a\u003e (authoritative)\u003c/td\u003e\n\t\t\t\u003c/tr\u003e\n\t\t\t\u003ctr\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"#cve-2026-101532\"\u003eCVE-2026-101532\u003c/a\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eOracle E-Business Suite (12.2.3-12.2.15)\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eno\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-101532\"\u003eNVD\u003c/a\u003e (authoritative)\u003c/td\u003e\n\t\t\t\u003c/tr\u003e\n\t\t\t\u003ctr\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"#cve-2026-101534\"\u003eCVE-2026-101534\u003c/a\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eOracle E-Business Suite (12.2.3-12.2.15)\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eno\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-101534\"\u003eNVD\u003c/a\u003e (authoritative)\u003c/td\u003e\n\t\t\t\u003c/tr\u003e\n\t\t\t\u003ctr\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"#cve-2026-101535\"\u003eCVE-2026-101535\u003c/a\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eOracle E-Business Suite (12.2.3-12.2.15)\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eno\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-101535\"\u003eNVD\u003c/a\u003e (authoritative)\u003c/td\u003e\n\t\t\t\u003c/tr\u003e\n\t\t\t\u003ctr\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"#cve-2026-101536\"\u003eCVE-2026-101536\u003c/a\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eE-Business Suite (12.2.3-12.2.15)\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eno\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-101536\"\u003eNVD\u003c/a\u003e (authoritative)\u003c/td\u003e\n\t\t\t\u003c/tr\u003e\n\t\t\t\u003ctr\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"#cve-2026-101540\"\u003eCVE-2026-101540\u003c/a\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eE-Business Suite (12.2.3-12.2.15)\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eno\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-101540\"\u003eNVD\u003c/a\u003e (authoritative)\u003c/td\u003e\n\t\t\t\u003c/tr\u003e\n\t\t\t\u003ctr\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"#cve-2026-101541\"\u003eCVE-2026-101541\u003c/a\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eOracle E-Business Suite (12.2.3-12.2.15)\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eno\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-101541\"\u003eNVD\u003c/a\u003e (authoritative)\u003c/td\u003e\n\t\t\t\u003c/tr\u003e\n\t\t\t\u003ctr\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"#cve-2026-101542\"\u003eCVE-2026-101542\u003c/a\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eOracle E-Business Suite (12.2.3-12.2.15)\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eno\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-101542\"\u003eNVD\u003c/a\u003e (authoritative)\u003c/td\u003e\n\t\t\t\u003c/tr\u003e\n\t\t\t\u003ctr\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"#cve-2026-101543\"\u003eCVE-2026-101543\u003c/a\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eOracle E-Business Suite (12.2.3-12.2.15)\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eno\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-101543\"\u003eNVD\u003c/a\u003e (authoritative)\u003c/td\u003e\n\t\t\t\u003c/tr\u003e\n\t\t\t\u003ctr\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"#cve-2026-101544\"\u003eCVE-2026-101544\u003c/a\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eOracle E-Business Suite (12.2.3-12.2.15)\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eno\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-101544\"\u003eNVD\u003c/a\u003e (authoritative)\u003c/td\u003e\n\t\t\t\u003c/tr\u003e\n\t\t\t\u003ctr\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"#cve-2026-101545\"\u003eCVE-2026-101545\u003c/a\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eE-Business Suite (12.2.3-12.2.15)\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eHigh\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e7.0\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eno\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-101545\"\u003eNVD\u003c/a\u003e (authoritative)\u003c/td\u003e\n\t\t\t\u003c/tr\u003e\n\t\t\t\u003ctr\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"#cve-2026-101546\"\u003eCVE-2026-101546\u003c/a\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eE-Business Suite (12.2.3-12.2.15)\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eno\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-101546\"\u003eNVD\u003c/a\u003e (authoritative)\u003c/td\u003e\n\t\t\t\u003c/tr\u003e\n\t\t\t\u003ctr\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"#cve-2026-101548\"\u003eCVE-2026-101548\u003c/a\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eApplication Testing Suite (13.3.0.1)\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eno\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-101548\"\u003eNVD\u003c/a\u003e (authoritative)\u003c/td\u003e\n\t\t\t\u003c/tr\u003e\n\t\t\t\u003ctr\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"#cve-2026-101549\"\u003eCVE-2026-101549\u003c/a\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eApplication Testing Suite (13.3.0.1)\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eno\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-101549\"\u003eNVD\u003c/a\u003e (authoritative)\u003c/td\u003e\n\t\t\t\u003c/tr\u003e\n\t\t\t\u003ctr\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"#cve-2026-101551\"\u003eCVE-2026-101551\u003c/a\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eE-Business Suite (12.2.3-12.2.15)\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eno\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-101551\"\u003eNVD\u003c/a\u003e (authoritative)\u003c/td\u003e\n\t\t\t\u003c/tr\u003e\n\t\t\t\u003ctr\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"#cve-2026-101552\"\u003eCVE-2026-101552\u003c/a\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eE-Business Suite (12.2.3-12.2.15)\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eno\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-101552\"\u003eNVD\u003c/a\u003e (authoritative)\u003c/td\u003e\n\t\t\t\u003c/tr\u003e\n\t\t\t\u003ctr\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"#cve-2026-101554\"\u003eCVE-2026-101554\u003c/a\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eOracle E-Business Suite (12.2.3-12.2.15)\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eno\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-101554\"\u003eNVD\u003c/a\u003e (authoritative)\u003c/td\u003e\n\t\t\t\u003c/tr\u003e\n\t\t\t\u003ctr\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"#cve-2026-101555\"\u003eCVE-2026-101555\u003c/a\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eE-Business Suite (12.2.3-12.2.15)\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eno\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-101555\"\u003eNVD\u003c/a\u003e (authoritative)\u003c/td\u003e\n\t\t\t\u003c/tr\u003e\n\t\t\t\u003ctr\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"#cve-2026-101556\"\u003eCVE-2026-101556\u003c/a\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eOracle E-Business Suite (12.2.3-12.2.15)\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eno\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-101556\"\u003eNVD\u003c/a\u003e (authoritative)\u003c/td\u003e\n\t\t\t\u003c/tr\u003e\n\t\t\t\u003ctr\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"#cve-2026-101557\"\u003eCVE-2026-101557\u003c/a\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eE-Business Suite (12.2.3-12.2.15)\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eHigh\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e8.8\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eno\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-101557\"\u003eNVD\u003c/a\u003e (authoritative)\u003c/td\u003e\n\t\t\t\u003c/tr\u003e\n\t\t\t\u003ctr\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"#cve-2026-101560\"\u003eCVE-2026-101560\u003c/a\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003en/a\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eno\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-101560\"\u003eNVD\u003c/a\u003e (authoritative)\u003c/td\u003e\n\t\t\t\u003c/tr\u003e\n\t\t\t\u003ctr\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"#cve-2026-101562\"\u003eCVE-2026-101562\u003c/a\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eAgile PLM (2.6)\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eno\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-101562\"\u003eNVD\u003c/a\u003e (authoritative)\u003c/td\u003e\n\t\t\t\u003c/tr\u003e\n\t\t\t\u003ctr\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"#cve-2026-101566\"\u003eCVE-2026-101566\u003c/a\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eE-Business Suite (12.2.3-12.2.15)\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eno\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-101566\"\u003eNVD\u003c/a\u003e (authoritative)\u003c/td\u003e\n\t\t\t\u003c/tr\u003e\n\t\t\t\u003ctr\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"#cve-2026-101567\"\u003eCVE-2026-101567\u003c/a\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eOracle E-Business Suite (12.2.3-12.2.15)\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eno\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-101567\"\u003eNVD\u003c/a\u003e (authoritative)\u003c/td\u003e\n\t\t\t\u003c/tr\u003e\n\t\t\t\u003ctr\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"#cve-2026-101572\"\u003eCVE-2026-101572\u003c/a\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eHelidon (4.0.0-4.5.5, 27.0.0)\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eno\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-101572\"\u003eNVD\u003c/a\u003e (authoritative)\u003c/td\u003e\n\t\t\t\u003c/tr\u003e\n\t\t\t\u003ctr\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"#cve-2026-101579\"\u003eCVE-2026-101579\u003c/a\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eHelidon (3.0.0-3.2.21)\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eno\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-101579\"\u003eNVD\u003c/a\u003e (authoritative)\u003c/td\u003e\n\t\t\t\u003c/tr\u003e\n\t\t\t\u003ctr\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"#cve-2026-101583\"\u003eCVE-2026-101583\u003c/a\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eHelidon (4.0.0-4.5.5)\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eno\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-101583\"\u003eNVD\u003c/a\u003e (authoritative)\u003c/td\u003e\n\t\t\t\u003c/tr\u003e\n\t\t\t\u003ctr\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"#cve-2026-101585\"\u003eCVE-2026-101585\u003c/a\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eHelidon (3.0.0-3.2.21)\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eno\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-101585\"\u003eNVD\u003c/a\u003e (authoritative)\u003c/td\u003e\n\t\t\t\u003c/tr\u003e\n\t\t\t\u003ctr\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"#cve-2026-101593\"\u003eCVE-2026-101593\u003c/a\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eAgile Product Lifecycle Management for Process (6.2.4)\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eno\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-101593\"\u003eNVD\u003c/a\u003e (authoritative)\u003c/td\u003e\n\t\t\t\u003c/tr\u003e\n\t\t\t\u003ctr\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"#cve-2026-101594\"\u003eCVE-2026-101594\u003c/a\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eAgile Product Lifecycle Management for Process (6.2.4)\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eno\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-101594\"\u003eNVD\u003c/a\u003e (authoritative)\u003c/td\u003e\n\t\t\t\u003c/tr\u003e\n\t\t\t\u003ctr\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"#cve-2026-101596\"\u003eCVE-2026-101596\u003c/a\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eAgile Product Lifecycle Management for Process (6.2.4)\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eno\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-101596\"\u003eNVD\u003c/a\u003e (authoritative)\u003c/td\u003e\n\t\t\t\u003c/tr\u003e\n\t\t\t\u003ctr\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"#cve-2026-101598\"\u003eCVE-2026-101598\u003c/a\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eVM VirtualBox (7.2.20)\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eno\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-101598\"\u003eNVD\u003c/a\u003e (authoritative)\u003c/td\u003e\n\t\t\t\u003c/tr\u003e\n\t\t\t\u003ctr\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"#cve-2026-101599\"\u003eCVE-2026-101599\u003c/a\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eOracle VM VirtualBox (7.2.20)\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eHigh\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e7.5\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e0.12%\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eno\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-101599\"\u003eNVD\u003c/a\u003e (authoritative)\u003c/td\u003e\n\t\t\t\u003c/tr\u003e\n\t\t\t\u003ctr\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"#cve-2026-91403\"\u003eCVE-2026-91403\u003c/a\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eJava SE (8u511, 8u511-perf, 11.0.33, 17.0.21, 21.0.13, 25.0.5, 27.0.1)\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eno\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-91403\"\u003eNVD\u003c/a\u003e (authoritative)\u003c/td\u003e\n\t\t\t\u003c/tr\u003e\n\t\u003c/tbody\u003e\n\u003c/table\u003e\n\u003ch2 id=\"cve-2026-101446\"\u003eCVE-2026-101446\u003c/h2\u003e\n\u003cp\u003eCVE-2026-101446 is a critical vulnerability in Oracle Siebel CRM Cloud Applications (specifically the Siebel Cloud Manager component) affecting versions 17.0 through 26.9. The flaw allows a low-privileged, network-adjacent attacker to achieve full system takeover via HTTP requests. Due to the high CVSS score of 9.9 and the potential for scope change, this vulnerability poses a severe risk of compromising the confidentiality, integrity, and availability of the application.\u003c/p\u003e\n\u003cp\u003eAffected products:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eSiebel CRM Cloud Applications (17.0-26.9)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eSource: \u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-101446\"\u003ehttps://nvd.nist.gov/vuln/detail/CVE-2026-101446\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eRelated in this roundup: \u003ca href=\"#cve-2026-101438\"\u003eCVE-2026-101438\u003c/a\u003e.\u003c/p\u003e\n\u003ch2 id=\"cve-2026-101484\"\u003eCVE-2026-101484\u003c/h2\u003e\n\u003cp\u003eCVE-2026-101484 is a critical vulnerability in Oracle Secure Backup's Backup and Restore component affecting versions 19.1.0.0.0 and 19.1.0.1.0. An unauthenticated attacker with network access via TCP can exploit this flaw to achieve full system takeover, resulting in a CVSS score of 9.8.\u003c/p\u003e\n\u003cp\u003eAffected products:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eSecure Backup (19.1.0.0.0, 19.1.0.1.0)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eSource: \u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-101484\"\u003ehttps://nvd.nist.gov/vuln/detail/CVE-2026-101484\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eRelated in this roundup: \u003ca href=\"#cve-2026-101479\"\u003eCVE-2026-101479\u003c/a\u003e, \u003ca href=\"#cve-2026-101481\"\u003eCVE-2026-101481\u003c/a\u003e, \u003ca href=\"#cve-2026-101482\"\u003eCVE-2026-101482\u003c/a\u003e.\u003c/p\u003e\n\u003ch2 id=\"cve-2026-101499\"\u003eCVE-2026-101499\u003c/h2\u003e\n\u003cp\u003eOracle WebCenter Sites versions 12.2.1.4.0 and 14.1.2.0.0 contain a critical vulnerability allowing unauthenticated remote attackers to achieve full system takeover via HTTP requests. The vulnerability is highly exploitable with low attack complexity, requiring no user interaction and having high impact on confidentiality, integrity, and availability.\u003c/p\u003e\n\u003cp\u003eAffected products:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eWebCenter Sites (12.2.1.4.0, 14.1.2.0.0)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eSource: \u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-101499\"\u003ehttps://nvd.nist.gov/vuln/detail/CVE-2026-101499\u003c/a\u003e\u003c/p\u003e\n\u003ch2 id=\"cve-2026-101501\"\u003eCVE-2026-101501\u003c/h2\u003e\n\u003cp\u003eCVE-2026-101501 is a critical vulnerability in the PLSQL package of Oracle Trusted Answer Search version 26.1. A low-privileged attacker with network access via Oracle Net can exploit this vulnerability to achieve unauthorized read, write, and deletion of data, as well as cause a denial-of-service (hang or crash). The vulnerability involves a scope change, meaning it can impact other products in the environment.\u003c/p\u003e\n\u003cp\u003eAffected products:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eTrusted Answer Search (26.1)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eSource: \u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-101501\"\u003ehttps://nvd.nist.gov/vuln/detail/CVE-2026-101501\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eRelated in this roundup: \u003ca href=\"#cve-2026-101503\"\u003eCVE-2026-101503\u003c/a\u003e, \u003ca href=\"#cve-2026-101498\"\u003eCVE-2026-101498\u003c/a\u003e, \u003ca href=\"#cve-2026-101504\"\u003eCVE-2026-101504\u003c/a\u003e, \u003ca href=\"#cve-2026-101505\"\u003eCVE-2026-101505\u003c/a\u003e, \u003ca href=\"#cve-2026-101506\"\u003eCVE-2026-101506\u003c/a\u003e.\u003c/p\u003e\n\u003ch2 id=\"cve-2026-101503\"\u003eCVE-2026-101503\u003c/h2\u003e\n\u003cp\u003eCVE-2026-101503 is a critical, easily exploitable vulnerability in the PLSQL package of Oracle Trusted Answer Search version 26.1. A low-privileged attacker with network access via Oracle Net can compromise the application, potentially resulting in full system takeover and impacting the confidentiality, integrity, and availability of the target environment. The vulnerability includes a scope change, meaning exploitation can affect additional products beyond the primary target.\u003c/p\u003e\n\u003cp\u003eAffected products:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eTrusted Answer Search (26.1)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eSource: \u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-101503\"\u003ehttps://nvd.nist.gov/vuln/detail/CVE-2026-101503\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eRelated in this roundup: \u003ca href=\"#cve-2026-101501\"\u003eCVE-2026-101501\u003c/a\u003e, \u003ca href=\"#cve-2026-101498\"\u003eCVE-2026-101498\u003c/a\u003e, \u003ca href=\"#cve-2026-101504\"\u003eCVE-2026-101504\u003c/a\u003e, \u003ca href=\"#cve-2026-101505\"\u003eCVE-2026-101505\u003c/a\u003e, \u003ca href=\"#cve-2026-101506\"\u003eCVE-2026-101506\u003c/a\u003e.\u003c/p\u003e\n\u003ch2 id=\"cve-2026-101521\"\u003eCVE-2026-101521\u003c/h2\u003e\n\u003cp\u003eOracle APEX is vulnerable to an unauthenticated, remotely exploitable issue that allows a network-based attacker to fully compromise the application. The vulnerability has a CVSS 3.1 base score of 9.8, indicating severe impact on confidentiality, integrity, and availability.\u003c/p\u003e\n\u003cp\u003eAffected products:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eAPEX (24.1.0-24.1.21, 24.2.0-24.2.20, 26.1.0-26.1.4)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eSource: \u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-101521\"\u003ehttps://nvd.nist.gov/vuln/detail/CVE-2026-101521\u003c/a\u003e\u003c/p\u003e\n\u003ch2 id=\"cve-2026-101528\"\u003eCVE-2026-101528\u003c/h2\u003e\n\u003cp\u003eCVE-2026-101528 is a critical vulnerability in the Data Guard Management component of Oracle Enterprise Manager for Oracle Database. The vulnerability is network-exploitable via HTTP by a low-privileged attacker, potentially leading to a full system takeover and impacting other products due to a scope change (CVSS 9.9).\u003c/p\u003e\n\u003cp\u003eSource: \u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-101528\"\u003ehttps://nvd.nist.gov/vuln/detail/CVE-2026-101528\u003c/a\u003e\u003c/p\u003e\n\u003ch2 id=\"cve-2026-101529\"\u003eCVE-2026-101529\u003c/h2\u003e\n\u003cp\u003eCVE-2026-101529 is a critical vulnerability in the Data Guard Management component of Oracle Enterprise Manager for Oracle Database (versions 13.5 and 24.1). An attacker with low-level privileges can exploit this vulnerability over HTTP to achieve a full system compromise. The vulnerability is characterized by a scope change, allowing the attack to impact additional products, and holds a CVSS 3.1 base score of 9.9.\u003c/p\u003e\n\u003cp\u003eAffected products:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eEnterprise Manager for Oracle Database (13.5, 24.1)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eSource: \u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-101529\"\u003ehttps://nvd.nist.gov/vuln/detail/CVE-2026-101529\u003c/a\u003e\u003c/p\u003e\n\u003ch2 id=\"cve-2026-101537\"\u003eCVE-2026-101537\u003c/h2\u003e\n\u003cp\u003eOracle Solaris 11.4 contains a critical vulnerability in the Utility component that allows an unauthenticated, remote attacker to gain full control of the system via network-based TCP exploitation. The vulnerability is easily exploitable and results in complete compromise of confidentiality, integrity, and availability.\u003c/p\u003e\n\u003cp\u003eAffected products:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eSolaris (11.4)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eSource: \u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-101537\"\u003ehttps://nvd.nist.gov/vuln/detail/CVE-2026-101537\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eRelated in this roundup: \u003ca href=\"#cve-2026-60432\"\u003eCVE-2026-60432\u003c/a\u003e.\u003c/p\u003e\n\u003ch2 id=\"cve-2026-101590\"\u003eCVE-2026-101590\u003c/h2\u003e\n\u003cp\u003eCVE-2026-101590 is a critical vulnerability in the helidon-microprofile-security component of Oracle Fusion Middleware's Helidon product. The flaw allows an unauthenticated, network-adjacent attacker to perform unauthorized operations, including the creation, deletion, or modification of critical data. The vulnerability is characterized by high confidentiality and integrity impact scores.\u003c/p\u003e\n\u003cp\u003eAffected products:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eHelidon (4.0.0-4.5.5)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eSource: \u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-101590\"\u003ehttps://nvd.nist.gov/vuln/detail/CVE-2026-101590\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eRelated in this roundup: \u003ca href=\"#cve-2026-101572\"\u003eCVE-2026-101572\u003c/a\u003e, \u003ca href=\"#cve-2026-101579\"\u003eCVE-2026-101579\u003c/a\u003e, \u003ca href=\"#cve-2026-101583\"\u003eCVE-2026-101583\u003c/a\u003e, \u003ca href=\"#cve-2026-101585\"\u003eCVE-2026-101585\u003c/a\u003e.\u003c/p\u003e\n\u003ch2 id=\"cve-2026-101634\"\u003eCVE-2026-101634\u003c/h2\u003e\n\u003cp\u003eOracle Mobile Field Service, a component of Oracle E-Business Suite, contains a vulnerability that allows an unauthenticated, network-adjacent attacker to exploit the system via HTTP. Successful exploitation can lead to unauthorized access to critical data and a denial-of-service condition due to application crashes or hangs. The vulnerability is considered easily exploitable and carries a CVSS 3.1 base score of 9.1.\u003c/p\u003e\n\u003cp\u003eAffected products:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eOracle E-Business Suite (12.2.3-12.2.15)\u003c/li\u003e\n\u003cli\u003eOracle Mobile Field Service (12.2.3-12.2.15)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eSource: \u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-101634\"\u003ehttps://nvd.nist.gov/vuln/detail/CVE-2026-101634\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eRelated in this roundup: \u003ca href=\"#cve-2026-101767\"\u003eCVE-2026-101767\u003c/a\u003e, \u003ca href=\"#cve-2026-101398\"\u003eCVE-2026-101398\u003c/a\u003e, \u003ca href=\"#cve-2026-101466\"\u003eCVE-2026-101466\u003c/a\u003e, \u003ca href=\"#cve-2026-101519\"\u003eCVE-2026-101519\u003c/a\u003e, \u003ca href=\"#cve-2026-101532\"\u003eCVE-2026-101532\u003c/a\u003e, \u003ca href=\"#cve-2026-101534\"\u003eCVE-2026-101534\u003c/a\u003e, \u003ca href=\"#cve-2026-101535\"\u003eCVE-2026-101535\u003c/a\u003e, \u003ca href=\"#cve-2026-101541\"\u003eCVE-2026-101541\u003c/a\u003e, \u003ca href=\"#cve-2026-101542\"\u003eCVE-2026-101542\u003c/a\u003e, \u003ca href=\"#cve-2026-101543\"\u003eCVE-2026-101543\u003c/a\u003e, \u003ca href=\"#cve-2026-101544\"\u003eCVE-2026-101544\u003c/a\u003e, \u003ca href=\"#cve-2026-101554\"\u003eCVE-2026-101554\u003c/a\u003e, \u003ca href=\"#cve-2026-101556\"\u003eCVE-2026-101556\u003c/a\u003e, \u003ca href=\"#cve-2026-101567\"\u003eCVE-2026-101567\u003c/a\u003e.\u003c/p\u003e\n\u003ch2 id=\"cve-2026-101763\"\u003eCVE-2026-101763\u003c/h2\u003e\n\u003cp\u003eA critical, unauthenticated remote code execution vulnerability exists in the Oracle Communications BRM - Elastic Charging Engine, specifically within its cloud-native deployment component. An attacker with network access can leverage RMI to gain complete control over the system, impacting confidentiality, integrity, and availability.\u003c/p\u003e\n\u003cp\u003eAffected products:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eOracle Communications BRM - Elastic Charging Engine (15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0, 15.2.0.0.0)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eSource: \u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-101763\"\u003ehttps://nvd.nist.gov/vuln/detail/CVE-2026-101763\u003c/a\u003e\u003c/p\u003e\n\u003ch2 id=\"cve-2026-101765\"\u003eCVE-2026-101765\u003c/h2\u003e\n\u003cp\u003eCVE-2026-101765 is a critical vulnerability in the Oracle Communications Billing and Revenue Management (BRM) server that allows an unauthenticated, network-adjacent attacker to perform unauthorized data creation, deletion, or modification. The flaw is easily exploitable via HTTP and impacts both data confidentiality and integrity with a CVSS base score of 9.1.\u003c/p\u003e\n\u003cp\u003eAffected products:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eCommunications Billing and Revenue Management (15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0, 15.2.0.0.0)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eSource: \u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-101765\"\u003ehttps://nvd.nist.gov/vuln/detail/CVE-2026-101765\u003c/a\u003e\u003c/p\u003e\n\u003ch2 id=\"cve-2026-101767\"\u003eCVE-2026-101767\u003c/h2\u003e\n\u003cp\u003eCVE-2026-101767 is a critical vulnerability in the Oracle Application Object Library component of Oracle E-Business Suite, versions 12.2.3 through 12.2.15. The flaw is remotely exploitable without authentication via HTTP, potentially allowing a complete takeover of the Application Object Library component with impacts to confidentiality, integrity, and availability.\u003c/p\u003e\n\u003cp\u003eAffected products:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eOracle E-Business Suite (12.2.3-12.2.15)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eSource: \u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-101767\"\u003ehttps://nvd.nist.gov/vuln/detail/CVE-2026-101767\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eRelated in this roundup: \u003ca href=\"#cve-2026-101634\"\u003eCVE-2026-101634\u003c/a\u003e, \u003ca href=\"#cve-2026-101398\"\u003eCVE-2026-101398\u003c/a\u003e, \u003ca href=\"#cve-2026-101466\"\u003eCVE-2026-101466\u003c/a\u003e, \u003ca href=\"#cve-2026-101519\"\u003eCVE-2026-101519\u003c/a\u003e, \u003ca href=\"#cve-2026-101532\"\u003eCVE-2026-101532\u003c/a\u003e, \u003ca href=\"#cve-2026-101534\"\u003eCVE-2026-101534\u003c/a\u003e, \u003ca href=\"#cve-2026-101535\"\u003eCVE-2026-101535\u003c/a\u003e, \u003ca href=\"#cve-2026-101541\"\u003eCVE-2026-101541\u003c/a\u003e, \u003ca href=\"#cve-2026-101542\"\u003eCVE-2026-101542\u003c/a\u003e, \u003ca href=\"#cve-2026-101543\"\u003eCVE-2026-101543\u003c/a\u003e, \u003ca href=\"#cve-2026-101544\"\u003eCVE-2026-101544\u003c/a\u003e, \u003ca href=\"#cve-2026-101554\"\u003eCVE-2026-101554\u003c/a\u003e, \u003ca href=\"#cve-2026-101556\"\u003eCVE-2026-101556\u003c/a\u003e, \u003ca href=\"#cve-2026-101567\"\u003eCVE-2026-101567\u003c/a\u003e.\u003c/p\u003e\n\u003ch2 id=\"cve-2026-101808\"\u003eCVE-2026-101808\u003c/h2\u003e\n\u003cp\u003eOracle Product Workbench within E-Business Suite contains a vulnerability in the WebUI component that allows unauthenticated, network-adjacent attackers to achieve unauthorized access to, or modification of, critical data. The vulnerability is easily exploitable via HTTP and carries a CVSS 3.1 base score of 9.1.\u003c/p\u003e\n\u003cp\u003eAffected products:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eE-Business Suite (12.2.3-12.2.15)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eSource: \u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-101808\"\u003ehttps://nvd.nist.gov/vuln/detail/CVE-2026-101808\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eRelated in this roundup: \u003ca href=\"#cve-2026-101809\"\u003eCVE-2026-101809\u003c/a\u003e, \u003ca href=\"#cve-2026-101387\"\u003eCVE-2026-101387\u003c/a\u003e, \u003ca href=\"#cve-2026-101536\"\u003eCVE-2026-101536\u003c/a\u003e, \u003ca href=\"#cve-2026-101540\"\u003eCVE-2026-101540\u003c/a\u003e, \u003ca href=\"#cve-2026-101545\"\u003eCVE-2026-101545\u003c/a\u003e, \u003ca href=\"#cve-2026-101546\"\u003eCVE-2026-101546\u003c/a\u003e, \u003ca href=\"#cve-2026-101551\"\u003eCVE-2026-101551\u003c/a\u003e, \u003ca href=\"#cve-2026-101552\"\u003eCVE-2026-101552\u003c/a\u003e, \u003ca href=\"#cve-2026-101555\"\u003eCVE-2026-101555\u003c/a\u003e, \u003ca href=\"#cve-2026-101557\"\u003eCVE-2026-101557\u003c/a\u003e, \u003ca href=\"#cve-2026-101566\"\u003eCVE-2026-101566\u003c/a\u003e.\u003c/p\u003e\n\u003ch2 id=\"cve-2026-101809\"\u003eCVE-2026-101809\u003c/h2\u003e\n\u003cp\u003eCVE-2026-101809 is a critical vulnerability in the Workflow Notification Mailer component of Oracle E-Business Suite versions 12.2.3 through 12.2.15. The vulnerability is remotely exploitable without authentication via HTTP, allowing an attacker to achieve a complete system takeover of the Workflow component. The vulnerability carries a CVSS base score of 10.0 and involves a scope change, potentially impacting the wider environment.\u003c/p\u003e\n\u003cp\u003eAffected products:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eE-Business Suite (12.2.3-12.2.15)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eSource: \u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-101809\"\u003ehttps://nvd.nist.gov/vuln/detail/CVE-2026-101809\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eRelated in this roundup: \u003ca href=\"#cve-2026-101808\"\u003eCVE-2026-101808\u003c/a\u003e, \u003ca href=\"#cve-2026-101387\"\u003eCVE-2026-101387\u003c/a\u003e, \u003ca href=\"#cve-2026-101536\"\u003eCVE-2026-101536\u003c/a\u003e, \u003ca href=\"#cve-2026-101540\"\u003eCVE-2026-101540\u003c/a\u003e, \u003ca href=\"#cve-2026-101545\"\u003eCVE-2026-101545\u003c/a\u003e, \u003ca href=\"#cve-2026-101546\"\u003eCVE-2026-101546\u003c/a\u003e, \u003ca href=\"#cve-2026-101551\"\u003eCVE-2026-101551\u003c/a\u003e, \u003ca href=\"#cve-2026-101552\"\u003eCVE-2026-101552\u003c/a\u003e, \u003ca href=\"#cve-2026-101555\"\u003eCVE-2026-101555\u003c/a\u003e, \u003ca href=\"#cve-2026-101557\"\u003eCVE-2026-101557\u003c/a\u003e, \u003ca href=\"#cve-2026-101566\"\u003eCVE-2026-101566\u003c/a\u003e.\u003c/p\u003e\n\u003ch2 id=\"cve-2026-60432\"\u003eCVE-2026-60432\u003c/h2\u003e\n\u003cp\u003eCVE-2026-60432 is a critical vulnerability in the Image Packaging System component of Oracle Solaris versions 11.3 and 11.4. The flaw allows an unauthenticated, network-adjacent attacker to achieve full system takeover via HTTP requests. Due to the lack of required authentication or user interaction, this vulnerability presents a high risk for remote compromise of affected Solaris installations.\u003c/p\u003e\n\u003cp\u003eAffected products:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eSolaris (11.3, 11.4)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eSource: \u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-60432\"\u003ehttps://nvd.nist.gov/vuln/detail/CVE-2026-60432\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eRelated in this roundup: \u003ca href=\"#cve-2026-101537\"\u003eCVE-2026-101537\u003c/a\u003e.\u003c/p\u003e\n\u003ch2 id=\"cve-2026-83396\"\u003eCVE-2026-83396\u003c/h2\u003e\n\u003cp\u003eCVE-2026-83396 is a critical vulnerability in the Oracle Data Integrator component of Oracle Fusion Middleware. An unauthenticated attacker can exploit this flaw via RMI over the network to achieve a full takeover of the application. The vulnerability carries a CVSS 3.1 base score of 9.8, indicating severe impact on confidentiality, integrity, and availability.\u003c/p\u003e\n\u003cp\u003eAffected products:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eOracle Data Integrator (12.2.1.4.0, 14.1.2.0.0)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eSource: \u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-83396\"\u003ehttps://nvd.nist.gov/vuln/detail/CVE-2026-83396\u003c/a\u003e\u003c/p\u003e\n\u003ch2 id=\"cve-2026-83397\"\u003eCVE-2026-83397\u003c/h2\u003e\n\u003cp\u003eCVE-2026-83397 is a critical vulnerability in the Console and Repository Explorer components of Oracle Data Integrator. The flaw allows an unauthenticated, network-adjacent attacker to achieve full system takeover via HTTP requests, resulting in complete compromise of confidentiality, integrity, and availability.\u003c/p\u003e\n\u003cp\u003eAffected products:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eData Integrator (12.2.1.4.0, 14.1.2.0.0)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eSource: \u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-83397\"\u003ehttps://nvd.nist.gov/vuln/detail/CVE-2026-83397\u003c/a\u003e\u003c/p\u003e\n\u003ch2 id=\"cve-2026-83399\"\u003eCVE-2026-83399\u003c/h2\u003e\n\u003cp\u003eOracle WebLogic Server contains a critical vulnerability in its Core component, reachable via T3 or IIOP protocols. An unauthenticated attacker with network access can exploit this flaw to achieve full system takeover. The vulnerability has a CVSS base score of 9.8, indicating high severity across confidentiality, integrity, and availability.\u003c/p\u003e\n\u003cp\u003eAffected products:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eWebLogic Server (12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, 15.1.1.0.0)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eSource: \u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-83399\"\u003ehttps://nvd.nist.gov/vuln/detail/CVE-2026-83399\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eRelated in this roundup: \u003ca href=\"#cve-2026-87302\"\u003eCVE-2026-87302\u003c/a\u003e, \u003ca href=\"#cve-2026-91323\"\u003eCVE-2026-91323\u003c/a\u003e.\u003c/p\u003e\n\u003ch2 id=\"cve-2026-87251\"\u003eCVE-2026-87251\u003c/h2\u003e\n\u003cp\u003eOracle Access Manager 12.2.1.4.0 and 14.1.2.1.0 contain a critical vulnerability in the Authentication Engine that allows an unauthenticated, network-adjacent attacker to achieve full system takeover via specially crafted SAML requests.\u003c/p\u003e\n\u003cp\u003eAffected products:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eOracle Access Manager (12.2.1.4.0, 14.1.2.1.0)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eSource: \u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-87251\"\u003ehttps://nvd.nist.gov/vuln/detail/CVE-2026-87251\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eRelated in this roundup: \u003ca href=\"#cve-2026-87337\"\u003eCVE-2026-87337\u003c/a\u003e.\u003c/p\u003e\n\u003ch2 id=\"cve-2026-87302\"\u003eCVE-2026-87302\u003c/h2\u003e\n\u003cp\u003eCVE-2026-87302 is a critical vulnerability in the Core component of Oracle WebLogic Server. It is remotely exploitable without authentication via HTTP by an attacker with network access. Successful exploitation allows an attacker to gain unauthorized access to or perform unauthorized modification/deletion of critical data stored within the WebLogic Server environment. The vulnerability is rated with a CVSS 3.1 base score of 9.1.\u003c/p\u003e\n\u003cp\u003eAffected products:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eWebLogic Server (12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, 15.1.1.0.0)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eSource: \u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-87302\"\u003ehttps://nvd.nist.gov/vuln/detail/CVE-2026-87302\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eRelated in this roundup: \u003ca href=\"#cve-2026-83399\"\u003eCVE-2026-83399\u003c/a\u003e, \u003ca href=\"#cve-2026-91323\"\u003eCVE-2026-91323\u003c/a\u003e.\u003c/p\u003e\n\u003ch2 id=\"cve-2026-87337\"\u003eCVE-2026-87337\u003c/h2\u003e\n\u003cp\u003eCVE-2026-87337 is a critical vulnerability in the Authentication Engine component of Oracle Access Manager, allowing an unauthenticated remote attacker to compromise the system via HTTP. The vulnerability has a CVSS score of 10.0 and allows for unauthorized access, creation, deletion, or modification of critical data, with a scope change impact potentially affecting additional integrated products.\u003c/p\u003e\n\u003cp\u003eAffected products:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eOracle Access Manager (12.2.1.4.0, 14.1.2.1.0)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eSource: \u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-87337\"\u003ehttps://nvd.nist.gov/vuln/detail/CVE-2026-87337\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eRelated in this roundup: \u003ca href=\"#cve-2026-87251\"\u003eCVE-2026-87251\u003c/a\u003e.\u003c/p\u003e\n\u003ch2 id=\"cve-2026-87347\"\u003eCVE-2026-87347\u003c/h2\u003e\n\u003cp\u003eA vulnerability in the OSSL Module of Oracle HTTP Server allows a low-privileged attacker with network access to perform unauthorized creation, deletion, or modification of critical data. The vulnerability supports scope change and carries a CVSS 3.1 base score of 9.6, indicating significant impact on confidentiality and integrity.\u003c/p\u003e\n\u003cp\u003eAffected products:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eOracle HTTP Server (12.2.1.4.0, 14.1.2.0.0)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eSource: \u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-87347\"\u003ehttps://nvd.nist.gov/vuln/detail/CVE-2026-87347\u003c/a\u003e\u003c/p\u003e\n\u003ch2 id=\"cve-2026-91214\"\u003eCVE-2026-91214\u003c/h2\u003e\n\u003cp\u003eCVE-2026-91214 is a critical vulnerability in the Fabric Layer of Oracle SOA Suite affecting versions 12.2.1.4.0 and 14.1.2.0.0. The vulnerability is network-exploitable by an unauthenticated attacker via HTTP, allowing for a full takeover of the affected product with significant impacts on confidentiality, integrity, and availability.\u003c/p\u003e\n\u003cp\u003eAffected products:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eSOA Suite (12.2.1.4.0, 14.1.2.0.0)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eSource: \u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-91214\"\u003ehttps://nvd.nist.gov/vuln/detail/CVE-2026-91214\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eRelated in this roundup: \u003ca href=\"#cve-2026-91216\"\u003eCVE-2026-91216\u003c/a\u003e, \u003ca href=\"#cve-2026-91224\"\u003eCVE-2026-91224\u003c/a\u003e, \u003ca href=\"#cve-2026-91225\"\u003eCVE-2026-91225\u003c/a\u003e, \u003ca href=\"#cve-2026-91230\"\u003eCVE-2026-91230\u003c/a\u003e, \u003ca href=\"#cve-2026-91231\"\u003eCVE-2026-91231\u003c/a\u003e, \u003ca href=\"#cve-2026-91232\"\u003eCVE-2026-91232\u003c/a\u003e, \u003ca href=\"#cve-2026-91234\"\u003eCVE-2026-91234\u003c/a\u003e, \u003ca href=\"#cve-2026-91235\"\u003eCVE-2026-91235\u003c/a\u003e, \u003ca href=\"#cve-2026-91236\"\u003eCVE-2026-91236\u003c/a\u003e, \u003ca href=\"#cve-2026-91250\"\u003eCVE-2026-91250\u003c/a\u003e.\u003c/p\u003e\n\u003ch2 id=\"cve-2026-91216\"\u003eCVE-2026-91216\u003c/h2\u003e\n\u003cp\u003eCVE-2026-91216 is a critical remote code execution vulnerability in the Fabric Layer of Oracle SOA Suite. An unauthenticated attacker with network access via T3 or IIOP protocols can compromise the service, leading to full system takeover with impacts on confidentiality, integrity, and availability. The vulnerability has a CVSS base score of 10.0 and allows for scope change, potentially affecting auxiliary products.\u003c/p\u003e\n\u003cp\u003eAffected products:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eSOA Suite (12.2.1.4.0, 14.1.2.0.0)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eSource: \u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-91216\"\u003ehttps://nvd.nist.gov/vuln/detail/CVE-2026-91216\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eRelated in this roundup: \u003ca href=\"#cve-2026-91214\"\u003eCVE-2026-91214\u003c/a\u003e, \u003ca href=\"#cve-2026-91224\"\u003eCVE-2026-91224\u003c/a\u003e, \u003ca href=\"#cve-2026-91225\"\u003eCVE-2026-91225\u003c/a\u003e, \u003ca href=\"#cve-2026-91230\"\u003eCVE-2026-91230\u003c/a\u003e, \u003ca href=\"#cve-2026-91231\"\u003eCVE-2026-91231\u003c/a\u003e, \u003ca href=\"#cve-2026-91232\"\u003eCVE-2026-91232\u003c/a\u003e, \u003ca href=\"#cve-2026-91234\"\u003eCVE-2026-91234\u003c/a\u003e, \u003ca href=\"#cve-2026-91235\"\u003eCVE-2026-91235\u003c/a\u003e, \u003ca href=\"#cve-2026-91236\"\u003eCVE-2026-91236\u003c/a\u003e, \u003ca href=\"#cve-2026-91250\"\u003eCVE-2026-91250\u003c/a\u003e.\u003c/p\u003e\n\u003ch2 id=\"cve-2026-91218\"\u003eCVE-2026-91218\u003c/h2\u003e\n\u003cp\u003eOracle SOA Suite 12.2.1.4.0 and 14.1.2.0.0 contain a vulnerability in the Fabric Layer that allows a low-privileged attacker with network access to compromise the product. The flaw permits unauthorized creation, deletion, or modification of critical data and enables unauthorized access to sensitive information. Due to its scope change characteristics, successful exploitation can result in significant impacts beyond the Oracle SOA Suite instance itself.\u003c/p\u003e\n\u003cp\u003eAffected products:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eOracle SOA Suite (12.2.1.4.0, 14.1.2.0.0)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eSource: \u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-91218\"\u003ehttps://nvd.nist.gov/vuln/detail/CVE-2026-91218\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eRelated in this roundup: \u003ca href=\"#cve-2026-91221\"\u003eCVE-2026-91221\u003c/a\u003e, \u003ca href=\"#cve-2026-91251\"\u003eCVE-2026-91251\u003c/a\u003e.\u003c/p\u003e\n\u003ch2 id=\"cve-2026-91220\"\u003eCVE-2026-91220\u003c/h2\u003e\n\u003cp\u003eCVE-2026-91220 is a critical vulnerability in the Human Workflow component of Oracle Business Process Management Suite, allowing an unauthenticated remote attacker to gain full control of the application via HTTP. With a CVSS base score of 9.8, this flaw impacts confidentiality, integrity, and availability, and is considered easily exploitable.\u003c/p\u003e\n\u003cp\u003eAffected products:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eOracle Business Process Management Suite (12.2.1.4.0, 14.1.2.0.0)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eSource: \u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-91220\"\u003ehttps://nvd.nist.gov/vuln/detail/CVE-2026-91220\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eRelated in this roundup: \u003ca href=\"#cve-2026-91243\"\u003eCVE-2026-91243\u003c/a\u003e.\u003c/p\u003e\n\u003ch2 id=\"cve-2026-91221\"\u003eCVE-2026-91221\u003c/h2\u003e\n\u003cp\u003eCVE-2026-91221 is a critical vulnerability in the Fabric Layer of Oracle SOA Suite that allows an unauthenticated, network-adjacent attacker to achieve full system takeover. The vulnerability is exploitable via T3 and IIOP protocols and carries a CVSS base score of 10.0 due to its potential for full confidentiality, integrity, and availability impact, as well as the ability to affect other products via a scope change.\u003c/p\u003e\n\u003cp\u003eAffected products:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eOracle SOA Suite (12.2.1.4.0, 14.1.2.0.0)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eSource: \u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-91221\"\u003ehttps://nvd.nist.gov/vuln/detail/CVE-2026-91221\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eRelated in this roundup: \u003ca href=\"#cve-2026-91218\"\u003eCVE-2026-91218\u003c/a\u003e, \u003ca href=\"#cve-2026-91251\"\u003eCVE-2026-91251\u003c/a\u003e.\u003c/p\u003e\n\u003ch2 id=\"cve-2026-91222\"\u003eCVE-2026-91222\u003c/h2\u003e\n\u003cp\u003eCVE-2026-91222 is a critical vulnerability in the Human Workflow component of Oracle Business Process Management Suite, affecting versions 12.2.1.4.0 and 14.1.2.0.0. The vulnerability is remotely exploitable via SOAP by a low-privileged attacker, potentially leading to a full system takeover and unauthorized access across integrated products due to scope change.\u003c/p\u003e\n\u003cp\u003eAffected products:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eBusiness Process Management Suite (12.2.1.4.0, 14.1.2.0.0)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eSource: \u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-91222\"\u003ehttps://nvd.nist.gov/vuln/detail/CVE-2026-91222\u003c/a\u003e\u003c/p\u003e\n\u003ch2 id=\"cve-2026-91224\"\u003eCVE-2026-91224\u003c/h2\u003e\n\u003cp\u003eCVE-2026-91224 is a critical vulnerability in the Fabric Layer component of Oracle SOA Suite, allowing a low-privileged network attacker to achieve complete system takeover via HTTP. The vulnerability has a CVSS 3.1 base score of 9.9 and involves a scope change, potentially impacting other integrated products.\u003c/p\u003e\n\u003cp\u003eAffected products:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eSOA Suite (12.2.1.4.0, 14.1.2.0.0)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eSource: \u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-91224\"\u003ehttps://nvd.nist.gov/vuln/detail/CVE-2026-91224\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eRelated in this roundup: \u003ca href=\"#cve-2026-91214\"\u003eCVE-2026-91214\u003c/a\u003e, \u003ca href=\"#cve-2026-91216\"\u003eCVE-2026-91216\u003c/a\u003e, \u003ca href=\"#cve-2026-91225\"\u003eCVE-2026-91225\u003c/a\u003e, \u003ca href=\"#cve-2026-91230\"\u003eCVE-2026-91230\u003c/a\u003e, \u003ca href=\"#cve-2026-91231\"\u003eCVE-2026-91231\u003c/a\u003e, \u003ca href=\"#cve-2026-91232\"\u003eCVE-2026-91232\u003c/a\u003e, \u003ca href=\"#cve-2026-91234\"\u003eCVE-2026-91234\u003c/a\u003e, \u003ca href=\"#cve-2026-91235\"\u003eCVE-2026-91235\u003c/a\u003e, \u003ca href=\"#cve-2026-91236\"\u003eCVE-2026-91236\u003c/a\u003e, \u003ca href=\"#cve-2026-91250\"\u003eCVE-2026-91250\u003c/a\u003e.\u003c/p\u003e\n\u003ch2 id=\"cve-2026-91225\"\u003eCVE-2026-91225\u003c/h2\u003e\n\u003cp\u003eCVE-2026-91225 is a critical vulnerability in the Adapters component of Oracle SOA Suite. An unauthenticated remote attacker with network access via HTTP can exploit this flaw to perform unauthorized modification, creation, or deletion of critical data, as well as trigger a denial-of-service condition causing the application to hang or crash.\u003c/p\u003e\n\u003cp\u003eAffected products:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eSOA Suite (12.2.1.4.0, 14.1.2.0.0)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eSource: \u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-91225\"\u003ehttps://nvd.nist.gov/vuln/detail/CVE-2026-91225\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eRelated in this roundup: \u003ca href=\"#cve-2026-91214\"\u003eCVE-2026-91214\u003c/a\u003e, \u003ca href=\"#cve-2026-91216\"\u003eCVE-2026-91216\u003c/a\u003e, \u003ca href=\"#cve-2026-91224\"\u003eCVE-2026-91224\u003c/a\u003e, \u003ca href=\"#cve-2026-91230\"\u003eCVE-2026-91230\u003c/a\u003e, \u003ca href=\"#cve-2026-91231\"\u003eCVE-2026-91231\u003c/a\u003e, \u003ca href=\"#cve-2026-91232\"\u003eCVE-2026-91232\u003c/a\u003e, \u003ca href=\"#cve-2026-91234\"\u003eCVE-2026-91234\u003c/a\u003e, \u003ca href=\"#cve-2026-91235\"\u003eCVE-2026-91235\u003c/a\u003e, \u003ca href=\"#cve-2026-91236\"\u003eCVE-2026-91236\u003c/a\u003e, \u003ca href=\"#cve-2026-91250\"\u003eCVE-2026-91250\u003c/a\u003e.\u003c/p\u003e\n\u003ch2 id=\"cve-2026-91230\"\u003eCVE-2026-91230\u003c/h2\u003e\n\u003cp\u003eCVE-2026-91230 is a critical, easily exploitable vulnerability in the Fabric Layer of Oracle SOA Suite. An unauthenticated remote attacker can leverage HTTP network access to gain unauthorized access to or modify data within the SOA Suite environment. The vulnerability has a scope change (S:C), indicating that successful exploitation may impact other integrated products and services, leading to a high confidentiality impact.\u003c/p\u003e\n\u003cp\u003eAffected products:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eSOA Suite (12.2.1.4.0, 14.1.2.0.0)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eSource: \u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-91230\"\u003ehttps://nvd.nist.gov/vuln/detail/CVE-2026-91230\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eRelated in this roundup: \u003ca href=\"#cve-2026-91214\"\u003eCVE-2026-91214\u003c/a\u003e, \u003ca href=\"#cve-2026-91216\"\u003eCVE-2026-91216\u003c/a\u003e, \u003ca href=\"#cve-2026-91224\"\u003eCVE-2026-91224\u003c/a\u003e, \u003ca href=\"#cve-2026-91225\"\u003eCVE-2026-91225\u003c/a\u003e, \u003ca href=\"#cve-2026-91231\"\u003eCVE-2026-91231\u003c/a\u003e, \u003ca href=\"#cve-2026-91232\"\u003eCVE-2026-91232\u003c/a\u003e, \u003ca href=\"#cve-2026-91234\"\u003eCVE-2026-91234\u003c/a\u003e, \u003ca href=\"#cve-2026-91235\"\u003eCVE-2026-91235\u003c/a\u003e, \u003ca href=\"#cve-2026-91236\"\u003eCVE-2026-91236\u003c/a\u003e, \u003ca href=\"#cve-2026-91250\"\u003eCVE-2026-91250\u003c/a\u003e.\u003c/p\u003e\n\u003ch2 id=\"cve-2026-91231\"\u003eCVE-2026-91231\u003c/h2\u003e\n\u003cp\u003eCVE-2026-91231 is a critical vulnerability affecting the Adapters component of Oracle SOA Suite. The flaw allows an unauthenticated, network-adjacent attacker to perform remote code execution, leading to a complete takeover of the service. Due to its scope change impact, the exploit can extend beyond the SOA Suite to compromise other connected products, requiring immediate patching for versions 12.2.1.4.0 and 14.1.2.0.0.\u003c/p\u003e\n\u003cp\u003eAffected products:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eSOA Suite (12.2.1.4.0, 14.1.2.0.0)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eSource: \u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-91231\"\u003ehttps://nvd.nist.gov/vuln/detail/CVE-2026-91231\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eRelated in this roundup: \u003ca href=\"#cve-2026-91214\"\u003eCVE-2026-91214\u003c/a\u003e, \u003ca href=\"#cve-2026-91216\"\u003eCVE-2026-91216\u003c/a\u003e, \u003ca href=\"#cve-2026-91224\"\u003eCVE-2026-91224\u003c/a\u003e, \u003ca href=\"#cve-2026-91225\"\u003eCVE-2026-91225\u003c/a\u003e, \u003ca href=\"#cve-2026-91230\"\u003eCVE-2026-91230\u003c/a\u003e, \u003ca href=\"#cve-2026-91232\"\u003eCVE-2026-91232\u003c/a\u003e, \u003ca href=\"#cve-2026-91234\"\u003eCVE-2026-91234\u003c/a\u003e, \u003ca href=\"#cve-2026-91235\"\u003eCVE-2026-91235\u003c/a\u003e, \u003ca href=\"#cve-2026-91236\"\u003eCVE-2026-91236\u003c/a\u003e, \u003ca href=\"#cve-2026-91250\"\u003eCVE-2026-91250\u003c/a\u003e.\u003c/p\u003e\n\u003ch2 id=\"cve-2026-91232\"\u003eCVE-2026-91232\u003c/h2\u003e\n\u003cp\u003eCVE-2026-91232 is a critical vulnerability in the Fabric Layer of Oracle SOA Suite affecting versions 12.2.1.4.0 and 14.1.2.0.0. The vulnerability is network-exploitable via HTTP by a low-privileged user, allowing for a full takeover of the application with a scope change impact, resulting in high confidentiality, integrity, and availability loss.\u003c/p\u003e\n\u003cp\u003eAffected products:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eSOA Suite (12.2.1.4.0, 14.1.2.0.0)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eSource: \u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-91232\"\u003ehttps://nvd.nist.gov/vuln/detail/CVE-2026-91232\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eRelated in this roundup: \u003ca href=\"#cve-2026-91214\"\u003eCVE-2026-91214\u003c/a\u003e, \u003ca href=\"#cve-2026-91216\"\u003eCVE-2026-91216\u003c/a\u003e, \u003ca href=\"#cve-2026-91224\"\u003eCVE-2026-91224\u003c/a\u003e, \u003ca href=\"#cve-2026-91225\"\u003eCVE-2026-91225\u003c/a\u003e, \u003ca href=\"#cve-2026-91230\"\u003eCVE-2026-91230\u003c/a\u003e, \u003ca href=\"#cve-2026-91231\"\u003eCVE-2026-91231\u003c/a\u003e, \u003ca href=\"#cve-2026-91234\"\u003eCVE-2026-91234\u003c/a\u003e, \u003ca href=\"#cve-2026-91235\"\u003eCVE-2026-91235\u003c/a\u003e, \u003ca href=\"#cve-2026-91236\"\u003eCVE-2026-91236\u003c/a\u003e, \u003ca href=\"#cve-2026-91250\"\u003eCVE-2026-91250\u003c/a\u003e.\u003c/p\u003e\n\u003ch2 id=\"cve-2026-91233\"\u003eCVE-2026-91233\u003c/h2\u003e\n\u003cp\u003eOracle SOA Suite 12.2.1.4.0 and 14.1.2.0.0 contain a critical vulnerability in the Enterprise Scheduling System component. An unauthenticated remote attacker can exploit this via SOAP requests to achieve a full takeover of the Oracle SOA Suite instance. The vulnerability carries a CVSS base score of 9.8, indicating high severity across confidentiality, integrity, and availability.\u003c/p\u003e\n\u003cp\u003eSource: \u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-91233\"\u003ehttps://nvd.nist.gov/vuln/detail/CVE-2026-91233\u003c/a\u003e\u003c/p\u003e\n\u003ch2 id=\"cve-2026-91234\"\u003eCVE-2026-91234\u003c/h2\u003e\n\u003cp\u003eCVE-2026-91234 is a critical vulnerability within the Fabric Layer component of Oracle SOA Suite. An unauthenticated attacker can exploit this flaw remotely via HTTP to achieve full compromise of the application. The vulnerability carries a CVSS base score of 9.8, indicating severe risks to confidentiality, integrity, and availability.\u003c/p\u003e\n\u003cp\u003eAffected products:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eSOA Suite (12.2.1.4.0, 14.1.2.0.0)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eSource: \u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-91234\"\u003ehttps://nvd.nist.gov/vuln/detail/CVE-2026-91234\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eRelated in this roundup: \u003ca href=\"#cve-2026-91214\"\u003eCVE-2026-91214\u003c/a\u003e, \u003ca href=\"#cve-2026-91216\"\u003eCVE-2026-91216\u003c/a\u003e, \u003ca href=\"#cve-2026-91224\"\u003eCVE-2026-91224\u003c/a\u003e, \u003ca href=\"#cve-2026-91225\"\u003eCVE-2026-91225\u003c/a\u003e, \u003ca href=\"#cve-2026-91230\"\u003eCVE-2026-91230\u003c/a\u003e, \u003ca href=\"#cve-2026-91231\"\u003eCVE-2026-91231\u003c/a\u003e, \u003ca href=\"#cve-2026-91232\"\u003eCVE-2026-91232\u003c/a\u003e, \u003ca href=\"#cve-2026-91235\"\u003eCVE-2026-91235\u003c/a\u003e, \u003ca href=\"#cve-2026-91236\"\u003eCVE-2026-91236\u003c/a\u003e, \u003ca href=\"#cve-2026-91250\"\u003eCVE-2026-91250\u003c/a\u003e.\u003c/p\u003e\n\u003ch2 id=\"cve-2026-91235\"\u003eCVE-2026-91235\u003c/h2\u003e\n\u003cp\u003eCVE-2026-91235 is a critical vulnerability in the Fabric Layer component of Oracle SOA Suite. An unauthenticated attacker with network access via HTTP can exploit this flaw to achieve full takeover of the application. The vulnerability carries a CVSS base score of 9.8, indicating high risk to confidentiality, integrity, and availability.\u003c/p\u003e\n\u003cp\u003eAffected products:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eSOA Suite (12.2.1.4.0, 14.1.2.0.0)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eSource: \u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-91235\"\u003ehttps://nvd.nist.gov/vuln/detail/CVE-2026-91235\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eRelated in this roundup: \u003ca href=\"#cve-2026-91214\"\u003eCVE-2026-91214\u003c/a\u003e, \u003ca href=\"#cve-2026-91216\"\u003eCVE-2026-91216\u003c/a\u003e, \u003ca href=\"#cve-2026-91224\"\u003eCVE-2026-91224\u003c/a\u003e, \u003ca href=\"#cve-2026-91225\"\u003eCVE-2026-91225\u003c/a\u003e, \u003ca href=\"#cve-2026-91230\"\u003eCVE-2026-91230\u003c/a\u003e, \u003ca href=\"#cve-2026-91231\"\u003eCVE-2026-91231\u003c/a\u003e, \u003ca href=\"#cve-2026-91232\"\u003eCVE-2026-91232\u003c/a\u003e, \u003ca href=\"#cve-2026-91234\"\u003eCVE-2026-91234\u003c/a\u003e, \u003ca href=\"#cve-2026-91236\"\u003eCVE-2026-91236\u003c/a\u003e, \u003ca href=\"#cve-2026-91250\"\u003eCVE-2026-91250\u003c/a\u003e.\u003c/p\u003e\n\u003ch2 id=\"cve-2026-91236\"\u003eCVE-2026-91236\u003c/h2\u003e\n\u003cp\u003eOracle SOA Suite, specifically the Fabric Layer component, contains a critical vulnerability that allows an unauthenticated attacker with network access via HTTP to perform a remote takeover of the application. The vulnerability is highly exploitable and impacts the confidentiality, integrity, and availability of the affected software.\u003c/p\u003e\n\u003cp\u003eAffected products:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eSOA Suite (12.2.1.4.0, 14.1.2.0.0)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eSource: \u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-91236\"\u003ehttps://nvd.nist.gov/vuln/detail/CVE-2026-91236\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eRelated in this roundup: \u003ca href=\"#cve-2026-91214\"\u003eCVE-2026-91214\u003c/a\u003e, \u003ca href=\"#cve-2026-91216\"\u003eCVE-2026-91216\u003c/a\u003e, \u003ca href=\"#cve-2026-91224\"\u003eCVE-2026-91224\u003c/a\u003e, \u003ca href=\"#cve-2026-91225\"\u003eCVE-2026-91225\u003c/a\u003e, \u003ca href=\"#cve-2026-91230\"\u003eCVE-2026-91230\u003c/a\u003e, \u003ca href=\"#cve-2026-91231\"\u003eCVE-2026-91231\u003c/a\u003e, \u003ca href=\"#cve-2026-91232\"\u003eCVE-2026-91232\u003c/a\u003e, \u003ca href=\"#cve-2026-91234\"\u003eCVE-2026-91234\u003c/a\u003e, \u003ca href=\"#cve-2026-91235\"\u003eCVE-2026-91235\u003c/a\u003e, \u003ca href=\"#cve-2026-91250\"\u003eCVE-2026-91250\u003c/a\u003e.\u003c/p\u003e\n\u003ch2 id=\"cve-2026-91241\"\u003eCVE-2026-91241\u003c/h2\u003e\n\u003cp\u003eOracle Business Intelligence Enterprise Edition contains a high-severity vulnerability in the Analytics Web Administration component. The flaw is remotely exploitable over HTTP by a high-privileged attacker and allows for a full system takeover and significant scope change, impacting the confidentiality, integrity, and availability of the affected environment.\u003c/p\u003e\n\u003cp\u003eAffected products:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eOracle Business Intelligence Enterprise Edition (8.2.0.0.0, 12.2.1.4.0, 26.01.0.0.0)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eSource: \u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-91241\"\u003ehttps://nvd.nist.gov/vuln/detail/CVE-2026-91241\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eRelated in this roundup: \u003ca href=\"#cve-2026-101531\"\u003eCVE-2026-101531\u003c/a\u003e.\u003c/p\u003e\n\u003ch2 id=\"cve-2026-91243\"\u003eCVE-2026-91243\u003c/h2\u003e\n\u003cp\u003eCVE-2026-91243 is a high-severity vulnerability in the Fabric Layer of the Oracle Business Process Management Suite. A low-privileged attacker with network access via HTTP can exploit this flaw to perform unauthorized modification, deletion, or exfiltration of critical data, with impacts potentially extending beyond the suite due to a scope change. The vulnerability has a CVSS 3.1 base score of 9.6.\u003c/p\u003e\n\u003cp\u003eAffected products:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eOracle Business Process Management Suite (12.2.1.4.0, 14.1.2.0.0)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eSource: \u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-91243\"\u003ehttps://nvd.nist.gov/vuln/detail/CVE-2026-91243\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eRelated in this roundup: \u003ca href=\"#cve-2026-91220\"\u003eCVE-2026-91220\u003c/a\u003e.\u003c/p\u003e\n\u003ch2 id=\"cve-2026-91250\"\u003eCVE-2026-91250\u003c/h2\u003e\n\u003cp\u003eOracle SOA Suite 12.2.1.4.0 and 14.1.2.0.0 are vulnerable to a remote, easily exploitable flaw in the Adapters component. A low-privileged attacker with network access can leverage multiple protocols to achieve a full takeover of the application, with the potential for impact across additional products due to a scope change (CVSS 9.9).\u003c/p\u003e\n\u003cp\u003eAffected products:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eSOA Suite (12.2.1.4.0, 14.1.2.0.0)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eSource: \u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-91250\"\u003ehttps://nvd.nist.gov/vuln/detail/CVE-2026-91250\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eRelated in this roundup: \u003ca href=\"#cve-2026-91214\"\u003eCVE-2026-91214\u003c/a\u003e, \u003ca href=\"#cve-2026-91216\"\u003eCVE-2026-91216\u003c/a\u003e, \u003ca href=\"#cve-2026-91224\"\u003eCVE-2026-91224\u003c/a\u003e, \u003ca href=\"#cve-2026-91225\"\u003eCVE-2026-91225\u003c/a\u003e, \u003ca href=\"#cve-2026-91230\"\u003eCVE-2026-91230\u003c/a\u003e, \u003ca href=\"#cve-2026-91231\"\u003eCVE-2026-91231\u003c/a\u003e, \u003ca href=\"#cve-2026-91232\"\u003eCVE-2026-91232\u003c/a\u003e, \u003ca href=\"#cve-2026-91234\"\u003eCVE-2026-91234\u003c/a\u003e, \u003ca href=\"#cve-2026-91235\"\u003eCVE-2026-91235\u003c/a\u003e, \u003ca href=\"#cve-2026-91236\"\u003eCVE-2026-91236\u003c/a\u003e.\u003c/p\u003e\n\u003ch2 id=\"cve-2026-91251\"\u003eCVE-2026-91251\u003c/h2\u003e\n\u003cp\u003eCVE-2026-91251 is a critical vulnerability in the Adapters component of Oracle SOA Suite within Oracle Fusion Middleware. A low-privileged attacker with network access via HTTP can exploit this flaw to achieve full takeover of the application. The vulnerability allows for scope change, potentially impacting other integrated products, and carries a CVSS 3.1 base score of 9.9.\u003c/p\u003e\n\u003cp\u003eAffected products:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eOracle SOA Suite (12.2.1.4.0, 14.1.2.0.0)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eSource: \u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-91251\"\u003ehttps://nvd.nist.gov/vuln/detail/CVE-2026-91251\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eRelated in this roundup: \u003ca href=\"#cve-2026-91218\"\u003eCVE-2026-91218\u003c/a\u003e, \u003ca href=\"#cve-2026-91221\"\u003eCVE-2026-91221\u003c/a\u003e.\u003c/p\u003e\n\u003ch2 id=\"cve-2026-91265\"\u003eCVE-2026-91265\u003c/h2\u003e\n\u003cp\u003eCVE-2026-91265 is a critical vulnerability in the Enterprise Infrastructure SEC component of Oracle JD Edwards EnterpriseOne Tools (versions 9.2.0.0 through 9.2.26.5). The vulnerability is network-exploitable by an unauthenticated attacker via HTTP, allowing for unauthorized read, modification, or deletion of critical data, resulting in a CVSS 3.1 base score of 9.1.\u003c/p\u003e\n\u003cp\u003eAffected products:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eJD Edwards EnterpriseOne Tools (9.2.0.0-9.2.26.5)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eSource: \u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-91265\"\u003ehttps://nvd.nist.gov/vuln/detail/CVE-2026-91265\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eRelated in this roundup: \u003ca href=\"#cve-2026-91305\"\u003eCVE-2026-91305\u003c/a\u003e.\u003c/p\u003e\n\u003ch2 id=\"cve-2026-91299\"\u003eCVE-2026-91299\u003c/h2\u003e\n\u003cp\u003eCVE-2026-91299 is a critical vulnerability in the E1 IOT Orchestrator Security component of Oracle JD Edwards EnterpriseOne Orchestrator. The vulnerability is network-exploitable without authentication and allows for a complete compromise of the service, including scope change impacts that can affect other products. It carries a CVSS 3.1 score of 10.0.\u003c/p\u003e\n\u003cp\u003eAffected products:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eJD Edwards EnterpriseOne Orchestrator (9.2.0.0-9.2.26.5)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eSource: \u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-91299\"\u003ehttps://nvd.nist.gov/vuln/detail/CVE-2026-91299\u003c/a\u003e\u003c/p\u003e\n\u003ch2 id=\"cve-2026-91305\"\u003eCVE-2026-91305\u003c/h2\u003e\n\u003cp\u003eCVE-2026-91305 is a critical vulnerability in the Installation Security component of Oracle JD Edwards EnterpriseOne Tools. The flaw allows an unauthenticated, network-adjacent attacker to exploit the application via HTTPS, resulting in unauthorized access to, modification of, or deletion of critical data. The vulnerability is highly exploitable due to low complexity and no required user interaction or privileges.\u003c/p\u003e\n\u003cp\u003eAffected products:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eJD Edwards EnterpriseOne Tools (9.2.0.0-9.2.26.5)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eSource: \u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-91305\"\u003ehttps://nvd.nist.gov/vuln/detail/CVE-2026-91305\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eRelated in this roundup: \u003ca href=\"#cve-2026-91265\"\u003eCVE-2026-91265\u003c/a\u003e.\u003c/p\u003e\n\u003ch2 id=\"cve-2026-91323\"\u003eCVE-2026-91323\u003c/h2\u003e\n\u003cp\u003eOracle WebLogic Server contains a vulnerability in the Core component that allows an unauthenticated, network-adjacent attacker to achieve a full system takeover via HTTP. The vulnerability is highly exploitable, requiring no privileges or user interaction, and carries a CVSS base score of 9.8.\u003c/p\u003e\n\u003cp\u003eAffected products:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eWebLogic Server (12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, 15.1.1.0.0)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eSource: \u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-91323\"\u003ehttps://nvd.nist.gov/vuln/detail/CVE-2026-91323\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eRelated in this roundup: \u003ca href=\"#cve-2026-83399\"\u003eCVE-2026-83399\u003c/a\u003e, \u003ca href=\"#cve-2026-87302\"\u003eCVE-2026-87302\u003c/a\u003e.\u003c/p\u003e\n\u003ch2 id=\"cve-2026-91341\"\u003eCVE-2026-91341\u003c/h2\u003e\n\u003cp\u003eCVE-2026-91341 is a critical vulnerability in the Oracle Outside In Clean Content SDK component of Oracle Fusion Middleware. An unauthenticated attacker with network access via HTTP can exploit this vulnerability to perform unauthorized modification, creation, or deletion of critical data, and can trigger a denial-of-service condition via an application crash or hang.\u003c/p\u003e\n\u003cp\u003eAffected products:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eOutside In Technology (8.5.8)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eSource: \u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-91341\"\u003ehttps://nvd.nist.gov/vuln/detail/CVE-2026-91341\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eRelated in this roundup: \u003ca href=\"#cve-2026-91354\"\u003eCVE-2026-91354\u003c/a\u003e.\u003c/p\u003e\n\u003ch2 id=\"cve-2026-91354\"\u003eCVE-2026-91354\u003c/h2\u003e\n\u003cp\u003eCVE-2026-91354 is a critical vulnerability in the Oracle Outside In Clean Content SDK (part of Oracle Fusion Middleware) version 8.5.8. An attacker with low privileges can exploit this flaw over HTTP to achieve a full takeover of the component. The vulnerability allows for scope change, potentially impacting other products integrated with the SDK, with a CVSS base score of 9.9.\u003c/p\u003e\n\u003cp\u003eAffected products:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eOutside In Technology (8.5.8)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eSource: \u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-91354\"\u003ehttps://nvd.nist.gov/vuln/detail/CVE-2026-91354\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eRelated in this roundup: \u003ca href=\"#cve-2026-91341\"\u003eCVE-2026-91341\u003c/a\u003e.\u003c/p\u003e\n\u003ch2 id=\"cve-2026-91408\"\u003eCVE-2026-91408\u003c/h2\u003e\n\u003cp\u003eCVE-2026-91408 is a critical vulnerability in the Oracle Identity Manager component of Oracle Fusion Middleware. An unauthenticated attacker with network access via T3 or IIOP protocols can exploit this flaw to achieve a full takeover of the application. Given the CVSS score of 9.8 and the ease of exploitation, this represents a significant risk to confidentiality, integrity, and availability.\u003c/p\u003e\n\u003cp\u003eAffected products:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eOracle Identity Manager (12.2.1.4.0, 14.1.2.1.0)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eSource: \u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-91408\"\u003ehttps://nvd.nist.gov/vuln/detail/CVE-2026-91408\u003c/a\u003e\u003c/p\u003e\n\u003ch2 id=\"cve-2026-91490\"\u003eCVE-2026-91490\u003c/h2\u003e\n\u003cp\u003eCVE-2026-91490 is a high-severity vulnerability in the LDAP Gateway component of the Oracle Identity Manager Connector, allowing unauthenticated attackers with network access to perform unauthorized read, write, or delete operations on critical data. The vulnerability is network-exploitable with low complexity, potentially leading to a total compromise of data integrity and confidentiality within the affected connector.\u003c/p\u003e\n\u003cp\u003eAffected products:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eIdentity Manager Connector (12.2.1.4.0, 14.1.2.1.0)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eSource: \u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-91490\"\u003ehttps://nvd.nist.gov/vuln/detail/CVE-2026-91490\u003c/a\u003e\u003c/p\u003e\n\u003ch2 id=\"cve-2026-91491\"\u003eCVE-2026-91491\u003c/h2\u003e\n\u003cp\u003eCVE-2026-91491 is a critical vulnerability in the LDAP Gateway component of Oracle Identity Manager Connector, part of Oracle Fusion Middleware. The vulnerability allows an unauthenticated, remote attacker with network access to the LDAP service to fully compromise the product, leading to a complete takeover. It is rated with a CVSS 3.1 base score of 9.8.\u003c/p\u003e\n\u003cp\u003eAffected products:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eOracle Identity Manager Connector (12.2.1.4.0, 14.1.2.1.0)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eSource: \u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-91491\"\u003ehttps://nvd.nist.gov/vuln/detail/CVE-2026-91491\u003c/a\u003e\u003c/p\u003e\n\u003ch2 id=\"cve-2026-91495\"\u003eCVE-2026-91495\u003c/h2\u003e\n\u003cp\u003eOracle WebCenter Content is vulnerable to an unauthenticated, remotely exploitable flaw that allows an attacker to achieve a complete system takeover via HTTP. The vulnerability carries a CVSS 3.1 base score of 9.8, indicating high impact on confidentiality, integrity, and availability.\u003c/p\u003e\n\u003cp\u003eAffected products:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eWebCenter Content (12.2.1.4.0, 14.1.2.0.0)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eSource: \u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-91495\"\u003ehttps://nvd.nist.gov/vuln/detail/CVE-2026-91495\u003c/a\u003e\u003c/p\u003e\n\u003ch2 id=\"cve-2026-91622\"\u003eCVE-2026-91622\u003c/h2\u003e\n\u003cp\u003eCVE-2026-91622 is a critical vulnerability in the Product Quality Management component of Oracle Agile Product Lifecycle Management for Process version 6.2.4. The vulnerability allows an unauthenticated, remote attacker to perform unauthorized actions, including the creation, deletion, or modification of critical data, through a web-based attack vector. Exploitation requires user interaction and can result in significant data compromise across the affected system due to scope change.\u003c/p\u003e\n\u003cp\u003eAffected products:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eAgile Product Lifecycle Management for Process (6.2.4)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eSource: \u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-91622\"\u003ehttps://nvd.nist.gov/vuln/detail/CVE-2026-91622\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eRelated in this roundup: \u003ca href=\"#cve-2026-91624\"\u003eCVE-2026-91624\u003c/a\u003e, \u003ca href=\"#cve-2026-101473\"\u003eCVE-2026-101473\u003c/a\u003e, \u003ca href=\"#cve-2026-101593\"\u003eCVE-2026-101593\u003c/a\u003e, \u003ca href=\"#cve-2026-101594\"\u003eCVE-2026-101594\u003c/a\u003e, \u003ca href=\"#cve-2026-101596\"\u003eCVE-2026-101596\u003c/a\u003e.\u003c/p\u003e\n\u003ch2 id=\"cve-2026-91624\"\u003eCVE-2026-91624\u003c/h2\u003e\n\u003cp\u003eCVE-2026-91624 is a vulnerability in the Product Quality Management component of Oracle Agile Product Lifecycle Management for Process version 6.2.4. The vulnerability allows an unauthenticated, remote attacker to gain unauthorized access to or modify critical data via HTTP requests, posing a significant risk to data confidentiality and integrity.\u003c/p\u003e\n\u003cp\u003eAffected products:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eAgile Product Lifecycle Management for Process (6.2.4)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eSource: \u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-91624\"\u003ehttps://nvd.nist.gov/vuln/detail/CVE-2026-91624\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eRelated in this roundup: \u003ca href=\"#cve-2026-91622\"\u003eCVE-2026-91622\u003c/a\u003e, \u003ca href=\"#cve-2026-101473\"\u003eCVE-2026-101473\u003c/a\u003e, \u003ca href=\"#cve-2026-101593\"\u003eCVE-2026-101593\u003c/a\u003e, \u003ca href=\"#cve-2026-101594\"\u003eCVE-2026-101594\u003c/a\u003e, \u003ca href=\"#cve-2026-101596\"\u003eCVE-2026-101596\u003c/a\u003e.\u003c/p\u003e\n\u003ch2 id=\"cve-2026-91637\"\u003eCVE-2026-91637\u003c/h2\u003e\n\u003cp\u003eOracle Essbase version 21.8.3.0.0 is vulnerable to an easily exploitable flaw in its Security component. A low-privileged attacker with network access via HTTP can achieve a full takeover of the system. The vulnerability carries a high CVSS score of 9.9 and impacts confidentiality, integrity, and availability, with the potential for scope change to affect other integrated products.\u003c/p\u003e\n\u003cp\u003eAffected products:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eEssbase (21.8.3.0.0)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eSource: \u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-91637\"\u003ehttps://nvd.nist.gov/vuln/detail/CVE-2026-91637\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eRelated in this roundup: \u003ca href=\"#cve-2026-91638\"\u003eCVE-2026-91638\u003c/a\u003e, \u003ca href=\"#cve-2026-91644\"\u003eCVE-2026-91644\u003c/a\u003e, \u003ca href=\"#cve-2026-91655\"\u003eCVE-2026-91655\u003c/a\u003e, \u003ca href=\"#cve-2026-91658\"\u003eCVE-2026-91658\u003c/a\u003e, \u003ca href=\"#cve-2026-91663\"\u003eCVE-2026-91663\u003c/a\u003e, \u003ca href=\"#cve-2026-91665\"\u003eCVE-2026-91665\u003c/a\u003e.\u003c/p\u003e\n\u003ch2 id=\"cve-2026-91638\"\u003eCVE-2026-91638\u003c/h2\u003e\n\u003cp\u003eCVE-2026-91638 is a critical vulnerability in the Security component of Oracle Essbase, version 21.8.3.0.0. The flaw is remotely exploitable via HTTP by low-privileged attackers and allows for full system takeover with a scope change impact, potentially affecting other connected products. Due to the high CVSS score of 9.9 and the nature of the exploit, this represents a significant risk for unauthorized access, data compromise, and system instability.\u003c/p\u003e\n\u003cp\u003eAffected products:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eEssbase (21.8.3.0.0)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eSource: \u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-91638\"\u003ehttps://nvd.nist.gov/vuln/detail/CVE-2026-91638\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eRelated in this roundup: \u003ca href=\"#cve-2026-91637\"\u003eCVE-2026-91637\u003c/a\u003e, \u003ca href=\"#cve-2026-91644\"\u003eCVE-2026-91644\u003c/a\u003e, \u003ca href=\"#cve-2026-91655\"\u003eCVE-2026-91655\u003c/a\u003e, \u003ca href=\"#cve-2026-91658\"\u003eCVE-2026-91658\u003c/a\u003e, \u003ca href=\"#cve-2026-91663\"\u003eCVE-2026-91663\u003c/a\u003e, \u003ca href=\"#cve-2026-91665\"\u003eCVE-2026-91665\u003c/a\u003e.\u003c/p\u003e\n\u003ch2 id=\"cve-2026-91644\"\u003eCVE-2026-91644\u003c/h2\u003e\n\u003cp\u003eCVE-2026-91644 is a critical, easily exploitable vulnerability in the Security component of Oracle Essbase (version 21.8.3.0.0). The flaw allows an unauthenticated remote attacker with network access via HTTP to perform unauthorized data access, updates, insertions, or deletions. Due to a scope change, successful exploitation can compromise the broader environment beyond the Essbase application itself.\u003c/p\u003e\n\u003cp\u003eAffected products:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eEssbase (21.8.3.0.0)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eSource: \u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-91644\"\u003ehttps://nvd.nist.gov/vuln/detail/CVE-2026-91644\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eRelated in this roundup: \u003ca href=\"#cve-2026-91637\"\u003eCVE-2026-91637\u003c/a\u003e, \u003ca href=\"#cve-2026-91638\"\u003eCVE-2026-91638\u003c/a\u003e, \u003ca href=\"#cve-2026-91655\"\u003eCVE-2026-91655\u003c/a\u003e, \u003ca href=\"#cve-2026-91658\"\u003eCVE-2026-91658\u003c/a\u003e, \u003ca href=\"#cve-2026-91663\"\u003eCVE-2026-91663\u003c/a\u003e, \u003ca href=\"#cve-2026-91665\"\u003eCVE-2026-91665\u003c/a\u003e.\u003c/p\u003e\n\u003ch2 id=\"cve-2026-91655\"\u003eCVE-2026-91655\u003c/h2\u003e\n\u003cp\u003eCVE-2026-91655 is a vulnerability in the Security component of Oracle Essbase (version 21.8.3.0.0). The vulnerability is network-exploitable via HTTP by low-privileged attackers. Successful exploitation allows for unauthorized access, modification, or deletion of critical data, as well as a partial denial of service (DoS), with a scope change impact on additional products. The vulnerability carries a CVSS 3.1 base score of 9.1.\u003c/p\u003e\n\u003cp\u003eAffected products:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eEssbase (21.8.3.0.0)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eSource: \u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-91655\"\u003ehttps://nvd.nist.gov/vuln/detail/CVE-2026-91655\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eRelated in this roundup: \u003ca href=\"#cve-2026-91637\"\u003eCVE-2026-91637\u003c/a\u003e, \u003ca href=\"#cve-2026-91638\"\u003eCVE-2026-91638\u003c/a\u003e, \u003ca href=\"#cve-2026-91644\"\u003eCVE-2026-91644\u003c/a\u003e, \u003ca href=\"#cve-2026-91658\"\u003eCVE-2026-91658\u003c/a\u003e, \u003ca href=\"#cve-2026-91663\"\u003eCVE-2026-91663\u003c/a\u003e, \u003ca href=\"#cve-2026-91665\"\u003eCVE-2026-91665\u003c/a\u003e.\u003c/p\u003e\n\u003ch2 id=\"cve-2026-91656\"\u003eCVE-2026-91656\u003c/h2\u003e\n\u003cp\u003eCVE-2026-91656 is a critical vulnerability in the Federated Partitions component of Oracle Essbase version 21.8.3.0.0. The vulnerability is network-exploitable via HTTP by a low-privileged user, allowing for unauthorized access, modification, or deletion of critical data, as well as potential partial denial-of-service conditions. Due to the scope change vector, successful exploitation may also impact integrated products beyond the affected component.\u003c/p\u003e\n\u003cp\u003eSource: \u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-91656\"\u003ehttps://nvd.nist.gov/vuln/detail/CVE-2026-91656\u003c/a\u003e\u003c/p\u003e\n\u003ch2 id=\"cve-2026-91658\"\u003eCVE-2026-91658\u003c/h2\u003e\n\u003cp\u003eCVE-2026-91658 is a critical vulnerability in the Security component of Oracle Essbase, version 21.8.3.0.0. The flaw is remotely exploitable over HTTP by a low-privileged attacker, potentially leading to a full system takeover. Due to a scope change (S:C), the vulnerability can impact environments beyond the Essbase instance itself. The vulnerability is characterized by high impact on confidentiality, integrity, and availability.\u003c/p\u003e\n\u003cp\u003eAffected products:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eEssbase (21.8.3.0.0)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eSource: \u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-91658\"\u003ehttps://nvd.nist.gov/vuln/detail/CVE-2026-91658\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eRelated in this roundup: \u003ca href=\"#cve-2026-91637\"\u003eCVE-2026-91637\u003c/a\u003e, \u003ca href=\"#cve-2026-91638\"\u003eCVE-2026-91638\u003c/a\u003e, \u003ca href=\"#cve-2026-91644\"\u003eCVE-2026-91644\u003c/a\u003e, \u003ca href=\"#cve-2026-91655\"\u003eCVE-2026-91655\u003c/a\u003e, \u003ca href=\"#cve-2026-91663\"\u003eCVE-2026-91663\u003c/a\u003e, \u003ca href=\"#cve-2026-91665\"\u003eCVE-2026-91665\u003c/a\u003e.\u003c/p\u003e\n\u003ch2 id=\"cve-2026-91663\"\u003eCVE-2026-91663\u003c/h2\u003e\n\u003cp\u003eOracle Essbase component Security contains a critical vulnerability allowing a low-privileged attacker with network access via T3 or IIOP protocols to achieve a full takeover of the application. The vulnerability carries a CVSS 9.9 and involves a scope change, potentially impacting other integrated products.\u003c/p\u003e\n\u003cp\u003eAffected products:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eEssbase (21.8.3.0.0)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eSource: \u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-91663\"\u003ehttps://nvd.nist.gov/vuln/detail/CVE-2026-91663\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eRelated in this roundup: \u003ca href=\"#cve-2026-91637\"\u003eCVE-2026-91637\u003c/a\u003e, \u003ca href=\"#cve-2026-91638\"\u003eCVE-2026-91638\u003c/a\u003e, \u003ca href=\"#cve-2026-91644\"\u003eCVE-2026-91644\u003c/a\u003e, \u003ca href=\"#cve-2026-91655\"\u003eCVE-2026-91655\u003c/a\u003e, \u003ca href=\"#cve-2026-91658\"\u003eCVE-2026-91658\u003c/a\u003e, \u003ca href=\"#cve-2026-91665\"\u003eCVE-2026-91665\u003c/a\u003e.\u003c/p\u003e\n\u003ch2 id=\"cve-2026-91665\"\u003eCVE-2026-91665\u003c/h2\u003e\n\u003cp\u003eCVE-2026-91665 is a critical, unauthenticated remote code execution vulnerability residing in the Security component of Oracle Essbase version 21.8.3.0.0. The vulnerability allows an attacker with network access via TCP to fully compromise the target system, resulting in a complete takeover of the application with high impact to confidentiality, integrity, and availability.\u003c/p\u003e\n\u003cp\u003eAffected products:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eEssbase (21.8.3.0.0)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eSource: \u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-91665\"\u003ehttps://nvd.nist.gov/vuln/detail/CVE-2026-91665\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eRelated in this roundup: \u003ca href=\"#cve-2026-91637\"\u003eCVE-2026-91637\u003c/a\u003e, \u003ca href=\"#cve-2026-91638\"\u003eCVE-2026-91638\u003c/a\u003e, \u003ca href=\"#cve-2026-91644\"\u003eCVE-2026-91644\u003c/a\u003e, \u003ca href=\"#cve-2026-91655\"\u003eCVE-2026-91655\u003c/a\u003e, \u003ca href=\"#cve-2026-91658\"\u003eCVE-2026-91658\u003c/a\u003e, \u003ca href=\"#cve-2026-91663\"\u003eCVE-2026-91663\u003c/a\u003e.\u003c/p\u003e\n\u003ch2 id=\"cve-2026-101387\"\u003eCVE-2026-101387\u003c/h2\u003e\n\u003cp\u003eA vulnerability in the Oracle Capacity component of Oracle E-Business Suite allows a low-privileged attacker with network access via HTTP to perform unauthorized operations, including accessing, updating, inserting, or deleting critical data, and causing a partial denial of service. The vulnerability is characterized by a CVSS 3.1 base score of 7.6.\u003c/p\u003e\n\u003cp\u003eAffected products:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eE-Business Suite (12.2.3-12.2.15)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eSource: \u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-101387\"\u003ehttps://nvd.nist.gov/vuln/detail/CVE-2026-101387\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eRelated in this roundup: \u003ca href=\"#cve-2026-101808\"\u003eCVE-2026-101808\u003c/a\u003e, \u003ca href=\"#cve-2026-101809\"\u003eCVE-2026-101809\u003c/a\u003e, \u003ca href=\"#cve-2026-101536\"\u003eCVE-2026-101536\u003c/a\u003e, \u003ca href=\"#cve-2026-101540\"\u003eCVE-2026-101540\u003c/a\u003e, \u003ca href=\"#cve-2026-101545\"\u003eCVE-2026-101545\u003c/a\u003e, \u003ca href=\"#cve-2026-101546\"\u003eCVE-2026-101546\u003c/a\u003e, \u003ca href=\"#cve-2026-101551\"\u003eCVE-2026-101551\u003c/a\u003e, \u003ca href=\"#cve-2026-101552\"\u003eCVE-2026-101552\u003c/a\u003e, \u003ca href=\"#cve-2026-101555\"\u003eCVE-2026-101555\u003c/a\u003e, \u003ca href=\"#cve-2026-101557\"\u003eCVE-2026-101557\u003c/a\u003e, \u003ca href=\"#cve-2026-101566\"\u003eCVE-2026-101566\u003c/a\u003e.\u003c/p\u003e\n\u003ch2 id=\"cve-2026-101398\"\u003eCVE-2026-101398\u003c/h2\u003e\n\u003cp\u003eCVE-2026-101398 is an easily exploitable vulnerability in the Oracle Capacity component of Oracle E-Business Suite, affecting versions 12.2.3 through 12.2.15. A low-privileged attacker with network access via HTTP can exploit this flaw to gain unauthorized access to or modify critical data, as well as cause a partial denial of service (DoS) within the Oracle Capacity product.\u003c/p\u003e\n\u003cp\u003eAffected products:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eOracle E-Business Suite (12.2.3-12.2.15)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eSource: \u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-101398\"\u003ehttps://nvd.nist.gov/vuln/detail/CVE-2026-101398\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eRelated in this roundup: \u003ca href=\"#cve-2026-101634\"\u003eCVE-2026-101634\u003c/a\u003e, \u003ca href=\"#cve-2026-101767\"\u003eCVE-2026-101767\u003c/a\u003e, \u003ca href=\"#cve-2026-101466\"\u003eCVE-2026-101466\u003c/a\u003e, \u003ca href=\"#cve-2026-101519\"\u003eCVE-2026-101519\u003c/a\u003e, \u003ca href=\"#cve-2026-101532\"\u003eCVE-2026-101532\u003c/a\u003e, \u003ca href=\"#cve-2026-101534\"\u003eCVE-2026-101534\u003c/a\u003e, \u003ca href=\"#cve-2026-101535\"\u003eCVE-2026-101535\u003c/a\u003e, \u003ca href=\"#cve-2026-101541\"\u003eCVE-2026-101541\u003c/a\u003e, \u003ca href=\"#cve-2026-101542\"\u003eCVE-2026-101542\u003c/a\u003e, \u003ca href=\"#cve-2026-101543\"\u003eCVE-2026-101543\u003c/a\u003e, \u003ca href=\"#cve-2026-101544\"\u003eCVE-2026-101544\u003c/a\u003e, \u003ca href=\"#cve-2026-101554\"\u003eCVE-2026-101554\u003c/a\u003e, \u003ca href=\"#cve-2026-101556\"\u003eCVE-2026-101556\u003c/a\u003e, \u003ca href=\"#cve-2026-101567\"\u003eCVE-2026-101567\u003c/a\u003e.\u003c/p\u003e\n\u003ch2 id=\"cve-2026-101438\"\u003eCVE-2026-101438\u003c/h2\u003e\n\u003cp\u003eCVE-2026-101438 is a vulnerability in Oracle Siebel CRM Cloud Applications (specifically the Siebel Cloud Manager component) that allows an unauthenticated attacker with physical access to the network segment of the hosting hardware to gain unauthorized access to or modify critical data. The vulnerability features a scope change and carries a CVSS 3.1 base score of 8.0, indicating significant impact on data confidentiality and integrity.\u003c/p\u003e\n\u003cp\u003eAffected products:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eSiebel CRM Cloud Applications (22.3-26.9)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eSource: \u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-101438\"\u003ehttps://nvd.nist.gov/vuln/detail/CVE-2026-101438\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eRelated in this roundup: \u003ca href=\"#cve-2026-101446\"\u003eCVE-2026-101446\u003c/a\u003e.\u003c/p\u003e\n\u003ch2 id=\"cve-2026-101447\"\u003eCVE-2026-101447\u003c/h2\u003e\n\u003cp\u003eCVE-2026-101447 is a vulnerability within the Workflow component of Oracle Siebel CRM Development versions 25.12 through 26.9. The vulnerability allows a low-privileged attacker with network access to compromise the application via HTTP. Exploitation is categorized as difficult and requires human interaction from a victim, but if successful, it can lead to a full takeover of the Siebel CRM Development instance.\u003c/p\u003e\n\u003cp\u003eAffected products:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eSiebel CRM Development (25.12-26.9)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eSource: \u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-101447\"\u003ehttps://nvd.nist.gov/vuln/detail/CVE-2026-101447\u003c/a\u003e\u003c/p\u003e\n\u003ch2 id=\"cve-2026-101451\"\u003eCVE-2026-101451\u003c/h2\u003e\n\u003cp\u003eCVE-2026-101451 is a vulnerability in the Web UI component of Oracle Siebel CRM's Life Sciences product, affecting versions 17.0 through 26.9. The vulnerability allows a low-privileged attacker with network access via HTTP to perform unauthorized creation, deletion, or modification of critical data, as well as gain unauthorized access to all accessible data. The attack requires human interaction and can result in a scope change impacting other products.\u003c/p\u003e\n\u003cp\u003eAffected products:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eSiebel CRM (17.0-26.9)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eSource: \u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-101451\"\u003ehttps://nvd.nist.gov/vuln/detail/CVE-2026-101451\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eRelated in this roundup: \u003ca href=\"#cve-2026-101457\"\u003eCVE-2026-101457\u003c/a\u003e, \u003ca href=\"#cve-2026-101458\"\u003eCVE-2026-101458\u003c/a\u003e, \u003ca href=\"#cve-2026-101460\"\u003eCVE-2026-101460\u003c/a\u003e, \u003ca href=\"#cve-2026-101463\"\u003eCVE-2026-101463\u003c/a\u003e, \u003ca href=\"#cve-2026-101464\"\u003eCVE-2026-101464\u003c/a\u003e, \u003ca href=\"#cve-2026-101467\"\u003eCVE-2026-101467\u003c/a\u003e, \u003ca href=\"#cve-2026-101495\"\u003eCVE-2026-101495\u003c/a\u003e, \u003ca href=\"#cve-2026-101508\"\u003eCVE-2026-101508\u003c/a\u003e.\u003c/p\u003e\n\u003ch2 id=\"cve-2026-101452\"\u003eCVE-2026-101452\u003c/h2\u003e\n\u003cp\u003eCVE-2026-101452 is a vulnerability in the AHF Instant Diagnostic Replay component of the Oracle Autonomous Health Framework. An attacker with low-level local access to the underlying infrastructure can exploit this flaw to gain complete control over the Oracle Autonomous Health Framework. The vulnerability is rated with a CVSS base score of 7.8, indicating significant impact on confidentiality, integrity, and availability.\u003c/p\u003e\n\u003cp\u003eAffected products:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eAutonomous Health Framework (26.3-26.8)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eSource: \u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-101452\"\u003ehttps://nvd.nist.gov/vuln/detail/CVE-2026-101452\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eRelated in this roundup: \u003ca href=\"#cve-2026-101477\"\u003eCVE-2026-101477\u003c/a\u003e, \u003ca href=\"#cve-2026-101478\"\u003eCVE-2026-101478\u003c/a\u003e.\u003c/p\u003e\n\u003ch2 id=\"cve-2026-101457\"\u003eCVE-2026-101457\u003c/h2\u003e\n\u003cp\u003eOracle Siebel CRM, specifically the eDetailing component of Siebel Apps - Life Sciences, contains a vulnerability (CVE-2026-101457) that allows a low-privileged attacker with network access to perform SQL injection attacks. Successful exploitation can lead to a full takeover of the application, compromising confidentiality, integrity, and availability.\u003c/p\u003e\n\u003cp\u003eAffected products:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eSiebel CRM (17.0-26.9)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eSource: \u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-101457\"\u003ehttps://nvd.nist.gov/vuln/detail/CVE-2026-101457\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eRelated in this roundup: \u003ca href=\"#cve-2026-101451\"\u003eCVE-2026-101451\u003c/a\u003e, \u003ca href=\"#cve-2026-101458\"\u003eCVE-2026-101458\u003c/a\u003e, \u003ca href=\"#cve-2026-101460\"\u003eCVE-2026-101460\u003c/a\u003e, \u003ca href=\"#cve-2026-101463\"\u003eCVE-2026-101463\u003c/a\u003e, \u003ca href=\"#cve-2026-101464\"\u003eCVE-2026-101464\u003c/a\u003e, \u003ca href=\"#cve-2026-101467\"\u003eCVE-2026-101467\u003c/a\u003e, \u003ca href=\"#cve-2026-101495\"\u003eCVE-2026-101495\u003c/a\u003e, \u003ca href=\"#cve-2026-101508\"\u003eCVE-2026-101508\u003c/a\u003e.\u003c/p\u003e\n\u003ch2 id=\"cve-2026-101458\"\u003eCVE-2026-101458\u003c/h2\u003e\n\u003cp\u003eCVE-2026-101458 is a high-severity vulnerability in the Oracle Siebel CRM Deployment component (Server Infrastructure), affecting versions 17.0 through 26.9. The vulnerability is easily exploitable by an unauthenticated attacker over HTTP, allowing for unauthorized access, modification, or deletion of critical data. The flaw carries a CVSS 3.1 base score of 8.2 and specifically impacts data confidentiality and integrity.\u003c/p\u003e\n\u003cp\u003eAffected products:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eSiebel CRM (17.0-26.9)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eSource: \u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-101458\"\u003ehttps://nvd.nist.gov/vuln/detail/CVE-2026-101458\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eRelated in this roundup: \u003ca href=\"#cve-2026-101451\"\u003eCVE-2026-101451\u003c/a\u003e, \u003ca href=\"#cve-2026-101457\"\u003eCVE-2026-101457\u003c/a\u003e, \u003ca href=\"#cve-2026-101460\"\u003eCVE-2026-101460\u003c/a\u003e, \u003ca href=\"#cve-2026-101463\"\u003eCVE-2026-101463\u003c/a\u003e, \u003ca href=\"#cve-2026-101464\"\u003eCVE-2026-101464\u003c/a\u003e, \u003ca href=\"#cve-2026-101467\"\u003eCVE-2026-101467\u003c/a\u003e, \u003ca href=\"#cve-2026-101495\"\u003eCVE-2026-101495\u003c/a\u003e, \u003ca href=\"#cve-2026-101508\"\u003eCVE-2026-101508\u003c/a\u003e.\u003c/p\u003e\n\u003ch2 id=\"cve-2026-101459\"\u003eCVE-2026-101459\u003c/h2\u003e\n\u003cp\u003eCVE-2026-101459 is a vulnerability in the Server Infrastructure component of Oracle Siebel CRM Deployment versions 17.0 through 26.9. The vulnerability allows a low-privileged network-based attacker to perform unauthorized data modification, deletion, or exfiltration, as well as cause a partial denial of service via HTTP requests.\u003c/p\u003e\n\u003cp\u003eAffected products:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eSiebel CRM Deployment (17.0-26.9)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eSource: \u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-101459\"\u003ehttps://nvd.nist.gov/vuln/detail/CVE-2026-101459\u003c/a\u003e\u003c/p\u003e\n\u003ch2 id=\"cve-2026-101460\"\u003eCVE-2026-101460\u003c/h2\u003e\n\u003cp\u003eCVE-2026-101460 is an easily exploitable vulnerability in the Server Infrastructure component of Oracle Siebel CRM versions 17.0 through 26.9. The flaw allows an unauthenticated, network-adjacent attacker to gain unauthorized access to critical data or potentially full access to information managed by the Siebel CRM Deployment product via TLS.\u003c/p\u003e\n\u003cp\u003eAffected products:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eSiebel CRM (17.0-26.9)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eSource: \u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-101460\"\u003ehttps://nvd.nist.gov/vuln/detail/CVE-2026-101460\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eRelated in this roundup: \u003ca href=\"#cve-2026-101451\"\u003eCVE-2026-101451\u003c/a\u003e, \u003ca href=\"#cve-2026-101457\"\u003eCVE-2026-101457\u003c/a\u003e, \u003ca href=\"#cve-2026-101458\"\u003eCVE-2026-101458\u003c/a\u003e, \u003ca href=\"#cve-2026-101463\"\u003eCVE-2026-101463\u003c/a\u003e, \u003ca href=\"#cve-2026-101464\"\u003eCVE-2026-101464\u003c/a\u003e, \u003ca href=\"#cve-2026-101467\"\u003eCVE-2026-101467\u003c/a\u003e, \u003ca href=\"#cve-2026-101495\"\u003eCVE-2026-101495\u003c/a\u003e, \u003ca href=\"#cve-2026-101508\"\u003eCVE-2026-101508\u003c/a\u003e.\u003c/p\u003e\n\u003ch2 id=\"cve-2026-101461\"\u003eCVE-2026-101461\u003c/h2\u003e\n\u003cp\u003eCVE-2026-101461 is a vulnerability in the Server Infrastructure component of Oracle Siebel CRM Deployment versions 17.0 through 26.9. The flaw allows an unauthenticated, network-adjacent attacker to bypass authentication via HTTP, potentially leading to unauthorized access to or exposure of critical sensitive data stored within the Siebel CRM environment.\u003c/p\u003e\n\u003cp\u003eSource: \u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-101461\"\u003ehttps://nvd.nist.gov/vuln/detail/CVE-2026-101461\u003c/a\u003e\u003c/p\u003e\n\u003ch2 id=\"cve-2026-101463\"\u003eCVE-2026-101463\u003c/h2\u003e\n\u003cp\u003eAn unauthenticated, network-exploitable vulnerability exists in the UIF Open UI component of Oracle Siebel CRM versions 17.0 through 26.9. The flaw allows remote attackers to compromise the Siebel CRM End User product and gain unauthorized access to critical data. The vulnerability is rated with a CVSS 3.1 base score of 7.5, reflecting a significant impact on confidentiality.\u003c/p\u003e\n\u003cp\u003eAffected products:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eSiebel CRM (17.0-26.9)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eSource: \u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-101463\"\u003ehttps://nvd.nist.gov/vuln/detail/CVE-2026-101463\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eRelated in this roundup: \u003ca href=\"#cve-2026-101451\"\u003eCVE-2026-101451\u003c/a\u003e, \u003ca href=\"#cve-2026-101457\"\u003eCVE-2026-101457\u003c/a\u003e, \u003ca href=\"#cve-2026-101458\"\u003eCVE-2026-101458\u003c/a\u003e, \u003ca href=\"#cve-2026-101460\"\u003eCVE-2026-101460\u003c/a\u003e, \u003ca href=\"#cve-2026-101464\"\u003eCVE-2026-101464\u003c/a\u003e, \u003ca href=\"#cve-2026-101467\"\u003eCVE-2026-101467\u003c/a\u003e, \u003ca href=\"#cve-2026-101495\"\u003eCVE-2026-101495\u003c/a\u003e, \u003ca href=\"#cve-2026-101508\"\u003eCVE-2026-101508\u003c/a\u003e.\u003c/p\u003e\n\u003ch2 id=\"cve-2026-101464\"\u003eCVE-2026-101464\u003c/h2\u003e\n\u003cp\u003eCVE-2026-101464 is a vulnerability in the Server Infrastructure component of Oracle Siebel CRM versions 17.0 through 26.9. A low-privileged attacker with local logon access to the host environment can exploit this flaw to gain unauthorized read/write access to critical data managed by Siebel CRM Deployment, resulting in significant confidentiality and integrity impact.\u003c/p\u003e\n\u003cp\u003eAffected products:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eSiebel CRM (17.0 - 26.9)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eSource: \u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-101464\"\u003ehttps://nvd.nist.gov/vuln/detail/CVE-2026-101464\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eRelated in this roundup: \u003ca href=\"#cve-2026-101451\"\u003eCVE-2026-101451\u003c/a\u003e, \u003ca href=\"#cve-2026-101457\"\u003eCVE-2026-101457\u003c/a\u003e, \u003ca href=\"#cve-2026-101458\"\u003eCVE-2026-101458\u003c/a\u003e, \u003ca href=\"#cve-2026-101460\"\u003eCVE-2026-101460\u003c/a\u003e, \u003ca href=\"#cve-2026-101463\"\u003eCVE-2026-101463\u003c/a\u003e, \u003ca href=\"#cve-2026-101467\"\u003eCVE-2026-101467\u003c/a\u003e, \u003ca href=\"#cve-2026-101495\"\u003eCVE-2026-101495\u003c/a\u003e, \u003ca href=\"#cve-2026-101508\"\u003eCVE-2026-101508\u003c/a\u003e.\u003c/p\u003e\n\u003ch2 id=\"cve-2026-101466\"\u003eCVE-2026-101466\u003c/h2\u003e\n\u003cp\u003eCVE-2026-101466 is a vulnerability in the Oracle EDI Gateway component of Oracle E-Business Suite versions 12.2.3 through 12.2.15. The vulnerability is remotely exploitable over HTTP by a high-privileged attacker, potentially leading to a full takeover of the Oracle EDI Gateway component. It carries a CVSS 3.1 base score of 7.2.\u003c/p\u003e\n\u003cp\u003eAffected products:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eOracle E-Business Suite (12.2.3-12.2.15)\u003c/li\u003e\n\u003cli\u003eOracle EDI Gateway (12.2.3-12.2.15)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eSource: \u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-101466\"\u003ehttps://nvd.nist.gov/vuln/detail/CVE-2026-101466\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eRelated in this roundup: \u003ca href=\"#cve-2026-101634\"\u003eCVE-2026-101634\u003c/a\u003e, \u003ca href=\"#cve-2026-101767\"\u003eCVE-2026-101767\u003c/a\u003e, \u003ca href=\"#cve-2026-101398\"\u003eCVE-2026-101398\u003c/a\u003e, \u003ca href=\"#cve-2026-101519\"\u003eCVE-2026-101519\u003c/a\u003e, \u003ca href=\"#cve-2026-101532\"\u003eCVE-2026-101532\u003c/a\u003e, \u003ca href=\"#cve-2026-101534\"\u003eCVE-2026-101534\u003c/a\u003e, \u003ca href=\"#cve-2026-101535\"\u003eCVE-2026-101535\u003c/a\u003e, \u003ca href=\"#cve-2026-101541\"\u003eCVE-2026-101541\u003c/a\u003e, \u003ca href=\"#cve-2026-101542\"\u003eCVE-2026-101542\u003c/a\u003e, \u003ca href=\"#cve-2026-101543\"\u003eCVE-2026-101543\u003c/a\u003e, \u003ca href=\"#cve-2026-101544\"\u003eCVE-2026-101544\u003c/a\u003e, \u003ca href=\"#cve-2026-101554\"\u003eCVE-2026-101554\u003c/a\u003e, \u003ca href=\"#cve-2026-101556\"\u003eCVE-2026-101556\u003c/a\u003e, \u003ca href=\"#cve-2026-101567\"\u003eCVE-2026-101567\u003c/a\u003e.\u003c/p\u003e\n\u003ch2 id=\"cve-2026-101467\"\u003eCVE-2026-101467\u003c/h2\u003e\n\u003cp\u003eA vulnerability in the Portal Framework component of Oracle Siebel CRM allows an unauthenticated, remote attacker to gain unauthorized access to, modify, or delete critical data within the application. The vulnerability is exploitable over HTTPS and carries a CVSS 3.1 base score of 7.4.\u003c/p\u003e\n\u003cp\u003eAffected products:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eSiebel CRM (17.0-26.9)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eSource: \u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-101467\"\u003ehttps://nvd.nist.gov/vuln/detail/CVE-2026-101467\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eRelated in this roundup: \u003ca href=\"#cve-2026-101451\"\u003eCVE-2026-101451\u003c/a\u003e, \u003ca href=\"#cve-2026-101457\"\u003eCVE-2026-101457\u003c/a\u003e, \u003ca href=\"#cve-2026-101458\"\u003eCVE-2026-101458\u003c/a\u003e, \u003ca href=\"#cve-2026-101460\"\u003eCVE-2026-101460\u003c/a\u003e, \u003ca href=\"#cve-2026-101463\"\u003eCVE-2026-101463\u003c/a\u003e, \u003ca href=\"#cve-2026-101464\"\u003eCVE-2026-101464\u003c/a\u003e, \u003ca href=\"#cve-2026-101495\"\u003eCVE-2026-101495\u003c/a\u003e, \u003ca href=\"#cve-2026-101508\"\u003eCVE-2026-101508\u003c/a\u003e.\u003c/p\u003e\n\u003ch2 id=\"cve-2026-101468\"\u003eCVE-2026-101468\u003c/h2\u003e\n\u003cp\u003eCVE-2026-101468 is a critical vulnerability in the Cloud Gateway component of Oracle Siebel CRM, allowing unauthenticated remote attackers to perform unauthorized data access via HTTP. The vulnerability is network-exploitable with low attack complexity, leading to significant confidentiality impact on sensitive data stored within the Siebel CRM Deployment.\u003c/p\u003e\n\u003cp\u003eSource: \u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-101468\"\u003ehttps://nvd.nist.gov/vuln/detail/CVE-2026-101468\u003c/a\u003e\u003c/p\u003e\n\u003ch2 id=\"cve-2026-101469\"\u003eCVE-2026-101469\u003c/h2\u003e\n\u003cp\u003eCVE-2026-101469 is a vulnerability in the Installation component of Oracle Product Lifecycle Analytics version 3.6.1. A low-privileged attacker with network access can exploit this flaw using SQL to achieve a full compromise of the application, affecting confidentiality, integrity, and availability.\u003c/p\u003e\n\u003cp\u003eAffected products:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eProduct Lifecycle Analytics (3.6.1)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eSource: \u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-101469\"\u003ehttps://nvd.nist.gov/vuln/detail/CVE-2026-101469\u003c/a\u003e\u003c/p\u003e\n\u003ch2 id=\"cve-2026-101473\"\u003eCVE-2026-101473\u003c/h2\u003e\n\u003cp\u003eCVE-2026-101473 is a critical vulnerability in the Product Quality Management component of Oracle Agile Product Lifecycle Management for Process version 6.2.4. The vulnerability allows an unauthenticated, remote attacker to gain full control of the application via HTTP, resulting in impacts to confidentiality, integrity, and availability.\u003c/p\u003e\n\u003cp\u003eAffected products:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eAgile Product Lifecycle Management for Process (6.2.4)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eSource: \u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-101473\"\u003ehttps://nvd.nist.gov/vuln/detail/CVE-2026-101473\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eRelated in this roundup: \u003ca href=\"#cve-2026-91622\"\u003eCVE-2026-91622\u003c/a\u003e, \u003ca href=\"#cve-2026-91624\"\u003eCVE-2026-91624\u003c/a\u003e, \u003ca href=\"#cve-2026-101593\"\u003eCVE-2026-101593\u003c/a\u003e, \u003ca href=\"#cve-2026-101594\"\u003eCVE-2026-101594\u003c/a\u003e, \u003ca href=\"#cve-2026-101596\"\u003eCVE-2026-101596\u003c/a\u003e.\u003c/p\u003e\n\u003ch2 id=\"cve-2026-101477\"\u003eCVE-2026-101477\u003c/h2\u003e\n\u003cp\u003eOracle Autonomous Health Framework, specifically the Trace File Analyzer component, contains a vulnerability in versions 26.3 through 26.8. A low-privileged user with local access to the infrastructure can exploit this flaw to achieve full takeover of the component, resulting in high confidentiality, integrity, and availability impacts.\u003c/p\u003e\n\u003cp\u003eAffected products:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eAutonomous Health Framework (26.3-26.8)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eSource: \u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-101477\"\u003ehttps://nvd.nist.gov/vuln/detail/CVE-2026-101477\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eRelated in this roundup: \u003ca href=\"#cve-2026-101452\"\u003eCVE-2026-101452\u003c/a\u003e, \u003ca href=\"#cve-2026-101478\"\u003eCVE-2026-101478\u003c/a\u003e.\u003c/p\u003e\n\u003ch2 id=\"cve-2026-101478\"\u003eCVE-2026-101478\u003c/h2\u003e\n\u003cp\u003eOracle Autonomous Health Framework, specifically the Trace File Analyzer component in versions 26.3 through 26.8, is vulnerable to a local privilege escalation issue. A low-privileged attacker with local logon access to the host infrastructure can exploit this flaw to gain unauthorized control over the framework, resulting in a full system compromise of the component's functionality.\u003c/p\u003e\n\u003cp\u003eAffected products:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eAutonomous Health Framework (26.3-26.8)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eSource: \u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-101478\"\u003ehttps://nvd.nist.gov/vuln/detail/CVE-2026-101478\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eRelated in this roundup: \u003ca href=\"#cve-2026-101452\"\u003eCVE-2026-101452\u003c/a\u003e, \u003ca href=\"#cve-2026-101477\"\u003eCVE-2026-101477\u003c/a\u003e.\u003c/p\u003e\n\u003ch2 id=\"cve-2026-101479\"\u003eCVE-2026-101479\u003c/h2\u003e\n\u003cp\u003eCVE-2026-101479 is a vulnerability in Oracle Secure Backup that allows an unauthenticated, network-adjacent attacker to perform a denial-of-service (DoS) attack. The vulnerability permits the attacker to cause a repeatable crash or hang of the backup service, with the potential for impact to extend to other systems due to a scope change (CVSS 3.1 scope: changed).\u003c/p\u003e\n\u003cp\u003eAffected products:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eSecure Backup (19.1.0.0.0, 19.1.0.1.0)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eSource: \u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-101479\"\u003ehttps://nvd.nist.gov/vuln/detail/CVE-2026-101479\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eRelated in this roundup: \u003ca href=\"#cve-2026-101484\"\u003eCVE-2026-101484\u003c/a\u003e, \u003ca href=\"#cve-2026-101481\"\u003eCVE-2026-101481\u003c/a\u003e, \u003ca href=\"#cve-2026-101482\"\u003eCVE-2026-101482\u003c/a\u003e.\u003c/p\u003e\n\u003ch2 id=\"cve-2026-101481\"\u003eCVE-2026-101481\u003c/h2\u003e\n\u003cp\u003eCVE-2026-101481 is a vulnerability in the Device Management and Support component of Oracle Secure Backup (versions 19.1.0.0.0 and 19.1.0.1.0). An attacker with low-privileged local access can exploit this flaw to achieve full compromise of the Oracle Secure Backup application. Due to a scope change, this vulnerability may also allow for the compromise of additional products within the infrastructure.\u003c/p\u003e\n\u003cp\u003eAffected products:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eSecure Backup (19.1.0.0.0, 19.1.0.1.0)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eSource: \u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-101481\"\u003ehttps://nvd.nist.gov/vuln/detail/CVE-2026-101481\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eRelated in this roundup: \u003ca href=\"#cve-2026-101484\"\u003eCVE-2026-101484\u003c/a\u003e, \u003ca href=\"#cve-2026-101479\"\u003eCVE-2026-101479\u003c/a\u003e, \u003ca href=\"#cve-2026-101482\"\u003eCVE-2026-101482\u003c/a\u003e.\u003c/p\u003e\n\u003ch2 id=\"cve-2026-101482\"\u003eCVE-2026-101482\u003c/h2\u003e\n\u003cp\u003eOracle Secure Backup versions 19.1.0.0.0 and 19.1.0.1.0 contain a vulnerability in the Device Management and Support component that allows an authenticated, low-privileged attacker with local access to the underlying infrastructure to achieve a full takeover of the application. This vulnerability is rated with a CVSS 3.1 score of 7.8, indicating high impacts to confidentiality, integrity, and availability.\u003c/p\u003e\n\u003cp\u003eAffected products:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eSecure Backup (19.1.0.0.0, 19.1.0.1.0)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eSource: \u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-101482\"\u003ehttps://nvd.nist.gov/vuln/detail/CVE-2026-101482\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eRelated in this roundup: \u003ca href=\"#cve-2026-101484\"\u003eCVE-2026-101484\u003c/a\u003e, \u003ca href=\"#cve-2026-101479\"\u003eCVE-2026-101479\u003c/a\u003e, \u003ca href=\"#cve-2026-101481\"\u003eCVE-2026-101481\u003c/a\u003e.\u003c/p\u003e\n\u003ch2 id=\"cve-2026-101494\"\u003eCVE-2026-101494\u003c/h2\u003e\n\u003cp\u003eCVE-2026-101494 is a vulnerability in the Core component of Oracle REST Data Services versions 24.2.0 through 26.2.2. The vulnerability allows a low-privileged attacker with network access to perform unauthorized access to sensitive data via HTTP. The vulnerability has a scope change (S:C) impact, meaning successful exploitation may affect downstream products or services integrated with the REST Data Services instance.\u003c/p\u003e\n\u003cp\u003eAffected products:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eREST Data Services (24.2.0-26.2.2)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eSource: \u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-101494\"\u003ehttps://nvd.nist.gov/vuln/detail/CVE-2026-101494\u003c/a\u003e\u003c/p\u003e\n\u003ch2 id=\"cve-2026-101495\"\u003eCVE-2026-101495\u003c/h2\u003e\n\u003cp\u003eCVE-2026-101495 is a critical vulnerability in the Oracle Siebel Approval Manager component of Siebel CRM versions 17.0 through 26.9. An unauthenticated attacker with network access can exploit this flaw via HTTP to achieve a full takeover of the application. The attack requires human interaction, making it a target for social engineering or web-based redirection vectors leading to compromised system integrity, confidentiality, and availability.\u003c/p\u003e\n\u003cp\u003eAffected products:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eSiebel CRM (17.0-26.9)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eSource: \u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-101495\"\u003ehttps://nvd.nist.gov/vuln/detail/CVE-2026-101495\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eRelated in this roundup: \u003ca href=\"#cve-2026-101451\"\u003eCVE-2026-101451\u003c/a\u003e, \u003ca href=\"#cve-2026-101457\"\u003eCVE-2026-101457\u003c/a\u003e, \u003ca href=\"#cve-2026-101458\"\u003eCVE-2026-101458\u003c/a\u003e, \u003ca href=\"#cve-2026-101460\"\u003eCVE-2026-101460\u003c/a\u003e, \u003ca href=\"#cve-2026-101463\"\u003eCVE-2026-101463\u003c/a\u003e, \u003ca href=\"#cve-2026-101464\"\u003eCVE-2026-101464\u003c/a\u003e, \u003ca href=\"#cve-2026-101467\"\u003eCVE-2026-101467\u003c/a\u003e, \u003ca href=\"#cve-2026-101508\"\u003eCVE-2026-101508\u003c/a\u003e.\u003c/p\u003e\n\u003ch2 id=\"cve-2026-101498\"\u003eCVE-2026-101498\u003c/h2\u003e\n\u003cp\u003eOracle Trusted Answer Search version 26.1 contains a vulnerability in its PLSQL package component that allows an unauthenticated, remote attacker to gain full control of the application via Oracle Net. The vulnerability is difficult to exploit but results in complete compromise of confidentiality, integrity, and availability.\u003c/p\u003e\n\u003cp\u003eAffected products:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eTrusted Answer Search (26.1)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eSource: \u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-101498\"\u003ehttps://nvd.nist.gov/vuln/detail/CVE-2026-101498\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eRelated in this roundup: \u003ca href=\"#cve-2026-101501\"\u003eCVE-2026-101501\u003c/a\u003e, \u003ca href=\"#cve-2026-101503\"\u003eCVE-2026-101503\u003c/a\u003e, \u003ca href=\"#cve-2026-101504\"\u003eCVE-2026-101504\u003c/a\u003e, \u003ca href=\"#cve-2026-101505\"\u003eCVE-2026-101505\u003c/a\u003e, \u003ca href=\"#cve-2026-101506\"\u003eCVE-2026-101506\u003c/a\u003e.\u003c/p\u003e\n\u003ch2 id=\"cve-2026-101504\"\u003eCVE-2026-101504\u003c/h2\u003e\n\u003cp\u003eCVE-2026-101504 is a vulnerability in the Application expert UI component of Oracle Trusted Answer Search version 26.1. The flaw allows a low-privileged attacker with network access to perform unauthorized data operations—including read, update, insert, and delete—via HTTP. Successful exploitation requires human interaction and results in a scope change, potentially impacting other integrated products.\u003c/p\u003e\n\u003cp\u003eAffected products:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eTrusted Answer Search (26.1)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eSource: \u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-101504\"\u003ehttps://nvd.nist.gov/vuln/detail/CVE-2026-101504\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eRelated in this roundup: \u003ca href=\"#cve-2026-101501\"\u003eCVE-2026-101501\u003c/a\u003e, \u003ca href=\"#cve-2026-101503\"\u003eCVE-2026-101503\u003c/a\u003e, \u003ca href=\"#cve-2026-101498\"\u003eCVE-2026-101498\u003c/a\u003e, \u003ca href=\"#cve-2026-101505\"\u003eCVE-2026-101505\u003c/a\u003e, \u003ca href=\"#cve-2026-101506\"\u003eCVE-2026-101506\u003c/a\u003e.\u003c/p\u003e\n\u003ch2 id=\"cve-2026-101505\"\u003eCVE-2026-101505\u003c/h2\u003e\n\u003cp\u003eCVE-2026-101505 is a vulnerability in the Application expert UI component of Oracle Trusted Answer Search version 26.1. The flaw is remotely exploitable over HTTP by a low-privileged attacker, provided there is human interaction from a victim. Successful exploitation results in unauthorized access, modification, or deletion of critical data, and features a changed attack scope, potentially impacting integrated or downstream products.\u003c/p\u003e\n\u003cp\u003eAffected products:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eTrusted Answer Search (26.1)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eSource: \u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-101505\"\u003ehttps://nvd.nist.gov/vuln/detail/CVE-2026-101505\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eRelated in this roundup: \u003ca href=\"#cve-2026-101501\"\u003eCVE-2026-101501\u003c/a\u003e, \u003ca href=\"#cve-2026-101503\"\u003eCVE-2026-101503\u003c/a\u003e, \u003ca href=\"#cve-2026-101498\"\u003eCVE-2026-101498\u003c/a\u003e, \u003ca href=\"#cve-2026-101504\"\u003eCVE-2026-101504\u003c/a\u003e, \u003ca href=\"#cve-2026-101506\"\u003eCVE-2026-101506\u003c/a\u003e.\u003c/p\u003e\n\u003ch2 id=\"cve-2026-101506\"\u003eCVE-2026-101506\u003c/h2\u003e\n\u003cp\u003eCVE-2026-101506 is a vulnerability in the Application expert UI component of Oracle Trusted Answer Search version 26.1. The vulnerability allows a low-privileged attacker with network access via HTTP to perform unauthorized access to critical data or obtain complete access to all data accessible by the application. The vulnerability has a scope change (S:C) impact, meaning it may affect additional products beyond the primary target.\u003c/p\u003e\n\u003cp\u003eAffected products:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eTrusted Answer Search (26.1)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eSource: \u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-101506\"\u003ehttps://nvd.nist.gov/vuln/detail/CVE-2026-101506\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eRelated in this roundup: \u003ca href=\"#cve-2026-101501\"\u003eCVE-2026-101501\u003c/a\u003e, \u003ca href=\"#cve-2026-101503\"\u003eCVE-2026-101503\u003c/a\u003e, \u003ca href=\"#cve-2026-101498\"\u003eCVE-2026-101498\u003c/a\u003e, \u003ca href=\"#cve-2026-101504\"\u003eCVE-2026-101504\u003c/a\u003e, \u003ca href=\"#cve-2026-101505\"\u003eCVE-2026-101505\u003c/a\u003e.\u003c/p\u003e\n\u003ch2 id=\"cve-2026-101508\"\u003eCVE-2026-101508\u003c/h2\u003e\n\u003cp\u003eAn unauthenticated remote attacker can exploit a vulnerability in the EAI component of Oracle Siebel CRM via HTTP to trigger a complete denial-of-service (DoS) condition, resulting in a system hang or repeatable crash.\u003c/p\u003e\n\u003cp\u003eAffected products:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eSiebel CRM (17.0-26.9)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eSource: \u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-101508\"\u003ehttps://nvd.nist.gov/vuln/detail/CVE-2026-101508\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eRelated in this roundup: \u003ca href=\"#cve-2026-101451\"\u003eCVE-2026-101451\u003c/a\u003e, \u003ca href=\"#cve-2026-101457\"\u003eCVE-2026-101457\u003c/a\u003e, \u003ca href=\"#cve-2026-101458\"\u003eCVE-2026-101458\u003c/a\u003e, \u003ca href=\"#cve-2026-101460\"\u003eCVE-2026-101460\u003c/a\u003e, \u003ca href=\"#cve-2026-101463\"\u003eCVE-2026-101463\u003c/a\u003e, \u003ca href=\"#cve-2026-101464\"\u003eCVE-2026-101464\u003c/a\u003e, \u003ca href=\"#cve-2026-101467\"\u003eCVE-2026-101467\u003c/a\u003e, \u003ca href=\"#cve-2026-101495\"\u003eCVE-2026-101495\u003c/a\u003e.\u003c/p\u003e\n\u003ch2 id=\"cve-2026-101518\"\u003eCVE-2026-101518\u003c/h2\u003e\n\u003cp\u003eCVE-2026-101518 is a vulnerability in the Agent Next Gen component of the Oracle Enterprise Manager Base Platform. The flaw is remotely exploitable over HTTP by a low-privileged attacker, potentially leading to a full system takeover.\u003c/p\u003e\n\u003cp\u003eAffected products:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eOracle Enterprise Manager Base Platform (13.5, 24.1)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eSource: \u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-101518\"\u003ehttps://nvd.nist.gov/vuln/detail/CVE-2026-101518\u003c/a\u003e\u003c/p\u003e\n\u003ch2 id=\"cve-2026-101519\"\u003eCVE-2026-101519\u003c/h2\u003e\n\u003cp\u003eCVE-2026-101519 is a critical vulnerability within the Oracle EDI Gateway component of the Oracle E-Business Suite, affecting versions 12.2.3 through 12.2.15. The flaw is remotely exploitable via HTTP by an attacker with high privileges, potentially leading to a full takeover of the EDI Gateway component. The vulnerability has a CVSS base score of 7.2, impacting confidentiality, integrity, and availability.\u003c/p\u003e\n\u003cp\u003eAffected products:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eOracle E-Business Suite (12.2.3-12.2.15)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eSource: \u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-101519\"\u003ehttps://nvd.nist.gov/vuln/detail/CVE-2026-101519\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eRelated in this roundup: \u003ca href=\"#cve-2026-101634\"\u003eCVE-2026-101634\u003c/a\u003e, \u003ca href=\"#cve-2026-101767\"\u003eCVE-2026-101767\u003c/a\u003e, \u003ca href=\"#cve-2026-101398\"\u003eCVE-2026-101398\u003c/a\u003e, \u003ca href=\"#cve-2026-101466\"\u003eCVE-2026-101466\u003c/a\u003e, \u003ca href=\"#cve-2026-101532\"\u003eCVE-2026-101532\u003c/a\u003e, \u003ca href=\"#cve-2026-101534\"\u003eCVE-2026-101534\u003c/a\u003e, \u003ca href=\"#cve-2026-101535\"\u003eCVE-2026-101535\u003c/a\u003e, \u003ca href=\"#cve-2026-101541\"\u003eCVE-2026-101541\u003c/a\u003e, \u003ca href=\"#cve-2026-101542\"\u003eCVE-2026-101542\u003c/a\u003e, \u003ca href=\"#cve-2026-101543\"\u003eCVE-2026-101543\u003c/a\u003e, \u003ca href=\"#cve-2026-101544\"\u003eCVE-2026-101544\u003c/a\u003e, \u003ca href=\"#cve-2026-101554\"\u003eCVE-2026-101554\u003c/a\u003e, \u003ca href=\"#cve-2026-101556\"\u003eCVE-2026-101556\u003c/a\u003e, \u003ca href=\"#cve-2026-101567\"\u003eCVE-2026-101567\u003c/a\u003e.\u003c/p\u003e\n\u003ch2 id=\"cve-2026-101520\"\u003eCVE-2026-101520\u003c/h2\u003e\n\u003cp\u003eA vulnerability in the NextGen Installer component of the Oracle Global Lifecycle Management NextGen OUI Framework within Oracle Fusion Middleware allows an unauthenticated attacker with network access to trigger a denial-of-service (DoS) condition. By sending specially crafted HTTP requests, an attacker can cause the service to hang or crash repeatedly, impacting system availability.\u003c/p\u003e\n\u003cp\u003eAffected products:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eFusion Middleware (12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, 14.1.2.1.0, 15.1.1.0.0)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eSource: \u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-101520\"\u003ehttps://nvd.nist.gov/vuln/detail/CVE-2026-101520\u003c/a\u003e\u003c/p\u003e\n\u003ch2 id=\"cve-2026-101525\"\u003eCVE-2026-101525\u003c/h2\u003e\n\u003cp\u003eOracle Enterprise Manager for Siebel, specifically the Configuration Management component, contains an easily exploitable vulnerability that allows a low-privileged attacker with network access via HTTP to fully compromise the application. The vulnerability impacts confidentiality, integrity, and availability, resulting in a potential complete takeover of the affected product.\u003c/p\u003e\n\u003cp\u003eAffected products:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eOracle Enterprise Manager for Siebel (13.5, 24.1)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eSource: \u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-101525\"\u003ehttps://nvd.nist.gov/vuln/detail/CVE-2026-101525\u003c/a\u003e\u003c/p\u003e\n\u003ch2 id=\"cve-2026-101526\"\u003eCVE-2026-101526\u003c/h2\u003e\n\u003cp\u003eCVE-2026-101526 is a critical vulnerability in the Configuration Management component of Oracle Enterprise Manager for Siebel, versions 13.5 and 24.1. The flaw is remotely exploitable over HTTP by an authenticated low-privileged user. Successful exploitation can lead to a full takeover of the application, resulting in high impact to confidentiality, integrity, and availability.\u003c/p\u003e\n\u003cp\u003eSource: \u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-101526\"\u003ehttps://nvd.nist.gov/vuln/detail/CVE-2026-101526\u003c/a\u003e\u003c/p\u003e\n\u003ch2 id=\"cve-2026-101527\"\u003eCVE-2026-101527\u003c/h2\u003e\n\u003cp\u003eCVE-2026-101527 is a high-severity vulnerability in the Enterprise Manager Install component of the Oracle Enterprise Manager Base Platform. The vulnerability allows a low-privileged attacker with local access to the underlying infrastructure to achieve a full takeover of the application. The vulnerability is characterized by a CVSS 3.1 base score of 7.8, indicating significant impact on confidentiality, integrity, and availability.\u003c/p\u003e\n\u003cp\u003eSource: \u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-101527\"\u003ehttps://nvd.nist.gov/vuln/detail/CVE-2026-101527\u003c/a\u003e\u003c/p\u003e\n\u003ch2 id=\"cve-2026-101531\"\u003eCVE-2026-101531\u003c/h2\u003e\n\u003cp\u003eCVE-2026-101531 is an easily exploitable, unauthenticated vulnerability in the Analytics Server component of Oracle Business Intelligence Enterprise Edition. An attacker can leverage network access via HTTP to gain unauthorized access to critical or sensitive data stored within the application, leading to a high confidentiality impact.\u003c/p\u003e\n\u003cp\u003eAffected products:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eOracle Business Intelligence Enterprise Edition (8.2.0.0.0, 26.01.0.0.0)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eSource: \u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-101531\"\u003ehttps://nvd.nist.gov/vuln/detail/CVE-2026-101531\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eRelated in this roundup: \u003ca href=\"#cve-2026-91241\"\u003eCVE-2026-91241\u003c/a\u003e.\u003c/p\u003e\n\u003ch2 id=\"cve-2026-101532\"\u003eCVE-2026-101532\u003c/h2\u003e\n\u003cp\u003eCVE-2026-101532 is a critical vulnerability within the Oracle EDI Gateway component of Oracle E-Business Suite versions 12.2.3 through 12.2.15. The vulnerability is network-exploitable via HTTP and allows an attacker with high privileges to achieve full takeover of the affected component, impacting confidentiality, integrity, and availability.\u003c/p\u003e\n\u003cp\u003eAffected products:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eOracle E-Business Suite (12.2.3-12.2.15)\u003c/li\u003e\n\u003cli\u003eOracle EDI Gateway\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eSource: \u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-101532\"\u003ehttps://nvd.nist.gov/vuln/detail/CVE-2026-101532\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eRelated in this roundup: \u003ca href=\"#cve-2026-101634\"\u003eCVE-2026-101634\u003c/a\u003e, \u003ca href=\"#cve-2026-101767\"\u003eCVE-2026-101767\u003c/a\u003e, \u003ca href=\"#cve-2026-101398\"\u003eCVE-2026-101398\u003c/a\u003e, \u003ca href=\"#cve-2026-101466\"\u003eCVE-2026-101466\u003c/a\u003e, \u003ca href=\"#cve-2026-101519\"\u003eCVE-2026-101519\u003c/a\u003e, \u003ca href=\"#cve-2026-101534\"\u003eCVE-2026-101534\u003c/a\u003e, \u003ca href=\"#cve-2026-101535\"\u003eCVE-2026-101535\u003c/a\u003e, \u003ca href=\"#cve-2026-101541\"\u003eCVE-2026-101541\u003c/a\u003e, \u003ca href=\"#cve-2026-101542\"\u003eCVE-2026-101542\u003c/a\u003e, \u003ca href=\"#cve-2026-101543\"\u003eCVE-2026-101543\u003c/a\u003e, \u003ca href=\"#cve-2026-101544\"\u003eCVE-2026-101544\u003c/a\u003e, \u003ca href=\"#cve-2026-101554\"\u003eCVE-2026-101554\u003c/a\u003e, \u003ca href=\"#cve-2026-101556\"\u003eCVE-2026-101556\u003c/a\u003e, \u003ca href=\"#cve-2026-101567\"\u003eCVE-2026-101567\u003c/a\u003e.\u003c/p\u003e\n\u003ch2 id=\"cve-2026-101534\"\u003eCVE-2026-101534\u003c/h2\u003e\n\u003cp\u003eOracle EDI Gateway in Oracle E-Business Suite versions 12.2.3 through 12.2.15 is susceptible to a vulnerability that allows a low-privileged network attacker to compromise the component via HTTP. Successful exploitation can lead to unauthorized access, modification, or deletion of critical data, with a scope change impacting additional products.\u003c/p\u003e\n\u003cp\u003eAffected products:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eOracle E-Business Suite (12.2.3-12.2.15)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eSource: \u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-101534\"\u003ehttps://nvd.nist.gov/vuln/detail/CVE-2026-101534\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eRelated in this roundup: \u003ca href=\"#cve-2026-101634\"\u003eCVE-2026-101634\u003c/a\u003e, \u003ca href=\"#cve-2026-101767\"\u003eCVE-2026-101767\u003c/a\u003e, \u003ca href=\"#cve-2026-101398\"\u003eCVE-2026-101398\u003c/a\u003e, \u003ca href=\"#cve-2026-101466\"\u003eCVE-2026-101466\u003c/a\u003e, \u003ca href=\"#cve-2026-101519\"\u003eCVE-2026-101519\u003c/a\u003e, \u003ca href=\"#cve-2026-101532\"\u003eCVE-2026-101532\u003c/a\u003e, \u003ca href=\"#cve-2026-101535\"\u003eCVE-2026-101535\u003c/a\u003e, \u003ca href=\"#cve-2026-101541\"\u003eCVE-2026-101541\u003c/a\u003e, \u003ca href=\"#cve-2026-101542\"\u003eCVE-2026-101542\u003c/a\u003e, \u003ca href=\"#cve-2026-101543\"\u003eCVE-2026-101543\u003c/a\u003e, \u003ca href=\"#cve-2026-101544\"\u003eCVE-2026-101544\u003c/a\u003e, \u003ca href=\"#cve-2026-101554\"\u003eCVE-2026-101554\u003c/a\u003e, \u003ca href=\"#cve-2026-101556\"\u003eCVE-2026-101556\u003c/a\u003e, \u003ca href=\"#cve-2026-101567\"\u003eCVE-2026-101567\u003c/a\u003e.\u003c/p\u003e\n\u003ch2 id=\"cve-2026-101535\"\u003eCVE-2026-101535\u003c/h2\u003e\n\u003cp\u003eCVE-2026-101535 is a high-severity vulnerability in the Security API component of the Oracle Sales Foundation product within Oracle E-Business Suite. The flaw allows a low-privileged attacker with network access via HTTP to potentially take over the application. With a CVSS base score of 7.5, it represents a significant risk to confidentiality, integrity, and availability.\u003c/p\u003e\n\u003cp\u003eAffected products:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eOracle E-Business Suite (12.2.3-12.2.15)\u003c/li\u003e\n\u003cli\u003eOracle Sales Foundation\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eSource: \u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-101535\"\u003ehttps://nvd.nist.gov/vuln/detail/CVE-2026-101535\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eRelated in this roundup: \u003ca href=\"#cve-2026-101634\"\u003eCVE-2026-101634\u003c/a\u003e, \u003ca href=\"#cve-2026-101767\"\u003eCVE-2026-101767\u003c/a\u003e, \u003ca href=\"#cve-2026-101398\"\u003eCVE-2026-101398\u003c/a\u003e, \u003ca href=\"#cve-2026-101466\"\u003eCVE-2026-101466\u003c/a\u003e, \u003ca href=\"#cve-2026-101519\"\u003eCVE-2026-101519\u003c/a\u003e, \u003ca href=\"#cve-2026-101532\"\u003eCVE-2026-101532\u003c/a\u003e, \u003ca href=\"#cve-2026-101534\"\u003eCVE-2026-101534\u003c/a\u003e, \u003ca href=\"#cve-2026-101541\"\u003eCVE-2026-101541\u003c/a\u003e, \u003ca href=\"#cve-2026-101542\"\u003eCVE-2026-101542\u003c/a\u003e, \u003ca href=\"#cve-2026-101543\"\u003eCVE-2026-101543\u003c/a\u003e, \u003ca href=\"#cve-2026-101544\"\u003eCVE-2026-101544\u003c/a\u003e, \u003ca href=\"#cve-2026-101554\"\u003eCVE-2026-101554\u003c/a\u003e, \u003ca href=\"#cve-2026-101556\"\u003eCVE-2026-101556\u003c/a\u003e, \u003ca href=\"#cve-2026-101567\"\u003eCVE-2026-101567\u003c/a\u003e.\u003c/p\u003e\n\u003ch2 id=\"cve-2026-101536\"\u003eCVE-2026-101536\u003c/h2\u003e\n\u003cp\u003eOracle Cost Management within Oracle E-Business Suite versions 12.2.3 through 12.2.15 contains a vulnerability that allows a low-privileged attacker with network access via HTTP to potentially take over the component. The vulnerability is rated with a CVSS 3.1 score of 7.5, indicating significant impact on confidentiality, integrity, and availability.\u003c/p\u003e\n\u003cp\u003eAffected products:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eE-Business Suite (12.2.3-12.2.15)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eSource: \u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-101536\"\u003ehttps://nvd.nist.gov/vuln/detail/CVE-2026-101536\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eRelated in this roundup: \u003ca href=\"#cve-2026-101808\"\u003eCVE-2026-101808\u003c/a\u003e, \u003ca href=\"#cve-2026-101809\"\u003eCVE-2026-101809\u003c/a\u003e, \u003ca href=\"#cve-2026-101387\"\u003eCVE-2026-101387\u003c/a\u003e, \u003ca href=\"#cve-2026-101540\"\u003eCVE-2026-101540\u003c/a\u003e, \u003ca href=\"#cve-2026-101545\"\u003eCVE-2026-101545\u003c/a\u003e, \u003ca href=\"#cve-2026-101546\"\u003eCVE-2026-101546\u003c/a\u003e, \u003ca href=\"#cve-2026-101551\"\u003eCVE-2026-101551\u003c/a\u003e, \u003ca href=\"#cve-2026-101552\"\u003eCVE-2026-101552\u003c/a\u003e, \u003ca href=\"#cve-2026-101555\"\u003eCVE-2026-101555\u003c/a\u003e, \u003ca href=\"#cve-2026-101557\"\u003eCVE-2026-101557\u003c/a\u003e, \u003ca href=\"#cve-2026-101566\"\u003eCVE-2026-101566\u003c/a\u003e.\u003c/p\u003e\n\u003ch2 id=\"cve-2026-101540\"\u003eCVE-2026-101540\u003c/h2\u003e\n\u003cp\u003eA vulnerability in the Oracle Capacity component of Oracle E-Business Suite allows a low-privileged attacker with network access via HTTP to perform unauthorized access to critical data. Due to the scope change, the impact can extend beyond the Oracle Capacity component to other integrated products, resulting in a significant confidentiality impact.\u003c/p\u003e\n\u003cp\u003eAffected products:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eE-Business Suite (12.2.3-12.2.15)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eSource: \u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-101540\"\u003ehttps://nvd.nist.gov/vuln/detail/CVE-2026-101540\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eRelated in this roundup: \u003ca href=\"#cve-2026-101808\"\u003eCVE-2026-101808\u003c/a\u003e, \u003ca href=\"#cve-2026-101809\"\u003eCVE-2026-101809\u003c/a\u003e, \u003ca href=\"#cve-2026-101387\"\u003eCVE-2026-101387\u003c/a\u003e, \u003ca href=\"#cve-2026-101536\"\u003eCVE-2026-101536\u003c/a\u003e, \u003ca href=\"#cve-2026-101545\"\u003eCVE-2026-101545\u003c/a\u003e, \u003ca href=\"#cve-2026-101546\"\u003eCVE-2026-101546\u003c/a\u003e, \u003ca href=\"#cve-2026-101551\"\u003eCVE-2026-101551\u003c/a\u003e, \u003ca href=\"#cve-2026-101552\"\u003eCVE-2026-101552\u003c/a\u003e, \u003ca href=\"#cve-2026-101555\"\u003eCVE-2026-101555\u003c/a\u003e, \u003ca href=\"#cve-2026-101557\"\u003eCVE-2026-101557\u003c/a\u003e, \u003ca href=\"#cve-2026-101566\"\u003eCVE-2026-101566\u003c/a\u003e.\u003c/p\u003e\n\u003ch2 id=\"cve-2026-101541\"\u003eCVE-2026-101541\u003c/h2\u003e\n\u003cp\u003eCVE-2026-101541 is a vulnerability in the Oracle Capacity component of Oracle E-Business Suite versions 12.2.3 through 12.2.15. The vulnerability is network-exploitable via HTTP by a low-privileged attacker, allowing for unauthorized access to critical data. Due to scope change, the impact extends beyond the Oracle Capacity component itself.\u003c/p\u003e\n\u003cp\u003eAffected products:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eOracle E-Business Suite (12.2.3-12.2.15)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eSource: \u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-101541\"\u003ehttps://nvd.nist.gov/vuln/detail/CVE-2026-101541\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eRelated in this roundup: \u003ca href=\"#cve-2026-101634\"\u003eCVE-2026-101634\u003c/a\u003e, \u003ca href=\"#cve-2026-101767\"\u003eCVE-2026-101767\u003c/a\u003e, \u003ca href=\"#cve-2026-101398\"\u003eCVE-2026-101398\u003c/a\u003e, \u003ca href=\"#cve-2026-101466\"\u003eCVE-2026-101466\u003c/a\u003e, \u003ca href=\"#cve-2026-101519\"\u003eCVE-2026-101519\u003c/a\u003e, \u003ca href=\"#cve-2026-101532\"\u003eCVE-2026-101532\u003c/a\u003e, \u003ca href=\"#cve-2026-101534\"\u003eCVE-2026-101534\u003c/a\u003e, \u003ca href=\"#cve-2026-101535\"\u003eCVE-2026-101535\u003c/a\u003e, \u003ca href=\"#cve-2026-101542\"\u003eCVE-2026-101542\u003c/a\u003e, \u003ca href=\"#cve-2026-101543\"\u003eCVE-2026-101543\u003c/a\u003e, \u003ca href=\"#cve-2026-101544\"\u003eCVE-2026-101544\u003c/a\u003e, \u003ca href=\"#cve-2026-101554\"\u003eCVE-2026-101554\u003c/a\u003e, \u003ca href=\"#cve-2026-101556\"\u003eCVE-2026-101556\u003c/a\u003e, \u003ca href=\"#cve-2026-101567\"\u003eCVE-2026-101567\u003c/a\u003e.\u003c/p\u003e\n\u003ch2 id=\"cve-2026-101542\"\u003eCVE-2026-101542\u003c/h2\u003e\n\u003cp\u003eOracle E-Business Suite's Oracle Capacity component contains a vulnerability in its Internal Operations module that allows a low-privileged, network-adjacent attacker to perform a complete takeover of the component via HTTP. The vulnerability has a CVSS score of 8.8, indicating high impact on confidentiality, integrity, and availability.\u003c/p\u003e\n\u003cp\u003eAffected products:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eOracle E-Business Suite (12.2.3-12.2.15)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eSource: \u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-101542\"\u003ehttps://nvd.nist.gov/vuln/detail/CVE-2026-101542\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eRelated in this roundup: \u003ca href=\"#cve-2026-101634\"\u003eCVE-2026-101634\u003c/a\u003e, \u003ca href=\"#cve-2026-101767\"\u003eCVE-2026-101767\u003c/a\u003e, \u003ca href=\"#cve-2026-101398\"\u003eCVE-2026-101398\u003c/a\u003e, \u003ca href=\"#cve-2026-101466\"\u003eCVE-2026-101466\u003c/a\u003e, \u003ca href=\"#cve-2026-101519\"\u003eCVE-2026-101519\u003c/a\u003e, \u003ca href=\"#cve-2026-101532\"\u003eCVE-2026-101532\u003c/a\u003e, \u003ca href=\"#cve-2026-101534\"\u003eCVE-2026-101534\u003c/a\u003e, \u003ca href=\"#cve-2026-101535\"\u003eCVE-2026-101535\u003c/a\u003e, \u003ca href=\"#cve-2026-101541\"\u003eCVE-2026-101541\u003c/a\u003e, \u003ca href=\"#cve-2026-101543\"\u003eCVE-2026-101543\u003c/a\u003e, \u003ca href=\"#cve-2026-101544\"\u003eCVE-2026-101544\u003c/a\u003e, \u003ca href=\"#cve-2026-101554\"\u003eCVE-2026-101554\u003c/a\u003e, \u003ca href=\"#cve-2026-101556\"\u003eCVE-2026-101556\u003c/a\u003e, \u003ca href=\"#cve-2026-101567\"\u003eCVE-2026-101567\u003c/a\u003e.\u003c/p\u003e\n\u003ch2 id=\"cve-2026-101543\"\u003eCVE-2026-101543\u003c/h2\u003e\n\u003cp\u003eOracle E-Business Suite contains a vulnerability in the Capacity component, specifically within Internal Operations, that allows a low-privileged attacker with network access via HTTP to potentially take over the application. This vulnerability is difficult to exploit but carries a CVSS base score of 7.5, indicating significant potential impact on confidentiality, integrity, and availability.\u003c/p\u003e\n\u003cp\u003eAffected products:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eOracle E-Business Suite (12.2.3-12.2.15)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eSource: \u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-101543\"\u003ehttps://nvd.nist.gov/vuln/detail/CVE-2026-101543\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eRelated in this roundup: \u003ca href=\"#cve-2026-101634\"\u003eCVE-2026-101634\u003c/a\u003e, \u003ca href=\"#cve-2026-101767\"\u003eCVE-2026-101767\u003c/a\u003e, \u003ca href=\"#cve-2026-101398\"\u003eCVE-2026-101398\u003c/a\u003e, \u003ca href=\"#cve-2026-101466\"\u003eCVE-2026-101466\u003c/a\u003e, \u003ca href=\"#cve-2026-101519\"\u003eCVE-2026-101519\u003c/a\u003e, \u003ca href=\"#cve-2026-101532\"\u003eCVE-2026-101532\u003c/a\u003e, \u003ca href=\"#cve-2026-101534\"\u003eCVE-2026-101534\u003c/a\u003e, \u003ca href=\"#cve-2026-101535\"\u003eCVE-2026-101535\u003c/a\u003e, \u003ca href=\"#cve-2026-101541\"\u003eCVE-2026-101541\u003c/a\u003e, \u003ca href=\"#cve-2026-101542\"\u003eCVE-2026-101542\u003c/a\u003e, \u003ca href=\"#cve-2026-101544\"\u003eCVE-2026-101544\u003c/a\u003e, \u003ca href=\"#cve-2026-101554\"\u003eCVE-2026-101554\u003c/a\u003e, \u003ca href=\"#cve-2026-101556\"\u003eCVE-2026-101556\u003c/a\u003e, \u003ca href=\"#cve-2026-101567\"\u003eCVE-2026-101567\u003c/a\u003e.\u003c/p\u003e\n\u003ch2 id=\"cve-2026-101544\"\u003eCVE-2026-101544\u003c/h2\u003e\n\u003cp\u003eCVE-2026-101544 is a vulnerability in the Oracle Payroll component of Oracle E-Business Suite. The vulnerability allows a low-privileged authenticated attacker with access to the underlying infrastructure to achieve a full takeover of the Oracle Payroll application. It is characterized as a difficult to exploit vulnerability that impacts the confidentiality, integrity, and availability of the system.\u003c/p\u003e\n\u003cp\u003eAffected products:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eOracle E-Business Suite (12.2.3-12.2.15)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eSource: \u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-101544\"\u003ehttps://nvd.nist.gov/vuln/detail/CVE-2026-101544\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eRelated in this roundup: \u003ca href=\"#cve-2026-101634\"\u003eCVE-2026-101634\u003c/a\u003e, \u003ca href=\"#cve-2026-101767\"\u003eCVE-2026-101767\u003c/a\u003e, \u003ca href=\"#cve-2026-101398\"\u003eCVE-2026-101398\u003c/a\u003e, \u003ca href=\"#cve-2026-101466\"\u003eCVE-2026-101466\u003c/a\u003e, \u003ca href=\"#cve-2026-101519\"\u003eCVE-2026-101519\u003c/a\u003e, \u003ca href=\"#cve-2026-101532\"\u003eCVE-2026-101532\u003c/a\u003e, \u003ca href=\"#cve-2026-101534\"\u003eCVE-2026-101534\u003c/a\u003e, \u003ca href=\"#cve-2026-101535\"\u003eCVE-2026-101535\u003c/a\u003e, \u003ca href=\"#cve-2026-101541\"\u003eCVE-2026-101541\u003c/a\u003e, \u003ca href=\"#cve-2026-101542\"\u003eCVE-2026-101542\u003c/a\u003e, \u003ca href=\"#cve-2026-101543\"\u003eCVE-2026-101543\u003c/a\u003e, \u003ca href=\"#cve-2026-101554\"\u003eCVE-2026-101554\u003c/a\u003e, \u003ca href=\"#cve-2026-101556\"\u003eCVE-2026-101556\u003c/a\u003e, \u003ca href=\"#cve-2026-101567\"\u003eCVE-2026-101567\u003c/a\u003e.\u003c/p\u003e\n\u003ch2 id=\"cve-2026-101545\"\u003eCVE-2026-101545\u003c/h2\u003e\n\u003cp\u003eA vulnerability in the Oracle Inventory Management component of Oracle E-Business Suite allows a low-privileged attacker with local access to the infrastructure to achieve full takeover of the Inventory Management product. The vulnerability is difficult to exploit but results in high impacts to confidentiality, integrity, and availability.\u003c/p\u003e\n\u003cp\u003eAffected products:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eE-Business Suite (12.2.3-12.2.15)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eSource: \u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-101545\"\u003ehttps://nvd.nist.gov/vuln/detail/CVE-2026-101545\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eRelated in this roundup: \u003ca href=\"#cve-2026-101808\"\u003eCVE-2026-101808\u003c/a\u003e, \u003ca href=\"#cve-2026-101809\"\u003eCVE-2026-101809\u003c/a\u003e, \u003ca href=\"#cve-2026-101387\"\u003eCVE-2026-101387\u003c/a\u003e, \u003ca href=\"#cve-2026-101536\"\u003eCVE-2026-101536\u003c/a\u003e, \u003ca href=\"#cve-2026-101540\"\u003eCVE-2026-101540\u003c/a\u003e, \u003ca href=\"#cve-2026-101546\"\u003eCVE-2026-101546\u003c/a\u003e, \u003ca href=\"#cve-2026-101551\"\u003eCVE-2026-101551\u003c/a\u003e, \u003ca href=\"#cve-2026-101552\"\u003eCVE-2026-101552\u003c/a\u003e, \u003ca href=\"#cve-2026-101555\"\u003eCVE-2026-101555\u003c/a\u003e, \u003ca href=\"#cve-2026-101557\"\u003eCVE-2026-101557\u003c/a\u003e, \u003ca href=\"#cve-2026-101566\"\u003eCVE-2026-101566\u003c/a\u003e.\u003c/p\u003e\n\u003ch2 id=\"cve-2026-101546\"\u003eCVE-2026-101546\u003c/h2\u003e\n\u003cp\u003eOracle E-Business Suite, specifically the Materials Requirement Planning component, contains a vulnerability that allows a low-privileged attacker with network access via HTTP to potentially take over the component. The vulnerability is rated with a CVSS 3.1 base score of 7.5, indicating significant impact on confidentiality, integrity, and availability, despite being classified as difficult to exploit.\u003c/p\u003e\n\u003cp\u003eAffected products:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eE-Business Suite (12.2.3-12.2.15)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eSource: \u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-101546\"\u003ehttps://nvd.nist.gov/vuln/detail/CVE-2026-101546\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eRelated in this roundup: \u003ca href=\"#cve-2026-101808\"\u003eCVE-2026-101808\u003c/a\u003e, \u003ca href=\"#cve-2026-101809\"\u003eCVE-2026-101809\u003c/a\u003e, \u003ca href=\"#cve-2026-101387\"\u003eCVE-2026-101387\u003c/a\u003e, \u003ca href=\"#cve-2026-101536\"\u003eCVE-2026-101536\u003c/a\u003e, \u003ca href=\"#cve-2026-101540\"\u003eCVE-2026-101540\u003c/a\u003e, \u003ca href=\"#cve-2026-101545\"\u003eCVE-2026-101545\u003c/a\u003e, \u003ca href=\"#cve-2026-101551\"\u003eCVE-2026-101551\u003c/a\u003e, \u003ca href=\"#cve-2026-101552\"\u003eCVE-2026-101552\u003c/a\u003e, \u003ca href=\"#cve-2026-101555\"\u003eCVE-2026-101555\u003c/a\u003e, \u003ca href=\"#cve-2026-101557\"\u003eCVE-2026-101557\u003c/a\u003e, \u003ca href=\"#cve-2026-101566\"\u003eCVE-2026-101566\u003c/a\u003e.\u003c/p\u003e\n\u003ch2 id=\"cve-2026-101548\"\u003eCVE-2026-101548\u003c/h2\u003e\n\u003cp\u003eOracle Application Testing Suite version 13.3.0.1 is vulnerable to a local exploitation flaw within the OpenScript component. A low-privileged attacker with authenticated access to the underlying infrastructure can achieve a full takeover of the application. The vulnerability carries a CVSS 3.1 base score of 7.0, indicating significant impacts to confidentiality, integrity, and availability.\u003c/p\u003e\n\u003cp\u003eAffected products:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eApplication Testing Suite (13.3.0.1)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eSource: \u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-101548\"\u003ehttps://nvd.nist.gov/vuln/detail/CVE-2026-101548\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eRelated in this roundup: \u003ca href=\"#cve-2026-101549\"\u003eCVE-2026-101549\u003c/a\u003e.\u003c/p\u003e\n\u003ch2 id=\"cve-2026-101549\"\u003eCVE-2026-101549\u003c/h2\u003e\n\u003cp\u003eA vulnerability exists in the OpenScript component of Oracle Application Testing Suite version 13.3.0.1. A low-privileged attacker with local logon access can exploit this flaw to gain unauthorized control over the application, resulting in a full system compromise impacting confidentiality, integrity, and availability.\u003c/p\u003e\n\u003cp\u003eAffected products:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eApplication Testing Suite (13.3.0.1)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eSource: \u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-101549\"\u003ehttps://nvd.nist.gov/vuln/detail/CVE-2026-101549\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eRelated in this roundup: \u003ca href=\"#cve-2026-101548\"\u003eCVE-2026-101548\u003c/a\u003e.\u003c/p\u003e\n\u003ch2 id=\"cve-2026-101551\"\u003eCVE-2026-101551\u003c/h2\u003e\n\u003cp\u003eCVE-2026-101551 is a vulnerability in the Oracle Diagnostics Interfaces component of Oracle Applications Manager within Oracle E-Business Suite versions 12.2.3 through 12.2.15. The vulnerability is remotely exploitable without authentication via HTTP, allowing an attacker to gain unauthorized access to or compromise sensitive data managed by the Oracle Applications Manager.\u003c/p\u003e\n\u003cp\u003eAffected products:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eE-Business Suite (12.2.3-12.2.15)\u003c/li\u003e\n\u003cli\u003eOracle Applications Manager\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eSource: \u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-101551\"\u003ehttps://nvd.nist.gov/vuln/detail/CVE-2026-101551\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eRelated in this roundup: \u003ca href=\"#cve-2026-101808\"\u003eCVE-2026-101808\u003c/a\u003e, \u003ca href=\"#cve-2026-101809\"\u003eCVE-2026-101809\u003c/a\u003e, \u003ca href=\"#cve-2026-101387\"\u003eCVE-2026-101387\u003c/a\u003e, \u003ca href=\"#cve-2026-101536\"\u003eCVE-2026-101536\u003c/a\u003e, \u003ca href=\"#cve-2026-101540\"\u003eCVE-2026-101540\u003c/a\u003e, \u003ca href=\"#cve-2026-101545\"\u003eCVE-2026-101545\u003c/a\u003e, \u003ca href=\"#cve-2026-101546\"\u003eCVE-2026-101546\u003c/a\u003e, \u003ca href=\"#cve-2026-101552\"\u003eCVE-2026-101552\u003c/a\u003e, \u003ca href=\"#cve-2026-101555\"\u003eCVE-2026-101555\u003c/a\u003e, \u003ca href=\"#cve-2026-101557\"\u003eCVE-2026-101557\u003c/a\u003e, \u003ca href=\"#cve-2026-101566\"\u003eCVE-2026-101566\u003c/a\u003e.\u003c/p\u003e\n\u003ch2 id=\"cve-2026-101552\"\u003eCVE-2026-101552\u003c/h2\u003e\n\u003cp\u003eCVE-2026-101552 is a vulnerability in the Oracle Application Object Library component of Oracle E-Business Suite. The flaw, specifically within the Flexfields component, allows a low-privileged attacker with network access to achieve a full takeover of the Application Object Library through a successful HTTP-based exploit, resulting in significant impacts on confidentiality, integrity, and availability.\u003c/p\u003e\n\u003cp\u003eAffected products:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eE-Business Suite (12.2.3-12.2.15)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eSource: \u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-101552\"\u003ehttps://nvd.nist.gov/vuln/detail/CVE-2026-101552\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eRelated in this roundup: \u003ca href=\"#cve-2026-101808\"\u003eCVE-2026-101808\u003c/a\u003e, \u003ca href=\"#cve-2026-101809\"\u003eCVE-2026-101809\u003c/a\u003e, \u003ca href=\"#cve-2026-101387\"\u003eCVE-2026-101387\u003c/a\u003e, \u003ca href=\"#cve-2026-101536\"\u003eCVE-2026-101536\u003c/a\u003e, \u003ca href=\"#cve-2026-101540\"\u003eCVE-2026-101540\u003c/a\u003e, \u003ca href=\"#cve-2026-101545\"\u003eCVE-2026-101545\u003c/a\u003e, \u003ca href=\"#cve-2026-101546\"\u003eCVE-2026-101546\u003c/a\u003e, \u003ca href=\"#cve-2026-101551\"\u003eCVE-2026-101551\u003c/a\u003e, \u003ca href=\"#cve-2026-101555\"\u003eCVE-2026-101555\u003c/a\u003e, \u003ca href=\"#cve-2026-101557\"\u003eCVE-2026-101557\u003c/a\u003e, \u003ca href=\"#cve-2026-101566\"\u003eCVE-2026-101566\u003c/a\u003e.\u003c/p\u003e\n\u003ch2 id=\"cve-2026-101554\"\u003eCVE-2026-101554\u003c/h2\u003e\n\u003cp\u003eOracle E-Business Suite's Payroll component contains a vulnerability that allows a low-privileged attacker with network access via HTTP to potentially take over the application. The vulnerability is difficult to exploit but results in significant impacts to confidentiality, integrity, and availability.\u003c/p\u003e\n\u003cp\u003eAffected products:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eOracle E-Business Suite (12.2.3-12.2.15)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eSource: \u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-101554\"\u003ehttps://nvd.nist.gov/vuln/detail/CVE-2026-101554\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eRelated in this roundup: \u003ca href=\"#cve-2026-101634\"\u003eCVE-2026-101634\u003c/a\u003e, \u003ca href=\"#cve-2026-101767\"\u003eCVE-2026-101767\u003c/a\u003e, \u003ca href=\"#cve-2026-101398\"\u003eCVE-2026-101398\u003c/a\u003e, \u003ca href=\"#cve-2026-101466\"\u003eCVE-2026-101466\u003c/a\u003e, \u003ca href=\"#cve-2026-101519\"\u003eCVE-2026-101519\u003c/a\u003e, \u003ca href=\"#cve-2026-101532\"\u003eCVE-2026-101532\u003c/a\u003e, \u003ca href=\"#cve-2026-101534\"\u003eCVE-2026-101534\u003c/a\u003e, \u003ca href=\"#cve-2026-101535\"\u003eCVE-2026-101535\u003c/a\u003e, \u003ca href=\"#cve-2026-101541\"\u003eCVE-2026-101541\u003c/a\u003e, \u003ca href=\"#cve-2026-101542\"\u003eCVE-2026-101542\u003c/a\u003e, \u003ca href=\"#cve-2026-101543\"\u003eCVE-2026-101543\u003c/a\u003e, \u003ca href=\"#cve-2026-101544\"\u003eCVE-2026-101544\u003c/a\u003e, \u003ca href=\"#cve-2026-101556\"\u003eCVE-2026-101556\u003c/a\u003e, \u003ca href=\"#cve-2026-101567\"\u003eCVE-2026-101567\u003c/a\u003e.\u003c/p\u003e\n\u003ch2 id=\"cve-2026-101555\"\u003eCVE-2026-101555\u003c/h2\u003e\n\u003cp\u003eCVE-2026-101555 is a vulnerability in the Oracle Payroll component of Oracle E-Business Suite versions 12.2.3 through 12.2.15. The vulnerability is accessible over the network via HTTP, allowing a low-privileged attacker to achieve a full takeover of the Oracle Payroll application. The complexity is identified as high, but the successful exploitation results in significant impacts to confidentiality, integrity, and availability.\u003c/p\u003e\n\u003cp\u003eAffected products:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eE-Business Suite (12.2.3-12.2.15)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eSource: \u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-101555\"\u003ehttps://nvd.nist.gov/vuln/detail/CVE-2026-101555\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eRelated in this roundup: \u003ca href=\"#cve-2026-101808\"\u003eCVE-2026-101808\u003c/a\u003e, \u003ca href=\"#cve-2026-101809\"\u003eCVE-2026-101809\u003c/a\u003e, \u003ca href=\"#cve-2026-101387\"\u003eCVE-2026-101387\u003c/a\u003e, \u003ca href=\"#cve-2026-101536\"\u003eCVE-2026-101536\u003c/a\u003e, \u003ca href=\"#cve-2026-101540\"\u003eCVE-2026-101540\u003c/a\u003e, \u003ca href=\"#cve-2026-101545\"\u003eCVE-2026-101545\u003c/a\u003e, \u003ca href=\"#cve-2026-101546\"\u003eCVE-2026-101546\u003c/a\u003e, \u003ca href=\"#cve-2026-101551\"\u003eCVE-2026-101551\u003c/a\u003e, \u003ca href=\"#cve-2026-101552\"\u003eCVE-2026-101552\u003c/a\u003e, \u003ca href=\"#cve-2026-101557\"\u003eCVE-2026-101557\u003c/a\u003e, \u003ca href=\"#cve-2026-101566\"\u003eCVE-2026-101566\u003c/a\u003e.\u003c/p\u003e\n\u003ch2 id=\"cve-2026-101556\"\u003eCVE-2026-101556\u003c/h2\u003e\n\u003cp\u003eCVE-2026-101556 is a critical vulnerability in the Oracle Payroll component of Oracle E-Business Suite versions 12.2.3 through 12.2.15. The flaw allows a low-privileged attacker with network access via HTTP to perform unauthorized operations, potentially resulting in a full takeover of the Oracle Payroll application. The vulnerability is characterized by a CVSS 3.1 base score of 7.5, indicating significant risks to confidentiality, integrity, and availability.\u003c/p\u003e\n\u003cp\u003eAffected products:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eOracle E-Business Suite (12.2.3-12.2.15)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eSource: \u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-101556\"\u003ehttps://nvd.nist.gov/vuln/detail/CVE-2026-101556\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eRelated in this roundup: \u003ca href=\"#cve-2026-101634\"\u003eCVE-2026-101634\u003c/a\u003e, \u003ca href=\"#cve-2026-101767\"\u003eCVE-2026-101767\u003c/a\u003e, \u003ca href=\"#cve-2026-101398\"\u003eCVE-2026-101398\u003c/a\u003e, \u003ca href=\"#cve-2026-101466\"\u003eCVE-2026-101466\u003c/a\u003e, \u003ca href=\"#cve-2026-101519\"\u003eCVE-2026-101519\u003c/a\u003e, \u003ca href=\"#cve-2026-101532\"\u003eCVE-2026-101532\u003c/a\u003e, \u003ca href=\"#cve-2026-101534\"\u003eCVE-2026-101534\u003c/a\u003e, \u003ca href=\"#cve-2026-101535\"\u003eCVE-2026-101535\u003c/a\u003e, \u003ca href=\"#cve-2026-101541\"\u003eCVE-2026-101541\u003c/a\u003e, \u003ca href=\"#cve-2026-101542\"\u003eCVE-2026-101542\u003c/a\u003e, \u003ca href=\"#cve-2026-101543\"\u003eCVE-2026-101543\u003c/a\u003e, \u003ca href=\"#cve-2026-101544\"\u003eCVE-2026-101544\u003c/a\u003e, \u003ca href=\"#cve-2026-101554\"\u003eCVE-2026-101554\u003c/a\u003e, \u003ca href=\"#cve-2026-101567\"\u003eCVE-2026-101567\u003c/a\u003e.\u003c/p\u003e\n\u003ch2 id=\"cve-2026-101557\"\u003eCVE-2026-101557\u003c/h2\u003e\n\u003cp\u003eCVE-2026-101557 is a vulnerability in the Oracle Purchasing component of Oracle E-Business Suite versions 12.2.3 through 12.2.15. The flaw is remotely exploitable over HTTP by a low-privileged attacker, potentially leading to a full system takeover of the Purchasing component.\u003c/p\u003e\n\u003cp\u003eAffected products:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eE-Business Suite (12.2.3-12.2.15)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eSource: \u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-101557\"\u003ehttps://nvd.nist.gov/vuln/detail/CVE-2026-101557\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eRelated in this roundup: \u003ca href=\"#cve-2026-101808\"\u003eCVE-2026-101808\u003c/a\u003e, \u003ca href=\"#cve-2026-101809\"\u003eCVE-2026-101809\u003c/a\u003e, \u003ca href=\"#cve-2026-101387\"\u003eCVE-2026-101387\u003c/a\u003e, \u003ca href=\"#cve-2026-101536\"\u003eCVE-2026-101536\u003c/a\u003e, \u003ca href=\"#cve-2026-101540\"\u003eCVE-2026-101540\u003c/a\u003e, \u003ca href=\"#cve-2026-101545\"\u003eCVE-2026-101545\u003c/a\u003e, \u003ca href=\"#cve-2026-101546\"\u003eCVE-2026-101546\u003c/a\u003e, \u003ca href=\"#cve-2026-101551\"\u003eCVE-2026-101551\u003c/a\u003e, \u003ca href=\"#cve-2026-101552\"\u003eCVE-2026-101552\u003c/a\u003e, \u003ca href=\"#cve-2026-101555\"\u003eCVE-2026-101555\u003c/a\u003e, \u003ca href=\"#cve-2026-101566\"\u003eCVE-2026-101566\u003c/a\u003e.\u003c/p\u003e\n\u003ch2 id=\"cve-2026-101560\"\u003eCVE-2026-101560\u003c/h2\u003e\n\u003cp\u003eCVE-2026-101560 is a vulnerability in the Dynamo Commerce Server component of the Oracle Commerce Platform (version 11.4.0). The flaw allows a low-privileged attacker with network access via HTTP to perform unauthorized read, creation, deletion, or modification of critical data within the platform. The vulnerability is easily exploitable, requiring no user interaction.\u003c/p\u003e\n\u003cp\u003eSource: \u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-101560\"\u003ehttps://nvd.nist.gov/vuln/detail/CVE-2026-101560\u003c/a\u003e\u003c/p\u003e\n\u003ch2 id=\"cve-2026-101562\"\u003eCVE-2026-101562\u003c/h2\u003e\n\u003cp\u003eOracle Agile PLM version 2.6 contains an easily exploitable vulnerability in the Acollect component. The flaw allows an unauthenticated attacker with network access via HTTP to gain unauthorized access to critical data or complete access to all data stored within the Oracle Agile PLM system, resulting in significant confidentiality impacts.\u003c/p\u003e\n\u003cp\u003eAffected products:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eAgile PLM (2.6)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eSource: \u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-101562\"\u003ehttps://nvd.nist.gov/vuln/detail/CVE-2026-101562\u003c/a\u003e\u003c/p\u003e\n\u003ch2 id=\"cve-2026-101566\"\u003eCVE-2026-101566\u003c/h2\u003e\n\u003cp\u003eA vulnerability in the Oracle Application Object Library component of Oracle E-Business Suite allows a low-privileged authenticated attacker with local access to the infrastructure to escalate privileges and fully compromise the component. Successful exploitation leads to a complete takeover of the library, impacting the confidentiality, integrity, and availability of the system.\u003c/p\u003e\n\u003cp\u003eAffected products:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eE-Business Suite (12.2.3-12.2.15)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eSource: \u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-101566\"\u003ehttps://nvd.nist.gov/vuln/detail/CVE-2026-101566\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eRelated in this roundup: \u003ca href=\"#cve-2026-101808\"\u003eCVE-2026-101808\u003c/a\u003e, \u003ca href=\"#cve-2026-101809\"\u003eCVE-2026-101809\u003c/a\u003e, \u003ca href=\"#cve-2026-101387\"\u003eCVE-2026-101387\u003c/a\u003e, \u003ca href=\"#cve-2026-101536\"\u003eCVE-2026-101536\u003c/a\u003e, \u003ca href=\"#cve-2026-101540\"\u003eCVE-2026-101540\u003c/a\u003e, \u003ca href=\"#cve-2026-101545\"\u003eCVE-2026-101545\u003c/a\u003e, \u003ca href=\"#cve-2026-101546\"\u003eCVE-2026-101546\u003c/a\u003e, \u003ca href=\"#cve-2026-101551\"\u003eCVE-2026-101551\u003c/a\u003e, \u003ca href=\"#cve-2026-101552\"\u003eCVE-2026-101552\u003c/a\u003e, \u003ca href=\"#cve-2026-101555\"\u003eCVE-2026-101555\u003c/a\u003e, \u003ca href=\"#cve-2026-101557\"\u003eCVE-2026-101557\u003c/a\u003e.\u003c/p\u003e\n\u003ch2 id=\"cve-2026-101567\"\u003eCVE-2026-101567\u003c/h2\u003e\n\u003cp\u003eCVE-2026-101567 is a critical vulnerability in the Cost Planning component of Oracle Cost Management within Oracle E-Business Suite versions 12.2.3 through 12.2.15. The vulnerability is network-exploitable via HTTP by low-privileged attackers, potentially allowing for a full compromise of the affected component with high impact on confidentiality, integrity, and availability.\u003c/p\u003e\n\u003cp\u003eAffected products:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eOracle E-Business Suite (12.2.3-12.2.15)\u003c/li\u003e\n\u003cli\u003eOracle Cost Management\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eSource: \u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-101567\"\u003ehttps://nvd.nist.gov/vuln/detail/CVE-2026-101567\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eRelated in this roundup: \u003ca href=\"#cve-2026-101634\"\u003eCVE-2026-101634\u003c/a\u003e, \u003ca href=\"#cve-2026-101767\"\u003eCVE-2026-101767\u003c/a\u003e, \u003ca href=\"#cve-2026-101398\"\u003eCVE-2026-101398\u003c/a\u003e, \u003ca href=\"#cve-2026-101466\"\u003eCVE-2026-101466\u003c/a\u003e, \u003ca href=\"#cve-2026-101519\"\u003eCVE-2026-101519\u003c/a\u003e, \u003ca href=\"#cve-2026-101532\"\u003eCVE-2026-101532\u003c/a\u003e, \u003ca href=\"#cve-2026-101534\"\u003eCVE-2026-101534\u003c/a\u003e, \u003ca href=\"#cve-2026-101535\"\u003eCVE-2026-101535\u003c/a\u003e, \u003ca href=\"#cve-2026-101541\"\u003eCVE-2026-101541\u003c/a\u003e, \u003ca href=\"#cve-2026-101542\"\u003eCVE-2026-101542\u003c/a\u003e, \u003ca href=\"#cve-2026-101543\"\u003eCVE-2026-101543\u003c/a\u003e, \u003ca href=\"#cve-2026-101544\"\u003eCVE-2026-101544\u003c/a\u003e, \u003ca href=\"#cve-2026-101554\"\u003eCVE-2026-101554\u003c/a\u003e, \u003ca href=\"#cve-2026-101556\"\u003eCVE-2026-101556\u003c/a\u003e.\u003c/p\u003e\n\u003ch2 id=\"cve-2026-101572\"\u003eCVE-2026-101572\u003c/h2\u003e\n\u003cp\u003eThe helidon-webclient-http2 component in Oracle Helidon is vulnerable to a denial-of-service (DoS) attack. An unauthenticated attacker with network access can exploit this vulnerability via HTTP/2 requests to cause the service to hang or crash repeatedly, leading to a complete service outage.\u003c/p\u003e\n\u003cp\u003eAffected products:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eHelidon (4.0.0-4.5.5, 27.0.0)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eSource: \u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-101572\"\u003ehttps://nvd.nist.gov/vuln/detail/CVE-2026-101572\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eRelated in this roundup: \u003ca href=\"#cve-2026-101590\"\u003eCVE-2026-101590\u003c/a\u003e, \u003ca href=\"#cve-2026-101579\"\u003eCVE-2026-101579\u003c/a\u003e, \u003ca href=\"#cve-2026-101583\"\u003eCVE-2026-101583\u003c/a\u003e, \u003ca href=\"#cve-2026-101585\"\u003eCVE-2026-101585\u003c/a\u003e.\u003c/p\u003e\n\u003ch2 id=\"cve-2026-101579\"\u003eCVE-2026-101579\u003c/h2\u003e\n\u003cp\u003eCVE-2026-101579 is a critical vulnerability in the helidon-grpc-server component of Oracle Fusion Middleware's Helidon product. The flaw allows an unauthenticated attacker with network access to leverage HTTP/2 to gain unauthorized read, update, insert, or delete access to sensitive data, with a scope change impact. The vulnerability is easily exploitable and carries a CVSS 3.1 base score of 7.2.\u003c/p\u003e\n\u003cp\u003eAffected products:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eHelidon (3.0.0-3.2.21)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eSource: \u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-101579\"\u003ehttps://nvd.nist.gov/vuln/detail/CVE-2026-101579\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eRelated in this roundup: \u003ca href=\"#cve-2026-101590\"\u003eCVE-2026-101590\u003c/a\u003e, \u003ca href=\"#cve-2026-101572\"\u003eCVE-2026-101572\u003c/a\u003e, \u003ca href=\"#cve-2026-101583\"\u003eCVE-2026-101583\u003c/a\u003e, \u003ca href=\"#cve-2026-101585\"\u003eCVE-2026-101585\u003c/a\u003e.\u003c/p\u003e\n\u003ch2 id=\"cve-2026-101583\"\u003eCVE-2026-101583\u003c/h2\u003e\n\u003cp\u003eOracle Fusion Middleware's Helidon component, helidon-common-mapper, contains a vulnerability allowing unauthenticated remote attackers with network access via HTTP to perform unauthorized data manipulation, access critical information, and cause a partial denial of service. The vulnerability is characterized as difficult to exploit but carries significant impact across confidentiality, integrity, and availability.\u003c/p\u003e\n\u003cp\u003eAffected products:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eHelidon (4.0.0-4.5.5)\u003c/li\u003e\n\u003cli\u003eHelidon (27.0.0)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eSource: \u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-101583\"\u003ehttps://nvd.nist.gov/vuln/detail/CVE-2026-101583\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eRelated in this roundup: \u003ca href=\"#cve-2026-101590\"\u003eCVE-2026-101590\u003c/a\u003e, \u003ca href=\"#cve-2026-101572\"\u003eCVE-2026-101572\u003c/a\u003e, \u003ca href=\"#cve-2026-101579\"\u003eCVE-2026-101579\u003c/a\u003e, \u003ca href=\"#cve-2026-101585\"\u003eCVE-2026-101585\u003c/a\u003e.\u003c/p\u003e\n\u003ch2 id=\"cve-2026-101585\"\u003eCVE-2026-101585\u003c/h2\u003e\n\u003cp\u003eOracle Fusion Middleware's Helidon product (specifically the helidon-cors component) is vulnerable to an unauthenticated, network-based attack. Successful exploitation allows an attacker to perform unauthorized read, update, insert, or delete operations on accessible data. The vulnerability supports a scope change, potentially impacting additional products beyond the Helidon component itself.\u003c/p\u003e\n\u003cp\u003eAffected products:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eHelidon (3.0.0-3.2.21)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eSource: \u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-101585\"\u003ehttps://nvd.nist.gov/vuln/detail/CVE-2026-101585\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eRelated in this roundup: \u003ca href=\"#cve-2026-101590\"\u003eCVE-2026-101590\u003c/a\u003e, \u003ca href=\"#cve-2026-101572\"\u003eCVE-2026-101572\u003c/a\u003e, \u003ca href=\"#cve-2026-101579\"\u003eCVE-2026-101579\u003c/a\u003e, \u003ca href=\"#cve-2026-101583\"\u003eCVE-2026-101583\u003c/a\u003e.\u003c/p\u003e\n\u003ch2 id=\"cve-2026-101593\"\u003eCVE-2026-101593\u003c/h2\u003e\n\u003cp\u003eA vulnerability in the Product Quality Management component of Oracle Agile Product Lifecycle Management for Process version 6.2.4 allows a low-privileged attacker with network access to perform unauthorized data modification, deletion, or access, and cause a partial denial of service via HTTP. The vulnerability is easily exploitable and impacts the confidentiality, integrity, and availability of the system.\u003c/p\u003e\n\u003cp\u003eAffected products:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eAgile Product Lifecycle Management for Process (6.2.4)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eSource: \u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-101593\"\u003ehttps://nvd.nist.gov/vuln/detail/CVE-2026-101593\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eRelated in this roundup: \u003ca href=\"#cve-2026-91622\"\u003eCVE-2026-91622\u003c/a\u003e, \u003ca href=\"#cve-2026-91624\"\u003eCVE-2026-91624\u003c/a\u003e, \u003ca href=\"#cve-2026-101473\"\u003eCVE-2026-101473\u003c/a\u003e, \u003ca href=\"#cve-2026-101594\"\u003eCVE-2026-101594\u003c/a\u003e, \u003ca href=\"#cve-2026-101596\"\u003eCVE-2026-101596\u003c/a\u003e.\u003c/p\u003e\n\u003ch2 id=\"cve-2026-101594\"\u003eCVE-2026-101594\u003c/h2\u003e\n\u003cp\u003eOracle Agile Product Lifecycle Management for Process version 6.2.4 is vulnerable to a network-based attack via HTTP. A low-privileged attacker can exploit this vulnerability to achieve full system takeover, impacting the confidentiality, integrity, and availability of the application. The vulnerability is considered easily exploitable with no user interaction required.\u003c/p\u003e\n\u003cp\u003eAffected products:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eAgile Product Lifecycle Management for Process (6.2.4)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eSource: \u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-101594\"\u003ehttps://nvd.nist.gov/vuln/detail/CVE-2026-101594\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eRelated in this roundup: \u003ca href=\"#cve-2026-91622\"\u003eCVE-2026-91622\u003c/a\u003e, \u003ca href=\"#cve-2026-91624\"\u003eCVE-2026-91624\u003c/a\u003e, \u003ca href=\"#cve-2026-101473\"\u003eCVE-2026-101473\u003c/a\u003e, \u003ca href=\"#cve-2026-101593\"\u003eCVE-2026-101593\u003c/a\u003e, \u003ca href=\"#cve-2026-101596\"\u003eCVE-2026-101596\u003c/a\u003e.\u003c/p\u003e\n\u003ch2 id=\"cve-2026-101596\"\u003eCVE-2026-101596\u003c/h2\u003e\n\u003cp\u003eOracle Agile Product Lifecycle Management for Process, specifically the Product Quality Management component, contains a critical vulnerability (CVE-2026-101596) that allows a low-privileged attacker with network access to achieve a complete system takeover via HTTP. The vulnerability has a CVSS 3.1 base score of 8.8 and is characterized as easily exploitable due to low attack complexity and no user interaction required.\u003c/p\u003e\n\u003cp\u003eAffected products:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eAgile Product Lifecycle Management for Process (6.2.4)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eSource: \u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-101596\"\u003ehttps://nvd.nist.gov/vuln/detail/CVE-2026-101596\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eRelated in this roundup: \u003ca href=\"#cve-2026-91622\"\u003eCVE-2026-91622\u003c/a\u003e, \u003ca href=\"#cve-2026-91624\"\u003eCVE-2026-91624\u003c/a\u003e, \u003ca href=\"#cve-2026-101473\"\u003eCVE-2026-101473\u003c/a\u003e, \u003ca href=\"#cve-2026-101593\"\u003eCVE-2026-101593\u003c/a\u003e, \u003ca href=\"#cve-2026-101594\"\u003eCVE-2026-101594\u003c/a\u003e.\u003c/p\u003e\n\u003ch2 id=\"cve-2026-101598\"\u003eCVE-2026-101598\u003c/h2\u003e\n\u003cp\u003eCVE-2026-101598 is a vulnerability within the Core component of Oracle VM VirtualBox version 7.2.20. The flaw allows a low-privileged local attacker with logon access to the host infrastructure to achieve a full takeover of the VirtualBox application, impacting the confidentiality, integrity, and availability of the system.\u003c/p\u003e\n\u003cp\u003eAffected products:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eVM VirtualBox (7.2.20)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eSource: \u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-101598\"\u003ehttps://nvd.nist.gov/vuln/detail/CVE-2026-101598\u003c/a\u003e\u003c/p\u003e\n\u003ch2 id=\"cve-2026-101599\"\u003eCVE-2026-101599\u003c/h2\u003e\n\u003cp\u003eCVE-2026-101599 is a high-severity vulnerability within the Core component of Oracle VM VirtualBox version 7.2.20. The flaw allows a low-privileged local attacker, requiring human interaction, to trigger a scope change and achieve a complete takeover of the VirtualBox application. The vulnerability carries a CVSS 3.1 base score of 7.5, indicating significant impacts on confidentiality, integrity, and availability.\u003c/p\u003e\n\u003cp\u003eAffected products:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eOracle VM VirtualBox (7.2.20)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eSource: \u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-101599\"\u003ehttps://nvd.nist.gov/vuln/detail/CVE-2026-101599\u003c/a\u003e\u003c/p\u003e\n\u003ch2 id=\"cve-2026-91403\"\u003eCVE-2026-91403\u003c/h2\u003e\n\u003cp\u003eA critical vulnerability in the JSSE component of Oracle Java SE, Oracle GraalVM for JDK, and Oracle GraalVM Enterprise Edition allows unauthenticated remote attackers to achieve unauthorized access, modification, or deletion of critical data. The vulnerability is exploitable via network protocols and affects both server-side deployments and client-side sandboxed Java applications, such as Java Web Start or applets, by leveraging specific APIs.\u003c/p\u003e\n\u003cp\u003eAffected products:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eJava SE (8u511, 8u511-perf, 11.0.33, 17.0.21, 21.0.13, 25.0.5, 27.0.1)\u003c/li\u003e\n\u003cli\u003eGraalVM for JDK (17.0.21, 21.0.13)\u003c/li\u003e\n\u003cli\u003eGraalVM Enterprise Edition (21.3.20)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eSource: \u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-91403\"\u003ehttps://nvd.nist.gov/vuln/detail/CVE-2026-91403\u003c/a\u003e\u003c/p\u003e\n","date_modified":"2026-10-29T20:01:36Z","date_published":"2026-10-21T00:09:53Z","id":"https://feed.craftedsignal.io/briefs/2026-10-oracle-security-updates/","summary":"Roundup of Oracle security advisories published in October 2026.","title":"Oracle Security Updates - October 2026","url":"https://feed.craftedsignal.io/briefs/2026-10-oracle-security-updates/"}],"language":"en","title":"CraftedSignal Threat Feed - Cpe:2.3:a:oracle:identity_manager_connector:12.2.1.4.0:*:*:*:*:*:*:*","version":"https://jsonfeed.org/version/1.1"}