CyberSecBulletin

Oracle vulnerabilities

We track 3,014 vulnerabilities in Oracle products across 60+ products. 3,006 are rated high or critical, and 81 have been exploited in real attacks. The most recent was published on October 24, 2026.

3,014vulnerabilities
715critical
2,291high
81exploited
8.3average CVSS score

Latest Oracle vulnerabilities

  • 7.8 High severity

    JD Edwards EnterpriseOne Tools: Improper Privilege Management

    CVE-2026-91311Oracle

    Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security). Supported versions that are affected are 9.2.0.0-9.2.26.5. Easily exploitable vulnerability allows low privileged attacker with logon to the in

  • 8.8 High severity

    JD Edwards EnterpriseOne Tools: Missing Authentication for Critical Functionality

    CVE-2026-91310Oracle

    Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation SEC). Supported versions that are affected are 9.2.0.0-9.2.26.5. Easily exploitable vulnerability allows low privileged attacker with network access via J

  • 7.5 High severity

    JD Edwards EnterpriseOne Tools: Exposure of Sensitive Information to an Unauthorized Actor

    CVE-2026-91308Oracle

    Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security). Supported versions that are affected are 9.2.0.0-9.2.26.5. Easily exploitable vulnerability allows unauthenticated attacker with network access

  • 7.5 High severity

    JD Edwards EnterpriseOne Tools: Exposure of Sensitive Information to an Unauthorized Actor

    CVE-2026-91307Oracle

    Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security). Supported versions that are affected are 9.2.0.0-9.2.26.5. Easily exploitable vulnerability allows unauthenticated attacker with network access

  • 7.8 High severity

    JD Edwards EnterpriseOne Tools: Improper Privilege Management

    CVE-2026-91306Oracle

    Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security). Supported versions that are affected are 9.2.0.0-9.2.26.5. Easily exploitable vulnerability allows low privileged attacker with logon to the in

  • 9.1 Critical severity

    JD Edwards EnterpriseOne Tools: Improper Authentication

    CVE-2026-91305Oracle

    Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security). Supported versions that are affected are 9.2.0.0-9.2.26.5. Easily exploitable vulnerability allows unauthenticated attacker with network access

  • 7.8 High severity

    JD Edwards EnterpriseOne Tools: Improper Access Control

    CVE-2026-91304Oracle

    Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security). Supported versions that are affected are 9.2.0.0-9.2.26.5. Easily exploitable vulnerability allows unauthenticated attacker with logon to the i

  • 8.8 High severity

    JD Edwards EnterpriseOne Tools: Improper Access Control

    CVE-2026-91303Oracle

    Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security). Supported versions that are affected are 9.2.0.0-9.2.26.5. Easily exploitable vulnerability allows unauthenticated attacker with network access

  • 10.0 Critical severity

    JD Edwards EnterpriseOne Orchestrator: Improper Access Control

    CVE-2026-91299Oracle

    Vulnerability in the JD Edwards EnterpriseOne Orchestrator product of Oracle JD Edwards (component: E1 IOT Orchestrator Security). Supported versions that are affected are 9.2.0.0-9.2.26.5. Easily exploitable vulnerability allows unauthenticated attacker with

  • 8.8 High severity

    JD Edwards EnterpriseOne Tools: URL Redirection to Untrusted Site

    CVE-2026-91296Oracle

    Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure SEC). Supported versions that are affected are 9.2.0.0-9.2.26.5. Easily exploitable vulnerability allows unauthenticated attacker with networ

  • 8.8 High severity

    JD Edwards EnterpriseOne Tools: Missing Authentication for Critical Functionality

    CVE-2026-91295Oracle

    Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure SEC). Supported versions that are affected are 9.2.0.0-9.2.26.5. Easily exploitable vulnerability allows low privileged attacker with network

  • 7.4 High severity

    JD Edwards EnterpriseOne Tools: Improper Access Control

    CVE-2026-91288Oracle

    Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Interoperability SEC). Supported versions that are affected are 9.2.0.0-9.2.26.5. Difficult to exploit vulnerability allows unauthenticated attacker with network acces

  • 8.1 High severity

    JD Edwards EnterpriseOne Tools: Improper Access Control

    CVE-2026-91287Oracle

    Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure SEC). Supported versions that are affected are 9.2.0.0-9.2.26.5. Easily exploitable vulnerability allows unauthenticated attacker with access

  • 8.2 High severity

    JD Edwards EnterpriseOne Tools: Improper Access Control

    CVE-2026-91286Oracle

    Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Monitoring and Diagnostics SEC). Supported versions that are affected are 9.2.0.0-9.2.26.5. Easily exploitable vulnerability allows unauthenticated attacker with acces

  • 8.6 High severity

    JD Edwards EnterpriseOne Tools: Improper Access Control

    CVE-2026-91273Oracle

    Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Object and Env Tech SEC). Supported versions that are affected are 9.2.0.0-9.2.26.5. Easily exploitable vulnerability allows unauthenticated attacker with network acce

  • 7.4 High severity

    JD Edwards EnterpriseOne Tools: Improper Access Control

    CVE-2026-91272Oracle

    Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Interoperability SEC). Supported versions that are affected are 9.2.0.0-9.2.26.5. Difficult to exploit vulnerability allows unauthenticated attacker with network acces

  • 8.1 High severity

    JD Edwards EnterpriseOne Tools: Improper Access Control

    CVE-2026-91271Oracle

    Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Monitoring and Diagnostics SEC). Supported versions that are affected are 9.2.0.0-9.2.26.5. Easily exploitable vulnerability allows low privileged attacker with networ

  • 8.8 High severity

    JD Edwards EnterpriseOne Tools: Missing Authentication for Critical Functionality

    CVE-2026-91270Oracle

    Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Monitoring and Diagnostics SEC). Supported versions that are affected are 9.2.0.0-9.2.26.5. Easily exploitable vulnerability allows low privileged attacker with networ

  • 8.1 High severity

    JD Edwards EnterpriseOne Tools: Improper Access Control

    CVE-2026-91269Oracle

    Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure SEC). Supported versions that are affected are 9.2.0.0-9.2.26.5. Easily exploitable vulnerability allows low privileged attacker with network

  • 8.8 High severity

    JD Edwards EnterpriseOne Tools: Improper Access Control

    CVE-2026-91268Oracle

    Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime SEC). Supported versions that are affected are 9.2.0.0-9.2.26.5. Easily exploitable vulnerability allows low privileged attacker with network access via HT

  • 8.6 High severity

    JD Edwards EnterpriseOne Tools: Missing Authentication for Critical Functionality

    CVE-2026-91267Oracle

    Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Interoperability SEC). Supported versions that are affected are 9.2.0.0-9.2.26.5. Easily exploitable vulnerability allows unauthenticated attacker with network access

  • 8.4 High severity

    JD Edwards EnterpriseOne Tools: Improper Access Control

    CVE-2026-91266Oracle

    Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Monitoring and Diagnostics SEC). Supported versions that are affected are 9.2.0.0-9.2.26.5. Easily exploitable vulnerability allows low privileged attacker with logon

  • 9.1 Critical severity

    JD Edwards EnterpriseOne Tools: Improper Authentication

    CVE-2026-91265Oracle

    Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure SEC). Supported versions that are affected are 9.2.0.0-9.2.26.5. Easily exploitable vulnerability allows unauthenticated attacker with networ

  • 7.2 High severity

    iProcurement: Improper Privilege Management

    CVE-2026-91260Oracle

    Vulnerability in the iProcurement product of Oracle E-Business Suite (component: E-Content Manager Catalog). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP

  • 8.8 High severity

    Oracle Identity Manager: Improper Authentication

    CVE-2026-91259Oracle

    Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Legacy UI). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows low privileged attacker with network access

  • 7.1 High severity

    Oracle Solaris: Uncontrolled Resource Consumption

    CVE-2026-91256Oracle

    Vulnerability in the Oracle Solaris product of Oracle Systems (component: Services). The supported version that is affected is 11.4. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Solaris. Succ

  • 7.5 High severity

    Oracle Solaris: Uncontrolled Resource Consumption

    CVE-2026-91255Oracle

    Vulnerability in the Oracle Solaris product of Oracle Systems (component: Kernel). The supported version that is affected is 11.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Solaris. Succe

  • 7.5 High severity

    Oracle Solaris: Uncontrolled Resource Consumption

    CVE-2026-91254Oracle

    Vulnerability in the Oracle Solaris product of Oracle Systems (component: Kernel). The supported version that is affected is 11.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Solaris. Succe

  • 7.8 High severity

    Oracle Solaris: Improper Privilege Management

    CVE-2026-91253Oracle

    Vulnerability in the Oracle Solaris product of Oracle Systems (component: Kernel). The supported version that is affected is 11.4. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris executes to

  • 8.2 High severity

    Oracle Solaris: Uncontrolled Resource Consumption

    CVE-2026-91252Oracle

    Vulnerability in the Oracle Solaris product of Oracle Systems (component: Services). The supported version that is affected is 11.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Solaris. Suc

  • 9.9 Critical severity

    Oracle SOA Suite: Improper Access Control

    CVE-2026-91251Oracle

    Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Adapters). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to

  • 9.9 Critical severity

    Oracle SOA Suite: Improper Privilege Management

    CVE-2026-91250Oracle

    Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Adapters). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via multipl

  • 9.6 Critical severity

    Oracle Business Process Management Suite: Improper Access Control

    CVE-2026-91243Oracle

    Vulnerability in the Oracle Business Process Management Suite product of Oracle Fusion Middleware (component: Fabric Layer). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker wit

  • 7.4 High severity

    Oracle Solaris: Improper Access Control

    CVE-2026-91242Oracle

    Vulnerability in the Oracle Solaris product of Oracle Systems (component: Plugins). The supported version that is affected is 11.4. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Solaris executes

  • 9.1 Critical severity

    Oracle Business Intelligence Enterprise Edition: Improper Access Control

    CVE-2026-91241Oracle

    Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Analytics Web Administration). Supported versions that are affected are 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0. Easily exploitable vulnerability allows

  • 8.8 High severity

    Oracle SOA Suite: Missing Authentication for Critical Functionality

    CVE-2026-91239Oracle

    Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via mul

  • 7.1 High severity

    Oracle SOA Suite: Uncontrolled Resource Consumption

    CVE-2026-91238Oracle

    Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTT

  • 7.5 High severity

    Oracle SOA Suite: Missing Authentication for Critical Functionality

    CVE-2026-91237Oracle

    Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HT

  • 9.8 Critical severity

    Oracle SOA Suite: Improper Authentication

    CVE-2026-91236Oracle

    Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HT

  • 9.8 Critical severity

    Oracle SOA Suite: Improper Authentication

    CVE-2026-91235Oracle

    Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HT