{ "schemaVersion": 1, "site": "https://cveboard.org", "generatedAt": "2026-10-24T09:22:00.935Z", "lastRun": "2026-10-24T09:02:44.689Z", "liveDays": 14, "filters": { "kind": null, "exploited": false, "severity": null, "ecosystems": [], "tag": "oracle-corporation" }, "attribution": [ { "source": "CISA Known Exploited Vulnerabilities", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog", "licence": "US government work" }, { "source": "GitHub Advisory Database", "url": "https://github.com/advisories", "licence": "CC BY 4.0" }, { "source": "Have I Been Pwned", "url": "https://haveibeenpwned.com/", "licence": "CC BY 4.0" }, { "source": "CVE Program (CVE records)", "url": "https://www.cve.org/Legal/TermsOfUse", "licence": "CVE Terms of Use", "notice": "Copyright © 1999-2026, The MITRE Corporation. CVE is a trademark and the CVE logo is a registered trademark of The MITRE Corporation.", "terms": "CVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE™). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy." }, { "source": "FIRST EPSS", "url": "https://www.first.org/epss/", "licence": "free to use; FIRST requests attribution" } ], "incidents": [ { "id": "cve-2026-91403", "url": "https://cveboard.org/i/cve-2026-91403", "urlPt": "https://cveboard.org/pt/i/cve-2026-91403", "json": "https://cveboard.org/i/cve-2026-91403.json", "kind": "vuln", "live": true, "knownExploited": false, "severity": "critical", "title": "Oracle Corporation Oracle Java SE", "summary": "", "titlePt": null, "summaryPt": null, "affected": [ { "vendor": "Oracle Corporation", "product": "Oracle Java SE", "defaultStatus": "unknown", "versions": [ { "version": "8u511", "status": "affected", "lessThan": null, "lessThanOrEqual": null }, { "version": "8u511-perf", "status": "affected", "lessThan": null, "lessThanOrEqual": null }, { "version": "11.0.33", "status": "affected", "lessThan": null, "lessThanOrEqual": null }, { "version": "17.0.21", "status": "affected", "lessThan": null, "lessThanOrEqual": null }, { "version": "21.0.13", "status": "affected", "lessThan": null, "lessThanOrEqual": null }, { "version": "25.0.5", "status": "affected", "lessThan": null, "lessThanOrEqual": null }, { "version": "27.0.1", "status": "affected", "lessThan": null, "lessThanOrEqual": null } ], "omitted": 0, "fixed": [] }, { "vendor": "Oracle Corporation", "product": "Oracle GraalVM for JDK", "defaultStatus": "unknown", "versions": [ { "version": "17.0.21", "status": "affected", "lessThan": null, "lessThanOrEqual": null }, { "version": "21.0.13", "status": "affected", "lessThan": null, "lessThanOrEqual": null } ], "omitted": 0, "fixed": [] }, { "vendor": "Oracle Corporation", "product": "Oracle GraalVM Enterprise Edition", "defaultStatus": "unknown", "versions": [ { "version": "21.3.20", "status": "affected", "lessThan": null, "lessThanOrEqual": null } ], "omitted": 0, "fixed": [] } ], "omitted": 0, "references": [ { "url": "https://www.oracle.com/security-alerts/alert-cve-2026-91403.html", "tag": "vendor-advisory" } ], "cwes": [ { "id": "CWE-284", "name": "Improper Access Control" } ], "ssvc": { "exploitation": "none", "automatable": "yes", "impact": "total", "at": "2026-10-23T03:55:22.386Z" }, "fix": "none", "tags": [ "oracle-corporation" ], "cves": [ "CVE-2026-91403" ], "ghsa": null, "cvss": { "score": 9.1, "version": "3.1", "by": "oracle" }, "epss": { "percentage": 0.00392, "percentile": 0.32169, "asOf": "2026-10-23", "by": "FIRST" }, "packages": [], "vendor": "Oracle Corporation", "product": "Oracle Java SE", "kev": null, "breach": null, "retracted": false, "sources": [ { "label": "cve.now", "url": "https://cve.now/CVE-2026-91403" } ], "cveVersion": 1, "cvePending": false, "publishedAt": "2026-10-21T21:23:28.057Z", "updatedAt": "2026-10-21T21:23:28.057Z" }, { "id": "cve-2026-91665", "url": "https://cveboard.org/i/cve-2026-91665", "urlPt": "https://cveboard.org/pt/i/cve-2026-91665", "json": "https://cveboard.org/i/cve-2026-91665.json", "kind": "vuln", "live": true, "knownExploited": false, "severity": "critical", "title": "Oracle Corporation Oracle Essbase", "summary": "", "titlePt": null, "summaryPt": null, "affected": [ { "vendor": "Oracle Corporation", "product": "Oracle Essbase", "defaultStatus": "unknown", "versions": [ { "version": "21.8.3.0.0", "status": "affected", "lessThan": null, "lessThanOrEqual": null } ], "omitted": 0, "fixed": [] } ], "omitted": 0, "references": [ { "url": "https://www.oracle.com/security-alerts/cpuoct2026.html", "tag": "vendor-advisory" } ], "cwes": [ { "id": "CWE-306", "name": "Missing Authentication for Critical Function" }, { "id": "CWE-287", "name": "Improper Authentication" } ], "ssvc": { "exploitation": "none", "automatable": "yes", "impact": "total", "at": "2026-10-21T00:00:00.000Z" }, "fix": "none", "tags": [ "oracle-corporation" ], "cves": [ "CVE-2026-91665" ], "ghsa": null, "cvss": { "score": 9.8, "version": "3.1", "by": "oracle" }, "epss": { "percentage": 0.00412, "percentile": 0.34334, "asOf": "2026-10-23", "by": "FIRST" }, "packages": [], "vendor": "Oracle Corporation", "product": "Oracle Essbase", "kev": null, "breach": null, "retracted": false, "sources": [ { "label": "cve.now", "url": "https://cve.now/CVE-2026-91665" } ], "cveVersion": 1, "cvePending": false, "publishedAt": "2026-10-20T21:26:56.218Z", "updatedAt": "2026-10-20T21:26:56.218Z" }, { "id": "cve-2026-91663", "url": "https://cveboard.org/i/cve-2026-91663", "urlPt": "https://cveboard.org/pt/i/cve-2026-91663", "json": "https://cveboard.org/i/cve-2026-91663.json", "kind": "vuln", "live": true, "knownExploited": false, "severity": "critical", "title": "Oracle Corporation Oracle Essbase", "summary": "", "titlePt": null, "summaryPt": null, "affected": [ { "vendor": "Oracle Corporation", "product": "Oracle Essbase", "defaultStatus": "unknown", "versions": [ { "version": "21.8.3.0.0", "status": "affected", "lessThan": null, "lessThanOrEqual": null } ], "omitted": 0, "fixed": [] } ], "omitted": 0, "references": [ { "url": "https://www.oracle.com/security-alerts/cpuoct2026.html", "tag": "vendor-advisory" } ], "cwes": [ { "id": "CWE-284", "name": "Improper Access Control" } ], "ssvc": { "exploitation": "none", "automatable": "no", "impact": "total", "at": "2026-10-23T03:55:26.169Z" }, "fix": "none", "tags": [ "oracle-corporation" ], "cves": [ "CVE-2026-91663" ], "ghsa": null, "cvss": { "score": 9.9, "version": "3.1", "by": "oracle" }, "epss": { "percentage": 0.00286, "percentile": 0.20023, "asOf": "2026-10-23", "by": "FIRST" }, "packages": [], "vendor": "Oracle Corporation", "product": "Oracle Essbase", "kev": null, "breach": null, "retracted": false, "sources": [ { "label": "cve.now", "url": "https://cve.now/CVE-2026-91663" } ], "cveVersion": 1, "cvePending": false, "publishedAt": "2026-10-20T21:26:55.534Z", "updatedAt": "2026-10-20T21:26:55.534Z" }, { "id": "cve-2026-91658", "url": "https://cveboard.org/i/cve-2026-91658", "urlPt": "https://cveboard.org/pt/i/cve-2026-91658", "json": "https://cveboard.org/i/cve-2026-91658.json", "kind": "vuln", "live": true, "knownExploited": false, "severity": "critical", "title": "Oracle Corporation Oracle Essbase", "summary": "", "titlePt": null, "summaryPt": null, "affected": [ { "vendor": "Oracle Corporation", "product": "Oracle Essbase", "defaultStatus": "unknown", "versions": [ { "version": "21.8.3.0.0", "status": "affected", "lessThan": null, "lessThanOrEqual": null } ], "omitted": 0, "fixed": [] } ], "omitted": 0, "references": [ { "url": "https://www.oracle.com/security-alerts/cpuoct2026.html", "tag": "vendor-advisory" } ], "cwes": [ { "id": "CWE-284", "name": "Improper Access Control" } ], "ssvc": { "exploitation": "none", "automatable": "no", "impact": "total", "at": "2026-10-23T03:55:25.417Z" }, "fix": "none", "tags": [ "oracle-corporation" ], "cves": [ "CVE-2026-91658" ], "ghsa": null, "cvss": { "score": 9.9, "version": "3.1", "by": "oracle" }, "epss": { "percentage": 0.00286, "percentile": 0.20024, "asOf": "2026-10-23", "by": "FIRST" }, "packages": [], "vendor": "Oracle Corporation", "product": "Oracle Essbase", "kev": null, "breach": null, "retracted": false, "sources": [ { "label": "cve.now", "url": "https://cve.now/CVE-2026-91658" } ], "cveVersion": 1, "cvePending": false, "publishedAt": "2026-10-20T21:26:53.812Z", "updatedAt": "2026-10-20T21:26:53.812Z" }, { "id": "cve-2026-91656", "url": "https://cveboard.org/i/cve-2026-91656", "urlPt": "https://cveboard.org/pt/i/cve-2026-91656", "json": "https://cveboard.org/i/cve-2026-91656.json", "kind": "vuln", "live": true, "knownExploited": false, "severity": "critical", "title": "Oracle Corporation Oracle Essbase", "summary": "", "titlePt": null, "summaryPt": null, "affected": [ { "vendor": "Oracle Corporation", "product": "Oracle Essbase", "defaultStatus": "unknown", "versions": [ { "version": "21.8.3.0.0", "status": "affected", "lessThan": null, "lessThanOrEqual": null } ], "omitted": 0, "fixed": [] } ], "omitted": 0, "references": [ { "url": "https://www.oracle.com/security-alerts/cpuoct2026.html", "tag": "vendor-advisory" } ], "cwes": [], "ssvc": null, "fix": "none", "tags": [ "oracle-corporation" ], "cves": [ "CVE-2026-91656" ], "ghsa": null, "cvss": { "score": 9.1, "version": "3.1", "by": "oracle" }, "epss": { "percentage": 0.00208, "percentile": 0.10408, "asOf": "2026-10-23", "by": "FIRST" }, "packages": [], "vendor": "Oracle Corporation", "product": "Oracle Essbase", "kev": null, "breach": null, "retracted": false, "sources": [ { "label": "cve.now", "url": "https://cve.now/CVE-2026-91656" } ], "cveVersion": 1, "cvePending": false, "publishedAt": "2026-10-20T21:26:53.121Z", "updatedAt": "2026-10-20T21:26:53.121Z" }, { "id": "cve-2026-91655", "url": "https://cveboard.org/i/cve-2026-91655", "urlPt": "https://cveboard.org/pt/i/cve-2026-91655", "json": "https://cveboard.org/i/cve-2026-91655.json", "kind": "vuln", "live": true, "knownExploited": false, "severity": "critical", "title": "Oracle Corporation Oracle Essbase", "summary": "", "titlePt": null, "summaryPt": null, "affected": [ { "vendor": "Oracle Corporation", "product": "Oracle Essbase", "defaultStatus": "unknown", "versions": [ { "version": "21.8.3.0.0", "status": "affected", "lessThan": null, "lessThanOrEqual": null } ], "omitted": 0, "fixed": [] } ], "omitted": 0, "references": [ { "url": "https://www.oracle.com/security-alerts/cpuoct2026.html", "tag": "vendor-advisory" } ], "cwes": [], "ssvc": null, "fix": "none", "tags": [ "oracle-corporation" ], "cves": [ "CVE-2026-91655" ], "ghsa": null, "cvss": { "score": 9.1, "version": "3.1", "by": "oracle" }, "epss": { "percentage": 0.00208, "percentile": 0.10407, "asOf": "2026-10-23", "by": "FIRST" }, "packages": [], "vendor": "Oracle Corporation", "product": "Oracle Essbase", "kev": null, "breach": null, "retracted": false, "sources": [ { "label": "cve.now", "url": "https://cve.now/CVE-2026-91655" } ], "cveVersion": 1, "cvePending": false, "publishedAt": "2026-10-20T21:26:52.673Z", "updatedAt": "2026-10-20T21:26:52.673Z" }, { "id": "cve-2026-91644", "url": "https://cveboard.org/i/cve-2026-91644", "urlPt": "https://cveboard.org/pt/i/cve-2026-91644", "json": "https://cveboard.org/i/cve-2026-91644.json", "kind": "vuln", "live": true, "knownExploited": false, "severity": "critical", "title": "Oracle Corporation Oracle Essbase", "summary": "", "titlePt": null, "summaryPt": null, "affected": [ { "vendor": "Oracle Corporation", "product": "Oracle Essbase", "defaultStatus": "unknown", "versions": [ { "version": "21.8.3.0.0", "status": "affected", "lessThan": null, "lessThanOrEqual": null } ], "omitted": 0, "fixed": [] } ], "omitted": 0, "references": [ { "url": "https://www.oracle.com/security-alerts/cpuoct2026.html", "tag": "vendor-advisory" } ], "cwes": [], "ssvc": null, "fix": "none", "tags": [ "oracle-corporation" ], "cves": [ "CVE-2026-91644" ], "ghsa": null, "cvss": { "score": 9.3, "version": "3.1", "by": "oracle" }, "epss": { "percentage": 0.00218, "percentile": 0.11622, "asOf": "2026-10-23", "by": "FIRST" }, "packages": [], "vendor": "Oracle Corporation", "product": "Oracle Essbase", "kev": null, "breach": null, "retracted": false, "sources": [ { "label": "cve.now", "url": "https://cve.now/CVE-2026-91644" } ], "cveVersion": 1, "cvePending": false, "publishedAt": "2026-10-20T21:26:48.805Z", "updatedAt": "2026-10-20T21:26:48.805Z" }, { "id": "cve-2026-91638", "url": "https://cveboard.org/i/cve-2026-91638", "urlPt": "https://cveboard.org/pt/i/cve-2026-91638", "json": "https://cveboard.org/i/cve-2026-91638.json", "kind": "vuln", "live": true, "knownExploited": false, "severity": "critical", "title": "Oracle Corporation Oracle Essbase", "summary": "", "titlePt": null, "summaryPt": null, "affected": [ { "vendor": "Oracle Corporation", "product": "Oracle Essbase", "defaultStatus": "unknown", "versions": [ { "version": "21.8.3.0.0", "status": "affected", "lessThan": null, "lessThanOrEqual": null } ], "omitted": 0, "fixed": [] } ], "omitted": 0, "references": [ { "url": "https://www.oracle.com/security-alerts/cpuoct2026.html", "tag": "vendor-advisory" } ], "cwes": [ { "id": "CWE-284", "name": "Improper Access Control" } ], "ssvc": { "exploitation": "none", "automatable": "no", "impact": "total", "at": "2026-10-23T03:55:24.669Z" }, "fix": "none", "tags": [ "oracle-corporation" ], "cves": [ "CVE-2026-91638" ], "ghsa": null, "cvss": { "score": 9.9, "version": "3.1", "by": "oracle" }, "epss": { "percentage": 0.00389, "percentile": 0.31786, "asOf": "2026-10-23", "by": "FIRST" }, "packages": [], "vendor": "Oracle Corporation", "product": "Oracle Essbase", "kev": null, "breach": null, "retracted": false, "sources": [ { "label": "cve.now", "url": "https://cve.now/CVE-2026-91638" } ], "cveVersion": 1, "cvePending": false, "publishedAt": "2026-10-20T21:26:46.713Z", "updatedAt": "2026-10-20T21:26:46.713Z" }, { "id": "cve-2026-91637", "url": "https://cveboard.org/i/cve-2026-91637", "urlPt": "https://cveboard.org/pt/i/cve-2026-91637", "json": "https://cveboard.org/i/cve-2026-91637.json", "kind": "vuln", "live": true, "knownExploited": false, "severity": "critical", "title": "Oracle Corporation Oracle Essbase", "summary": "", "titlePt": null, "summaryPt": null, "affected": [ { "vendor": "Oracle Corporation", "product": "Oracle Essbase", "defaultStatus": "unknown", "versions": [ { "version": "21.8.3.0.0", "status": "affected", "lessThan": null, "lessThanOrEqual": null } ], "omitted": 0, "fixed": [] } ], "omitted": 0, "references": [ { "url": "https://www.oracle.com/security-alerts/cpuoct2026.html", "tag": "vendor-advisory" } ], "cwes": [ { "id": "CWE-284", "name": "Improper Access Control" } ], "ssvc": { "exploitation": "none", "automatable": "no", "impact": "total", "at": "2026-10-23T03:55:23.909Z" }, "fix": "none", "tags": [ "oracle-corporation" ], "cves": [ "CVE-2026-91637" ], "ghsa": null, "cvss": { "score": 9.9, "version": "3.1", "by": "oracle" }, "epss": { "percentage": 0.00286, "percentile": 0.20023, "asOf": "2026-10-23", "by": "FIRST" }, "packages": [], "vendor": "Oracle Corporation", "product": "Oracle Essbase", "kev": null, "breach": null, "retracted": false, "sources": [ { "label": "cve.now", "url": "https://cve.now/CVE-2026-91637" } ], "cveVersion": 1, "cvePending": false, "publishedAt": "2026-10-20T21:26:46.370Z", "updatedAt": "2026-10-20T21:26:46.370Z" }, { "id": "cve-2026-91624", "url": "https://cveboard.org/i/cve-2026-91624", "urlPt": "https://cveboard.org/pt/i/cve-2026-91624", "json": "https://cveboard.org/i/cve-2026-91624.json", "kind": "vuln", "live": true, "knownExploited": false, "severity": "critical", "title": "Oracle Corporation Oracle Agile Product Lifecycle Management for Process", "summary": "", "titlePt": null, "summaryPt": null, "affected": [ { "vendor": "Oracle Corporation", "product": "Oracle Agile Product Lifecycle Management for Process", "defaultStatus": "unknown", "versions": [ { "version": "6.2.4", "status": "affected", "lessThan": null, "lessThanOrEqual": null } ], "omitted": 0, "fixed": [] } ], "omitted": 0, "references": [ { "url": "https://www.oracle.com/security-alerts/cpuoct2026.html", "tag": "vendor-advisory" } ], "cwes": [ { "id": "CWE-306", "name": "Missing Authentication for Critical Function" }, { "id": "CWE-287", "name": "Improper Authentication" } ], "ssvc": { "exploitation": "none", "automatable": "yes", "impact": "total", "at": "2026-10-21T10:55:42.564Z" }, "fix": "none", "tags": [ "oracle-corporation" ], "cves": [ "CVE-2026-91624" ], "ghsa": null, "cvss": { "score": 9.1, "version": "3.1", "by": "oracle" }, "epss": { "percentage": 0.00249, "percentile": 0.15322, "asOf": "2026-10-23", "by": "FIRST" }, "packages": [], "vendor": "Oracle Corporation", "product": "Oracle Agile Product Lifecycle Management for Process", "kev": null, "breach": null, "retracted": false, "sources": [ { "label": "cve.now", "url": "https://cve.now/CVE-2026-91624" } ], "cveVersion": 1, "cvePending": false, "publishedAt": "2026-10-20T21:26:41.802Z", "updatedAt": "2026-10-20T21:26:41.802Z" }, { "id": "cve-2026-91622", "url": "https://cveboard.org/i/cve-2026-91622", "urlPt": "https://cveboard.org/pt/i/cve-2026-91622", "json": "https://cveboard.org/i/cve-2026-91622.json", "kind": "vuln", "live": true, "knownExploited": false, "severity": "critical", "title": "Oracle Corporation Oracle Agile Product Lifecycle Management for Process", "summary": "", "titlePt": null, "summaryPt": null, "affected": [ { "vendor": "Oracle Corporation", "product": "Oracle Agile Product Lifecycle Management for Process", "defaultStatus": "unknown", "versions": [ { "version": "6.2.4", "status": "affected", "lessThan": null, "lessThanOrEqual": null } ], "omitted": 0, "fixed": [] } ], "omitted": 0, "references": [ { "url": "https://www.oracle.com/security-alerts/cpuoct2026.html", "tag": "vendor-advisory" } ], "cwes": [], "ssvc": null, "fix": "none", "tags": [ "oracle-corporation" ], "cves": [ "CVE-2026-91622" ], "ghsa": null, "cvss": { "score": 9.3, "version": "3.1", "by": "oracle" }, "epss": { "percentage": 0.00237, "percentile": 0.13864, "asOf": "2026-10-23", "by": "FIRST" }, "packages": [], "vendor": "Oracle Corporation", "product": "Oracle Agile Product Lifecycle Management for Process", "kev": null, "breach": null, "retracted": false, "sources": [ { "label": "cve.now", "url": "https://cve.now/CVE-2026-91622" } ], "cveVersion": 1, "cvePending": false, "publishedAt": "2026-10-20T21:26:41.127Z", "updatedAt": "2026-10-20T21:26:41.127Z" }, { "id": "cve-2026-91495", "url": "https://cveboard.org/i/cve-2026-91495", "urlPt": "https://cveboard.org/pt/i/cve-2026-91495", "json": "https://cveboard.org/i/cve-2026-91495.json", "kind": "vuln", "live": true, "knownExploited": false, "severity": "critical", "title": "Oracle Corporation Oracle WebCenter Content", "summary": "", "titlePt": null, "summaryPt": null, "affected": [ { "vendor": "Oracle Corporation", "product": "Oracle WebCenter Content", "defaultStatus": "unknown", "versions": [ { "version": "12.2.1.4.0", "status": "affected", "lessThan": null, "lessThanOrEqual": null }, { "version": "14.1.2.0.0", "status": "affected", "lessThan": null, "lessThanOrEqual": null } ], "omitted": 0, "fixed": [] } ], "omitted": 0, "references": [ { "url": "https://www.oracle.com/security-alerts/cpuoct2026.html", "tag": "vendor-advisory" } ], "cwes": [ { "id": "CWE-306", "name": "Missing Authentication for Critical Function" }, { "id": "CWE-287", "name": "Improper Authentication" } ], "ssvc": { "exploitation": "none", "automatable": "yes", "impact": "total", "at": "2026-10-21T10:53:30.241Z" }, "fix": "none", "tags": [ "oracle-corporation" ], "cves": [ "CVE-2026-91495" ], "ghsa": null, "cvss": { "score": 9.8, "version": "3.1", "by": "oracle" }, "epss": { "percentage": 0.0045, "percentile": 0.38132, "asOf": "2026-10-23", "by": "FIRST" }, "packages": [], "vendor": "Oracle Corporation", "product": "Oracle WebCenter Content", "kev": null, "breach": null, "retracted": false, "sources": [ { "label": "cve.now", "url": "https://cve.now/CVE-2026-91495" } ], "cveVersion": 1, "cvePending": false, "publishedAt": "2026-10-20T21:26:16.517Z", "updatedAt": "2026-10-20T21:26:16.517Z" }, { "id": "cve-2026-91491", "url": "https://cveboard.org/i/cve-2026-91491", "urlPt": "https://cveboard.org/pt/i/cve-2026-91491", "json": "https://cveboard.org/i/cve-2026-91491.json", "kind": "vuln", "live": true, "knownExploited": false, "severity": "critical", "title": "Oracle Corporation Oracle Identity Manager Connector", "summary": "", "titlePt": null, "summaryPt": null, "affected": [ { "vendor": "Oracle Corporation", "product": "Oracle Identity Manager Connector", "defaultStatus": "unknown", "versions": [ { "version": "12.2.1.4.0", "status": "affected", "lessThan": null, "lessThanOrEqual": null }, { "version": "14.1.2.1.0", "status": "affected", "lessThan": null, "lessThanOrEqual": null } ], "omitted": 0, "fixed": [] } ], "omitted": 0, "references": [ { "url": "https://www.oracle.com/security-alerts/cpuoct2026.html", "tag": "vendor-advisory" } ], "cwes": [ { "id": "CWE-306", "name": "Missing Authentication for Critical Function" }, { "id": "CWE-287", "name": "Improper Authentication" } ], "ssvc": { "exploitation": "none", "automatable": "yes", "impact": "total", "at": "2026-10-21T10:53:36.471Z" }, "fix": "none", "tags": [ "oracle-corporation" ], "cves": [ "CVE-2026-91491" ], "ghsa": null, "cvss": { "score": 9.8, "version": "3.1", "by": "oracle" }, "epss": { "percentage": 0.00331, "percentile": 0.25017, "asOf": "2026-10-23", "by": "FIRST" }, "packages": [], "vendor": "Oracle Corporation", "product": "Oracle Identity Manager Connector", "kev": null, "breach": null, "retracted": false, "sources": [ { "label": "cve.now", "url": "https://cve.now/CVE-2026-91491" } ], "cveVersion": 1, "cvePending": false, "publishedAt": "2026-10-20T21:26:15.124Z", "updatedAt": "2026-10-20T21:26:15.124Z" }, { "id": "cve-2026-91490", "url": "https://cveboard.org/i/cve-2026-91490", "urlPt": "https://cveboard.org/pt/i/cve-2026-91490", "json": "https://cveboard.org/i/cve-2026-91490.json", "kind": "vuln", "live": true, "knownExploited": false, "severity": "critical", "title": "Oracle Corporation Oracle Identity Manager Connector", "summary": "", "titlePt": null, "summaryPt": null, "affected": [ { "vendor": "Oracle Corporation", "product": "Oracle Identity Manager Connector", "defaultStatus": "unknown", "versions": [ { "version": "12.2.1.4.0", "status": "affected", "lessThan": null, "lessThanOrEqual": null }, { "version": "14.1.2.1.0", "status": "affected", "lessThan": null, "lessThanOrEqual": null } ], "omitted": 0, "fixed": [] } ], "omitted": 0, "references": [ { "url": "https://www.oracle.com/security-alerts/cpuoct2026.html", "tag": "vendor-advisory" } ], "cwes": [ { "id": "CWE-306", "name": "Missing Authentication for Critical Function" }, { "id": "CWE-287", "name": "Improper Authentication" } ], "ssvc": { "exploitation": "none", "automatable": "yes", "impact": "total", "at": "2026-10-21T10:55:48.761Z" }, "fix": "none", "tags": [ "oracle-corporation" ], "cves": [ "CVE-2026-91490" ], "ghsa": null, "cvss": { "score": 9.1, "version": "3.1", "by": "oracle" }, "epss": { "percentage": 0.00377, "percentile": 0.30494, "asOf": "2026-10-23", "by": "FIRST" }, "packages": [], "vendor": "Oracle Corporation", "product": "Oracle Identity Manager Connector", "kev": null, "breach": null, "retracted": false, "sources": [ { "label": "cve.now", "url": "https://cve.now/CVE-2026-91490" } ], "cveVersion": 1, "cvePending": false, "publishedAt": "2026-10-20T21:26:14.684Z", "updatedAt": "2026-10-20T21:26:14.684Z" }, { "id": "cve-2026-91408", "url": "https://cveboard.org/i/cve-2026-91408", "urlPt": "https://cveboard.org/pt/i/cve-2026-91408", "json": "https://cveboard.org/i/cve-2026-91408.json", "kind": "vuln", "live": true, "knownExploited": false, "severity": "critical", "title": "Oracle Corporation Oracle Identity Manager", "summary": "", "titlePt": null, "summaryPt": null, "affected": [ { "vendor": "Oracle Corporation", "product": "Oracle Identity Manager", "defaultStatus": "unknown", "versions": [ { "version": "12.2.1.4.0", "status": "affected", "lessThan": null, "lessThanOrEqual": null }, { "version": "14.1.2.1.0", "status": "affected", "lessThan": null, "lessThanOrEqual": null } ], "omitted": 0, "fixed": [] } ], "omitted": 0, "references": [ { "url": "https://www.oracle.com/security-alerts/cpuoct2026.html", "tag": "vendor-advisory" } ], "cwes": [ { "id": "CWE-306", "name": "Missing Authentication for Critical Function" }, { "id": "CWE-287", "name": "Improper Authentication" } ], "ssvc": { "exploitation": "none", "automatable": "yes", "impact": "total", "at": "2026-10-21T10:53:42.581Z" }, "fix": "none", "tags": [ "oracle-corporation" ], "cves": [ "CVE-2026-91408" ], "ghsa": null, "cvss": { "score": 9.8, "version": "3.1", "by": "oracle" }, "epss": { "percentage": 0.00355, "percentile": 0.28074, "asOf": "2026-10-23", "by": "FIRST" }, "packages": [], "vendor": "Oracle Corporation", "product": "Oracle Identity Manager", "kev": null, "breach": null, "retracted": false, "sources": [ { "label": "cve.now", "url": "https://cve.now/CVE-2026-91408" } ], "cveVersion": 1, "cvePending": false, "publishedAt": "2026-10-20T21:25:48.444Z", "updatedAt": "2026-10-20T21:25:48.444Z" }, { "id": "cve-2026-91354", "url": "https://cveboard.org/i/cve-2026-91354", "urlPt": "https://cveboard.org/pt/i/cve-2026-91354", "json": "https://cveboard.org/i/cve-2026-91354.json", "kind": "vuln", "live": true, "knownExploited": false, "severity": "critical", "title": "Oracle Corporation Oracle Outside In Technology", "summary": "", "titlePt": null, "summaryPt": null, "affected": [ { "vendor": "Oracle Corporation", "product": "Oracle Outside In Technology", "defaultStatus": "unknown", "versions": [ { "version": "8.5.8", "status": "affected", "lessThan": null, "lessThanOrEqual": null } ], "omitted": 0, "fixed": [] } ], "omitted": 0, "references": [ { "url": "https://www.oracle.com/security-alerts/cpuoct2026.html", "tag": "vendor-advisory" } ], "cwes": [], "ssvc": null, "fix": "none", "tags": [ "oracle-corporation" ], "cves": [ "CVE-2026-91354" ], "ghsa": null, "cvss": { "score": 9.9, "version": "3.1", "by": "oracle" }, "epss": { "percentage": 0.00328, "percentile": 0.24729, "asOf": "2026-10-23", "by": "FIRST" }, "packages": [], "vendor": "Oracle Corporation", "product": "Oracle Outside In Technology", "kev": null, "breach": null, "retracted": false, "sources": [ { "label": "cve.now", "url": "https://cve.now/CVE-2026-91354" } ], "cveVersion": 1, "cvePending": false, "publishedAt": "2026-10-20T21:25:29.775Z", "updatedAt": "2026-10-20T21:25:29.775Z" }, { "id": "cve-2026-91341", "url": "https://cveboard.org/i/cve-2026-91341", "urlPt": "https://cveboard.org/pt/i/cve-2026-91341", "json": "https://cveboard.org/i/cve-2026-91341.json", "kind": "vuln", "live": true, "knownExploited": false, "severity": "critical", "title": "Oracle Corporation Oracle Outside In Technology", "summary": "", "titlePt": null, "summaryPt": null, "affected": [ { "vendor": "Oracle Corporation", "product": "Oracle Outside In Technology", "defaultStatus": "unknown", "versions": [ { "version": "8.5.8", "status": "affected", "lessThan": null, "lessThanOrEqual": null } ], "omitted": 0, "fixed": [] } ], "omitted": 0, "references": [ { "url": "https://www.oracle.com/security-alerts/cpuoct2026.html", "tag": "vendor-advisory" } ], "cwes": [], "ssvc": null, "fix": "none", "tags": [ "oracle-corporation" ], "cves": [ "CVE-2026-91341" ], "ghsa": null, "cvss": { "score": 9.1, "version": "3.1", "by": "oracle" }, "epss": { "percentage": 0.00441, "percentile": 0.37268, "asOf": "2026-10-23", "by": "FIRST" }, "packages": [], "vendor": "Oracle Corporation", "product": "Oracle Outside In Technology", "kev": null, "breach": null, "retracted": false, "sources": [ { "label": "cve.now", "url": "https://cve.now/CVE-2026-91341" } ], "cveVersion": 1, "cvePending": false, "publishedAt": "2026-10-20T21:25:25.187Z", "updatedAt": "2026-10-20T21:25:25.187Z" }, { "id": "cve-2026-91323", "url": "https://cveboard.org/i/cve-2026-91323", "urlPt": "https://cveboard.org/pt/i/cve-2026-91323", "json": "https://cveboard.org/i/cve-2026-91323.json", "kind": "vuln", "live": true, "knownExploited": false, "severity": "critical", "title": "Oracle Corporation Oracle WebLogic Server", "summary": "", "titlePt": null, "summaryPt": null, "affected": [ { "vendor": "Oracle Corporation", "product": "Oracle WebLogic Server", "defaultStatus": "unknown", "versions": [ { "version": "12.2.1.4.0", "status": "affected", "lessThan": null, "lessThanOrEqual": null }, { "version": "14.1.1.0.0", "status": "affected", "lessThan": null, "lessThanOrEqual": null }, { "version": "14.1.2.0.0", "status": "affected", "lessThan": null, "lessThanOrEqual": null }, { "version": "15.1.1.0.0", "status": "affected", "lessThan": null, "lessThanOrEqual": null } ], "omitted": 0, "fixed": [] } ], "omitted": 0, "references": [ { "url": "https://www.oracle.com/security-alerts/cpuoct2026.html", "tag": "vendor-advisory" } ], "cwes": [ { "id": "CWE-306", "name": "Missing Authentication for Critical Function" }, { "id": "CWE-287", "name": "Improper Authentication" } ], "ssvc": { "exploitation": "none", "automatable": "yes", "impact": "total", "at": "2026-10-21T10:53:48.853Z" }, "fix": "none", "tags": [ "oracle-corporation" ], "cves": [ "CVE-2026-91323" ], "ghsa": null, "cvss": { "score": 9.8, "version": "3.1", "by": "oracle" }, "epss": { "percentage": 0.00483, "percentile": 0.40723, "asOf": "2026-10-23", "by": "FIRST" }, "packages": [], "vendor": "Oracle Corporation", "product": "Oracle WebLogic Server", "kev": null, "breach": null, "retracted": false, "sources": [ { "label": "cve.now", "url": "https://cve.now/CVE-2026-91323" } ], "cveVersion": 1, "cvePending": false, "publishedAt": "2026-10-20T21:25:18.765Z", "updatedAt": "2026-10-20T21:25:18.765Z" }, { "id": "cve-2026-91305", "url": "https://cveboard.org/i/cve-2026-91305", "urlPt": "https://cveboard.org/pt/i/cve-2026-91305", "json": "https://cveboard.org/i/cve-2026-91305.json", "kind": "vuln", "live": true, "knownExploited": false, "severity": "critical", "title": "Oracle Corporation JD Edwards EnterpriseOne Tools", "summary": "", "titlePt": null, "summaryPt": null, "affected": [ { "vendor": "Oracle Corporation", "product": "JD Edwards EnterpriseOne Tools", "defaultStatus": "unknown", "versions": [ { "version": "9.2.0.0", "status": "affected", "lessThan": null, "lessThanOrEqual": "9.2.26.5" } ], "omitted": 0, "fixed": [] } ], "omitted": 0, "references": [ { "url": "https://www.oracle.com/security-alerts/cpuoct2026.html", "tag": "vendor-advisory" } ], "cwes": [ { "id": "CWE-306", "name": "Missing Authentication for Critical Function" }, { "id": "CWE-287", "name": "Improper Authentication" } ], "ssvc": { "exploitation": "none", "automatable": "yes", "impact": "total", "at": "2026-10-21T00:00:00.000Z" }, "fix": "none", "tags": [ "oracle-corporation" ], "cves": [ "CVE-2026-91305" ], "ghsa": null, "cvss": { "score": 9.1, "version": "3.1", "by": "oracle" }, "epss": { "percentage": 0.00377, "percentile": 0.30494, "asOf": "2026-10-23", "by": "FIRST" }, "packages": [], "vendor": "Oracle Corporation", "product": "JD Edwards EnterpriseOne Tools", "kev": null, "breach": null, "retracted": false, "sources": [ { "label": "cve.now", "url": "https://cve.now/CVE-2026-91305" } ], "cveVersion": 1, "cvePending": false, "publishedAt": "2026-10-20T21:25:12.544Z", "updatedAt": "2026-10-20T21:25:12.544Z" }, { "id": "cve-2026-91299", "url": "https://cveboard.org/i/cve-2026-91299", "urlPt": "https://cveboard.org/pt/i/cve-2026-91299", "json": "https://cveboard.org/i/cve-2026-91299.json", "kind": "vuln", "live": true, "knownExploited": false, "severity": "critical", "title": "Oracle Corporation JD Edwards EnterpriseOne Orchestrator", "summary": "", "titlePt": null, "summaryPt": null, "affected": [ { "vendor": "Oracle Corporation", "product": "JD Edwards EnterpriseOne Orchestrator", "defaultStatus": "unknown", "versions": [ { "version": "9.2.0.0", "status": "affected", "lessThan": null, "lessThanOrEqual": "9.2.26.5" } ], "omitted": 0, "fixed": [] } ], "omitted": 0, "references": [ { "url": "https://www.oracle.com/security-alerts/cpuoct2026.html", "tag": "vendor-advisory" } ], "cwes": [ { "id": "CWE-284", "name": "Improper Access Control" } ], "ssvc": { "exploitation": "none", "automatable": "yes", "impact": "total", "at": "2026-10-22T23:04:41.581Z" }, "fix": "none", "tags": [ "oracle-corporation" ], "cves": [ "CVE-2026-91299" ], "ghsa": null, "cvss": { "score": 10, "version": "3.1", "by": "oracle" }, "epss": { "percentage": 0.00393, "percentile": 0.32318, "asOf": "2026-10-23", "by": "FIRST" }, "packages": [], "vendor": "Oracle Corporation", "product": "JD Edwards EnterpriseOne Orchestrator", "kev": null, "breach": null, "retracted": false, "sources": [ { "label": "cve.now", "url": "https://cve.now/CVE-2026-91299" } ], "cveVersion": 1, "cvePending": false, "publishedAt": "2026-10-20T21:25:10.532Z", "updatedAt": "2026-10-20T21:25:10.532Z" }, { "id": "cve-2026-91265", "url": "https://cveboard.org/i/cve-2026-91265", "urlPt": "https://cveboard.org/pt/i/cve-2026-91265", "json": "https://cveboard.org/i/cve-2026-91265.json", "kind": "vuln", "live": true, "knownExploited": false, "severity": "critical", "title": "Oracle Corporation JD Edwards EnterpriseOne Tools", "summary": "", "titlePt": null, "summaryPt": null, "affected": [ { "vendor": "Oracle Corporation", "product": "JD Edwards EnterpriseOne Tools", "defaultStatus": "unknown", "versions": [ { "version": "9.2.0.0", "status": "affected", "lessThan": null, "lessThanOrEqual": "9.2.26.5" } ], "omitted": 0, "fixed": [] } ], "omitted": 0, "references": [ { "url": "https://www.oracle.com/security-alerts/cpuoct2026.html", "tag": "vendor-advisory" } ], "cwes": [ { "id": "CWE-306", "name": "Missing Authentication for Critical Function" }, { "id": "CWE-287", "name": "Improper Authentication" } ], "ssvc": { "exploitation": "none", "automatable": "yes", "impact": "total", "at": "2026-10-21T00:00:00.000Z" }, "fix": "none", "tags": [ "oracle-corporation" ], "cves": [ "CVE-2026-91265" ], "ghsa": null, "cvss": { "score": 9.1, "version": "3.1", "by": "oracle" }, "epss": { "percentage": 0.00377, "percentile": 0.30494, "asOf": "2026-10-23", "by": "FIRST" }, "packages": [], "vendor": "Oracle Corporation", "product": "JD Edwards EnterpriseOne Tools", "kev": null, "breach": null, "retracted": false, "sources": [ { "label": "cve.now", "url": "https://cve.now/CVE-2026-91265" } ], "cveVersion": 1, "cvePending": false, "publishedAt": "2026-10-20T21:24:58.493Z", "updatedAt": "2026-10-20T21:24:58.493Z" }, { "id": "cve-2026-91251", "url": "https://cveboard.org/i/cve-2026-91251", "urlPt": "https://cveboard.org/pt/i/cve-2026-91251", "json": "https://cveboard.org/i/cve-2026-91251.json", "kind": "vuln", "live": true, "knownExploited": false, "severity": "critical", "title": "Oracle Corporation Oracle SOA Suite", "summary": "", "titlePt": null, "summaryPt": null, "affected": [ { "vendor": "Oracle Corporation", "product": "Oracle SOA Suite", "defaultStatus": "unknown", "versions": [ { "version": "12.2.1.4.0", "status": "affected", "lessThan": null, "lessThanOrEqual": null }, { "version": "14.1.2.0.0", "status": "affected", "lessThan": null, "lessThanOrEqual": null } ], "omitted": 0, "fixed": [] } ], "omitted": 0, "references": [ { "url": "https://www.oracle.com/security-alerts/cpuoct2026.html", "tag": "vendor-advisory" } ], "cwes": [], "ssvc": null, "fix": "none", "tags": [ "oracle-corporation" ], "cves": [ "CVE-2026-91251" ], "ghsa": null, "cvss": { "score": 9.9, "version": "3.1", "by": "oracle" }, "epss": { "percentage": 0.00447, "percentile": 0.37858, "asOf": "2026-10-23", "by": "FIRST" }, "packages": [], "vendor": "Oracle Corporation", "product": "Oracle SOA Suite", "kev": null, "breach": null, "retracted": false, "sources": [ { "label": "cve.now", "url": "https://cve.now/CVE-2026-91251" } ], "cveVersion": 1, "cvePending": false, "publishedAt": "2026-10-20T21:24:53.905Z", "updatedAt": "2026-10-20T21:24:53.905Z" }, { "id": "cve-2026-91250", "url": "https://cveboard.org/i/cve-2026-91250", "urlPt": "https://cveboard.org/pt/i/cve-2026-91250", "json": "https://cveboard.org/i/cve-2026-91250.json", "kind": "vuln", "live": true, "knownExploited": false, "severity": "critical", "title": "Oracle Corporation Oracle SOA Suite", "summary": "", "titlePt": null, "summaryPt": null, "affected": [ { "vendor": "Oracle Corporation", "product": "Oracle SOA Suite", "defaultStatus": "unknown", "versions": [ { "version": "12.2.1.4.0", "status": "affected", "lessThan": null, "lessThanOrEqual": null }, { "version": "14.1.2.0.0", "status": "affected", "lessThan": null, "lessThanOrEqual": null } ], "omitted": 0, "fixed": [] } ], "omitted": 0, "references": [ { "url": "https://www.oracle.com/security-alerts/cpuoct2026.html", "tag": "vendor-advisory" } ], "cwes": [], "ssvc": null, "fix": "none", "tags": [ "oracle-corporation" ], "cves": [ "CVE-2026-91250" ], "ghsa": null, "cvss": { "score": 9.9, "version": "3.1", "by": "oracle" }, "epss": { "percentage": 0.00447, "percentile": 0.37858, "asOf": "2026-10-23", "by": "FIRST" }, "packages": [], "vendor": "Oracle Corporation", "product": "Oracle SOA Suite", "kev": null, "breach": null, "retracted": false, "sources": [ { "label": "cve.now", "url": "https://cve.now/CVE-2026-91250" } ], "cveVersion": 1, "cvePending": false, "publishedAt": "2026-10-20T21:24:53.556Z", "updatedAt": "2026-10-20T21:24:53.556Z" }, { "id": "cve-2026-91243", "url": "https://cveboard.org/i/cve-2026-91243", "urlPt": "https://cveboard.org/pt/i/cve-2026-91243", "json": "https://cveboard.org/i/cve-2026-91243.json", "kind": "vuln", "live": true, "knownExploited": false, "severity": "critical", "title": "Oracle Corporation Oracle Business Process Management Suite", "summary": "", "titlePt": null, "summaryPt": null, "affected": [ { "vendor": "Oracle Corporation", "product": "Oracle Business Process Management Suite", "defaultStatus": "unknown", "versions": [ { "version": "12.2.1.4.0", "status": "affected", "lessThan": null, "lessThanOrEqual": null }, { "version": "14.1.2.0.0", "status": "affected", "lessThan": null, "lessThanOrEqual": null } ], "omitted": 0, "fixed": [] } ], "omitted": 0, "references": [ { "url": "https://www.oracle.com/security-alerts/cpuoct2026.html", "tag": "vendor-advisory" } ], "cwes": [], "ssvc": null, "fix": "none", "tags": [ "oracle-corporation" ], "cves": [ "CVE-2026-91243" ], "ghsa": null, "cvss": { "score": 9.6, "version": "3.1", "by": "oracle" }, "epss": { "percentage": 0.00365, "percentile": 0.29206, "asOf": "2026-10-23", "by": "FIRST" }, "packages": [], "vendor": "Oracle Corporation", "product": "Oracle Business Process Management Suite", "kev": null, "breach": null, "retracted": false, "sources": [ { "label": "cve.now", "url": "https://cve.now/CVE-2026-91243" } ], "cveVersion": 1, "cvePending": false, "publishedAt": "2026-10-20T21:24:51.000Z", "updatedAt": "2026-10-20T21:24:51.000Z" }, { "id": "cve-2026-91241", "url": "https://cveboard.org/i/cve-2026-91241", "urlPt": "https://cveboard.org/pt/i/cve-2026-91241", "json": "https://cveboard.org/i/cve-2026-91241.json", "kind": "vuln", "live": true, "knownExploited": false, "severity": "critical", "title": "Oracle Corporation Oracle Business Intelligence Enterprise Edition", "summary": "", "titlePt": null, "summaryPt": null, "affected": [ { "vendor": "Oracle Corporation", "product": "Oracle Business Intelligence Enterprise Edition", "defaultStatus": "unknown", "versions": [ { "version": "8.2.0.0.0", "status": "affected", "lessThan": null, "lessThanOrEqual": null }, { "version": "12.2.1.4.0", "status": "affected", "lessThan": null, "lessThanOrEqual": null }, { "version": "26.01.0.0.0", "status": "affected", "lessThan": null, "lessThanOrEqual": null } ], "omitted": 0, "fixed": [] } ], "omitted": 0, "references": [ { "url": "https://www.oracle.com/security-alerts/cpuoct2026.html", "tag": "vendor-advisory" } ], "cwes": [], "ssvc": null, "fix": "none", "tags": [ "oracle-corporation" ], "cves": [ "CVE-2026-91241" ], "ghsa": null, "cvss": { "score": 9.1, "version": "3.1", "by": "oracle" }, "epss": { "percentage": 0.00343, "percentile": 0.26577, "asOf": "2026-10-23", "by": "FIRST" }, "packages": [], "vendor": "Oracle Corporation", "product": "Oracle Business Intelligence Enterprise Edition", "kev": null, "breach": null, "retracted": false, "sources": [ { "label": "cve.now", "url": "https://cve.now/CVE-2026-91241" } ], "cveVersion": 1, "cvePending": false, "publishedAt": "2026-10-20T21:24:50.301Z", "updatedAt": "2026-10-20T21:24:50.301Z" }, { "id": "cve-2026-91236", "url": "https://cveboard.org/i/cve-2026-91236", "urlPt": "https://cveboard.org/pt/i/cve-2026-91236", "json": "https://cveboard.org/i/cve-2026-91236.json", "kind": "vuln", "live": true, "knownExploited": false, "severity": "critical", "title": "Oracle Corporation Oracle SOA Suite", "summary": "", "titlePt": null, "summaryPt": null, "affected": [ { "vendor": "Oracle Corporation", "product": "Oracle SOA Suite", "defaultStatus": "unknown", "versions": [ { "version": "12.2.1.4.0", "status": "affected", "lessThan": null, "lessThanOrEqual": null }, { "version": "14.1.2.0.0", "status": "affected", "lessThan": null, "lessThanOrEqual": null } ], "omitted": 0, "fixed": [] } ], "omitted": 0, "references": [ { "url": "https://www.oracle.com/security-alerts/cpuoct2026.html", "tag": "vendor-advisory" } ], "cwes": [ { "id": "CWE-306", "name": "Missing Authentication for Critical Function" }, { "id": "CWE-287", "name": "Improper Authentication" } ], "ssvc": { "exploitation": "none", "automatable": "yes", "impact": "total", "at": "2026-10-21T10:53:55.131Z" }, "fix": "none", "tags": [ "oracle-corporation" ], "cves": [ "CVE-2026-91236" ], "ghsa": null, "cvss": { "score": 9.8, "version": "3.1", "by": "oracle" }, "epss": { "percentage": 0.0045, "percentile": 0.3813, "asOf": "2026-10-23", "by": "FIRST" }, "packages": [], "vendor": "Oracle Corporation", "product": "Oracle SOA Suite", "kev": null, "breach": null, "retracted": false, "sources": [ { "label": "cve.now", "url": "https://cve.now/CVE-2026-91236" } ], "cveVersion": 1, "cvePending": false, "publishedAt": "2026-10-20T21:24:48.628Z", "updatedAt": "2026-10-20T21:24:48.628Z" }, { "id": "cve-2026-91235", "url": "https://cveboard.org/i/cve-2026-91235", "urlPt": "https://cveboard.org/pt/i/cve-2026-91235", "json": "https://cveboard.org/i/cve-2026-91235.json", "kind": "vuln", "live": true, "knownExploited": false, "severity": "critical", "title": "Oracle Corporation Oracle SOA Suite", "summary": "", "titlePt": null, "summaryPt": null, "affected": [ { "vendor": "Oracle Corporation", "product": "Oracle SOA Suite", "defaultStatus": "unknown", "versions": [ { "version": "12.2.1.4.0", "status": "affected", "lessThan": null, "lessThanOrEqual": null }, { "version": "14.1.2.0.0", "status": "affected", "lessThan": null, "lessThanOrEqual": null } ], "omitted": 0, "fixed": [] } ], "omitted": 0, "references": [ { "url": "https://www.oracle.com/security-alerts/cpuoct2026.html", "tag": "vendor-advisory" } ], "cwes": [ { "id": "CWE-306", "name": "Missing Authentication for Critical Function" }, { "id": "CWE-287", "name": "Improper Authentication" } ], "ssvc": { "exploitation": "none", "automatable": "yes", "impact": "total", "at": "2026-10-21T10:54:01.826Z" }, "fix": "none", "tags": [ "oracle-corporation" ], "cves": [ "CVE-2026-91235" ], "ghsa": null, "cvss": { "score": 9.8, "version": "3.1", "by": "oracle" }, "epss": { "percentage": 0.0045, "percentile": 0.38131, "asOf": "2026-10-23", "by": "FIRST" }, "packages": [], "vendor": "Oracle Corporation", "product": "Oracle SOA Suite", "kev": null, "breach": null, "retracted": false, "sources": [ { "label": "cve.now", "url": "https://cve.now/CVE-2026-91235" } ], "cveVersion": 1, "cvePending": false, "publishedAt": "2026-10-20T21:24:48.266Z", "updatedAt": "2026-10-20T21:24:48.266Z" }, { "id": "cve-2026-91234", "url": "https://cveboard.org/i/cve-2026-91234", "urlPt": "https://cveboard.org/pt/i/cve-2026-91234", "json": "https://cveboard.org/i/cve-2026-91234.json", "kind": "vuln", "live": true, "knownExploited": false, "severity": "critical", "title": "Oracle Corporation Oracle SOA Suite", "summary": "", "titlePt": null, "summaryPt": null, "affected": [ { "vendor": "Oracle Corporation", "product": "Oracle SOA Suite", "defaultStatus": "unknown", "versions": [ { "version": "12.2.1.4.0", "status": "affected", "lessThan": null, "lessThanOrEqual": null }, { "version": "14.1.2.0.0", "status": "affected", "lessThan": null, "lessThanOrEqual": null } ], "omitted": 0, "fixed": [] } ], "omitted": 0, "references": [ { "url": "https://www.oracle.com/security-alerts/cpuoct2026.html", "tag": "vendor-advisory" } ], "cwes": [ { "id": "CWE-306", "name": "Missing Authentication for Critical Function" }, { "id": "CWE-287", "name": "Improper Authentication" } ], "ssvc": { "exploitation": "none", "automatable": "yes", "impact": "total", "at": "2026-10-21T10:54:08.610Z" }, "fix": "none", "tags": [ "oracle-corporation" ], "cves": [ "CVE-2026-91234" ], "ghsa": null, "cvss": { "score": 9.8, "version": "3.1", "by": "oracle" }, "epss": { "percentage": 0.0045, "percentile": 0.38132, "asOf": "2026-10-23", "by": "FIRST" }, "packages": [], "vendor": "Oracle Corporation", "product": "Oracle SOA Suite", "kev": null, "breach": null, "retracted": false, "sources": [ { "label": "cve.now", "url": "https://cve.now/CVE-2026-91234" } ], "cveVersion": 1, "cvePending": false, "publishedAt": "2026-10-20T21:24:47.930Z", "updatedAt": "2026-10-20T21:24:47.930Z" }, { "id": "cve-2026-91233", "url": "https://cveboard.org/i/cve-2026-91233", "urlPt": "https://cveboard.org/pt/i/cve-2026-91233", "json": "https://cveboard.org/i/cve-2026-91233.json", "kind": "vuln", "live": true, "knownExploited": false, "severity": "critical", "title": "Oracle Corporation Oracle SOA Suite", "summary": "", "titlePt": null, "summaryPt": null, "affected": [ { "vendor": "Oracle Corporation", "product": "Oracle SOA Suite", "defaultStatus": "unknown", "versions": [ { "version": "12.2.1.4.0", "status": "affected", "lessThan": null, "lessThanOrEqual": null }, { "version": "14.1.2.0.0", "status": "affected", "lessThan": null, "lessThanOrEqual": null } ], "omitted": 0, "fixed": [] } ], "omitted": 0, "references": [ { "url": "https://www.oracle.com/security-alerts/cpuoct2026.html", "tag": "vendor-advisory" } ], "cwes": [ { "id": "CWE-306", "name": "Missing Authentication for Critical Function" }, { "id": "CWE-287", "name": "Improper Authentication" } ], "ssvc": { "exploitation": "none", "automatable": "yes", "impact": "total", "at": "2026-10-21T10:54:14.761Z" }, "fix": "none", "tags": [ "oracle-corporation" ], "cves": [ "CVE-2026-91233" ], "ghsa": null, "cvss": { "score": 9.8, "version": "3.1", "by": "oracle" }, "epss": { "percentage": 0.0045, "percentile": 0.38131, "asOf": "2026-10-23", "by": "FIRST" }, "packages": [], "vendor": "Oracle Corporation", "product": "Oracle SOA Suite", "kev": null, "breach": null, "retracted": false, "sources": [ { "label": "cve.now", "url": "https://cve.now/CVE-2026-91233" } ], "cveVersion": 1, "cvePending": false, "publishedAt": "2026-10-20T21:24:47.587Z", "updatedAt": "2026-10-20T21:24:47.587Z" }, { "id": "cve-2026-91232", "url": "https://cveboard.org/i/cve-2026-91232", "urlPt": "https://cveboard.org/pt/i/cve-2026-91232", "json": "https://cveboard.org/i/cve-2026-91232.json", "kind": "vuln", "live": true, "knownExploited": false, "severity": "critical", "title": "Oracle Corporation Oracle SOA Suite", "summary": "", "titlePt": null, "summaryPt": null, "affected": [ { "vendor": "Oracle Corporation", "product": "Oracle SOA Suite", "defaultStatus": "unknown", "versions": [ { "version": "12.2.1.4.0", "status": "affected", "lessThan": null, "lessThanOrEqual": null }, { "version": "14.1.2.0.0", "status": "affected", "lessThan": null, "lessThanOrEqual": null } ], "omitted": 0, "fixed": [] } ], "omitted": 0, "references": [ { "url": "https://www.oracle.com/security-alerts/cpuoct2026.html", "tag": "vendor-advisory" } ], "cwes": [], "ssvc": null, "fix": "none", "tags": [ "oracle-corporation" ], "cves": [ "CVE-2026-91232" ], "ghsa": null, "cvss": { "score": 9.9, "version": "3.1", "by": "oracle" }, "epss": { "percentage": 0.00447, "percentile": 0.3786, "asOf": "2026-10-23", "by": "FIRST" }, "packages": [], "vendor": "Oracle Corporation", "product": "Oracle SOA Suite", "kev": null, "breach": null, "retracted": false, "sources": [ { "label": "cve.now", "url": "https://cve.now/CVE-2026-91232" } ], "cveVersion": 1, "cvePending": false, "publishedAt": "2026-10-20T21:24:47.236Z", "updatedAt": "2026-10-20T21:24:47.236Z" }, { "id": "cve-2026-91231", "url": "https://cveboard.org/i/cve-2026-91231", "urlPt": "https://cveboard.org/pt/i/cve-2026-91231", "json": "https://cveboard.org/i/cve-2026-91231.json", "kind": "vuln", "live": true, "knownExploited": false, "severity": "critical", "title": "Oracle Corporation Oracle SOA Suite", "summary": "", "titlePt": null, "summaryPt": null, "affected": [ { "vendor": "Oracle Corporation", "product": "Oracle SOA Suite", "defaultStatus": "unknown", "versions": [ { "version": "12.2.1.4.0", "status": "affected", "lessThan": null, "lessThanOrEqual": null }, { "version": "14.1.2.0.0", "status": "affected", "lessThan": null, "lessThanOrEqual": null } ], "omitted": 0, "fixed": [] } ], "omitted": 0, "references": [ { "url": "https://www.oracle.com/security-alerts/cpuoct2026.html", "tag": "vendor-advisory" } ], "cwes": [], "ssvc": null, "fix": "none", "tags": [ "oracle-corporation" ], "cves": [ "CVE-2026-91231" ], "ghsa": null, "cvss": { "score": 10, "version": "3.1", "by": "oracle" }, "epss": { "percentage": 0.00522, "percentile": 0.43472, "asOf": "2026-10-23", "by": "FIRST" }, "packages": [], "vendor": "Oracle Corporation", "product": "Oracle SOA Suite", "kev": null, "breach": null, "retracted": false, "sources": [ { "label": "cve.now", "url": "https://cve.now/CVE-2026-91231" } ], "cveVersion": 1, "cvePending": false, "publishedAt": "2026-10-20T21:24:46.890Z", "updatedAt": "2026-10-20T21:24:46.890Z" }, { "id": "cve-2026-91230", "url": "https://cveboard.org/i/cve-2026-91230", "urlPt": "https://cveboard.org/pt/i/cve-2026-91230", "json": "https://cveboard.org/i/cve-2026-91230.json", "kind": "vuln", "live": true, "knownExploited": false, "severity": "critical", "title": "Oracle Corporation Oracle SOA Suite", "summary": "", "titlePt": null, "summaryPt": null, "affected": [ { "vendor": "Oracle Corporation", "product": "Oracle SOA Suite", "defaultStatus": "unknown", "versions": [ { "version": "12.2.1.4.0", "status": "affected", "lessThan": null, "lessThanOrEqual": null }, { "version": "14.1.2.0.0", "status": "affected", "lessThan": null, "lessThanOrEqual": null } ], "omitted": 0, "fixed": [] } ], "omitted": 0, "references": [ { "url": "https://www.oracle.com/security-alerts/cpuoct2026.html", "tag": "vendor-advisory" } ], "cwes": [], "ssvc": null, "fix": "none", "tags": [ "oracle-corporation" ], "cves": [ "CVE-2026-91230" ], "ghsa": null, "cvss": { "score": 9.3, "version": "3.1", "by": "oracle" }, "epss": { "percentage": 0.00339, "percentile": 0.26112, "asOf": "2026-10-23", "by": "FIRST" }, "packages": [], "vendor": "Oracle Corporation", "product": "Oracle SOA Suite", "kev": null, "breach": null, "retracted": false, "sources": [ { "label": "cve.now", "url": "https://cve.now/CVE-2026-91230" } ], "cveVersion": 1, "cvePending": false, "publishedAt": "2026-10-20T21:24:46.552Z", "updatedAt": "2026-10-20T21:24:46.552Z" }, { "id": "cve-2026-91225", "url": "https://cveboard.org/i/cve-2026-91225", "urlPt": "https://cveboard.org/pt/i/cve-2026-91225", "json": "https://cveboard.org/i/cve-2026-91225.json", "kind": "vuln", "live": true, "knownExploited": false, "severity": "critical", "title": "Oracle Corporation Oracle SOA Suite", "summary": "", "titlePt": null, "summaryPt": null, "affected": [ { "vendor": "Oracle Corporation", "product": "Oracle SOA Suite", "defaultStatus": "unknown", "versions": [ { "version": "12.2.1.4.0", "status": "affected", "lessThan": null, "lessThanOrEqual": null }, { "version": "14.1.2.0.0", "status": "affected", "lessThan": null, "lessThanOrEqual": null } ], "omitted": 0, "fixed": [] } ], "omitted": 0, "references": [ { "url": "https://www.oracle.com/security-alerts/cpuoct2026.html", "tag": "vendor-advisory" } ], "cwes": [], "ssvc": null, "fix": "none", "tags": [ "oracle-corporation" ], "cves": [ "CVE-2026-91225" ], "ghsa": null, "cvss": { "score": 9.1, "version": "3.1", "by": "oracle" }, "epss": { "percentage": 0.00441, "percentile": 0.37269, "asOf": "2026-10-23", "by": "FIRST" }, "packages": [], "vendor": "Oracle Corporation", "product": "Oracle SOA Suite", "kev": null, "breach": null, "retracted": false, "sources": [ { "label": "cve.now", "url": "https://cve.now/CVE-2026-91225" } ], "cveVersion": 1, "cvePending": false, "publishedAt": "2026-10-20T21:24:44.844Z", "updatedAt": "2026-10-20T21:24:44.844Z" }, { "id": "cve-2026-91224", "url": "https://cveboard.org/i/cve-2026-91224", "urlPt": "https://cveboard.org/pt/i/cve-2026-91224", "json": "https://cveboard.org/i/cve-2026-91224.json", "kind": "vuln", "live": true, "knownExploited": false, "severity": "critical", "title": "Oracle Corporation Oracle SOA Suite", "summary": "", "titlePt": null, "summaryPt": null, "affected": [ { "vendor": "Oracle Corporation", "product": "Oracle SOA Suite", "defaultStatus": "unknown", "versions": [ { "version": "12.2.1.4.0", "status": "affected", "lessThan": null, "lessThanOrEqual": null }, { "version": "14.1.2.0.0", "status": "affected", "lessThan": null, "lessThanOrEqual": null } ], "omitted": 0, "fixed": [] } ], "omitted": 0, "references": [ { "url": "https://www.oracle.com/security-alerts/cpuoct2026.html", "tag": "vendor-advisory" } ], "cwes": [], "ssvc": null, "fix": "none", "tags": [ "oracle-corporation" ], "cves": [ "CVE-2026-91224" ], "ghsa": null, "cvss": { "score": 9.9, "version": "3.1", "by": "oracle" }, "epss": { "percentage": 0.00328, "percentile": 0.24729, "asOf": "2026-10-23", "by": "FIRST" }, "packages": [], "vendor": "Oracle Corporation", "product": "Oracle SOA Suite", "kev": null, "breach": null, "retracted": false, "sources": [ { "label": "cve.now", "url": "https://cve.now/CVE-2026-91224" } ], "cveVersion": 1, "cvePending": false, "publishedAt": "2026-10-20T21:24:44.156Z", "updatedAt": "2026-10-20T21:24:44.156Z" }, { "id": "cve-2026-91222", "url": "https://cveboard.org/i/cve-2026-91222", "urlPt": "https://cveboard.org/pt/i/cve-2026-91222", "json": "https://cveboard.org/i/cve-2026-91222.json", "kind": "vuln", "live": true, "knownExploited": false, "severity": "critical", "title": "Oracle Corporation Oracle Business Process Management Suite", "summary": "", "titlePt": null, "summaryPt": null, "affected": [ { "vendor": "Oracle Corporation", "product": "Oracle Business Process Management Suite", "defaultStatus": "unknown", "versions": [ { "version": "12.2.1.4.0", "status": "affected", "lessThan": null, "lessThanOrEqual": null }, { "version": "14.1.2.0.0", "status": "affected", "lessThan": null, "lessThanOrEqual": null } ], "omitted": 0, "fixed": [] } ], "omitted": 0, "references": [ { "url": "https://www.oracle.com/security-alerts/cpuoct2026.html", "tag": "vendor-advisory" } ], "cwes": [], "ssvc": null, "fix": "none", "tags": [ "oracle-corporation" ], "cves": [ "CVE-2026-91222" ], "ghsa": null, "cvss": { "score": 9.9, "version": "3.1", "by": "oracle" }, "epss": { "percentage": 0.00447, "percentile": 0.37859, "asOf": "2026-10-23", "by": "FIRST" }, "packages": [], "vendor": "Oracle Corporation", "product": "Oracle Business Process Management Suite", "kev": null, "breach": null, "retracted": false, "sources": [ { "label": "cve.now", "url": "https://cve.now/CVE-2026-91222" } ], "cveVersion": 1, "cvePending": false, "publishedAt": "2026-10-20T21:24:43.291Z", "updatedAt": "2026-10-20T21:24:43.291Z" }, { "id": "cve-2026-91221", "url": "https://cveboard.org/i/cve-2026-91221", "urlPt": "https://cveboard.org/pt/i/cve-2026-91221", "json": "https://cveboard.org/i/cve-2026-91221.json", "kind": "vuln", "live": true, "knownExploited": false, "severity": "critical", "title": "Oracle Corporation Oracle SOA Suite", "summary": "", "titlePt": null, "summaryPt": null, "affected": [ { "vendor": "Oracle Corporation", "product": "Oracle SOA Suite", "defaultStatus": "unknown", "versions": [ { "version": "12.2.1.4.0", "status": "affected", "lessThan": null, "lessThanOrEqual": null }, { "version": "14.1.2.0.0", "status": "affected", "lessThan": null, "lessThanOrEqual": null } ], "omitted": 0, "fixed": [] } ], "omitted": 0, "references": [ { "url": "https://www.oracle.com/security-alerts/cpuoct2026.html", "tag": "vendor-advisory" } ], "cwes": [], "ssvc": null, "fix": "none", "tags": [ "oracle-corporation" ], "cves": [ "CVE-2026-91221" ], "ghsa": null, "cvss": { "score": 10, "version": "3.1", "by": "oracle" }, "epss": { "percentage": 0.00522, "percentile": 0.43471, "asOf": "2026-10-23", "by": "FIRST" }, "packages": [], "vendor": "Oracle Corporation", "product": "Oracle SOA Suite", "kev": null, "breach": null, "retracted": false, "sources": [ { "label": "cve.now", "url": "https://cve.now/CVE-2026-91221" } ], "cveVersion": 1, "cvePending": false, "publishedAt": "2026-10-20T21:24:42.928Z", "updatedAt": "2026-10-20T21:24:42.928Z" }, { "id": "cve-2026-91220", "url": "https://cveboard.org/i/cve-2026-91220", "urlPt": "https://cveboard.org/pt/i/cve-2026-91220", "json": "https://cveboard.org/i/cve-2026-91220.json", "kind": "vuln", "live": true, "knownExploited": false, "severity": "critical", "title": "Oracle Corporation Oracle Business Process Management Suite", "summary": "", "titlePt": null, "summaryPt": null, "affected": [ { "vendor": "Oracle Corporation", "product": "Oracle Business Process Management Suite", "defaultStatus": "unknown", "versions": [ { "version": "12.2.1.4.0", "status": "affected", "lessThan": null, "lessThanOrEqual": null }, { "version": "14.1.2.0.0", "status": "affected", "lessThan": null, "lessThanOrEqual": null } ], "omitted": 0, "fixed": [] } ], "omitted": 0, "references": [ { "url": "https://www.oracle.com/security-alerts/cpuoct2026.html", "tag": "vendor-advisory" } ], "cwes": [ { "id": "CWE-306", "name": "Missing Authentication for Critical Function" }, { "id": "CWE-287", "name": "Improper Authentication" } ], "ssvc": { "exploitation": "none", "automatable": "yes", "impact": "total", "at": "2026-10-21T10:54:20.920Z" }, "fix": "none", "tags": [ "oracle-corporation" ], "cves": [ "CVE-2026-91220" ], "ghsa": null, "cvss": { "score": 9.8, "version": "3.1", "by": "oracle" }, "epss": { "percentage": 0.0045, "percentile": 0.38129, "asOf": "2026-10-23", "by": "FIRST" }, "packages": [], "vendor": "Oracle Corporation", "product": "Oracle Business Process Management Suite", "kev": null, "breach": null, "retracted": false, "sources": [ { "label": "cve.now", "url": "https://cve.now/CVE-2026-91220" } ], "cveVersion": 1, "cvePending": false, "publishedAt": "2026-10-20T21:24:42.589Z", "updatedAt": "2026-10-20T21:24:42.589Z" }, { "id": "cve-2026-91218", "url": "https://cveboard.org/i/cve-2026-91218", "urlPt": "https://cveboard.org/pt/i/cve-2026-91218", "json": "https://cveboard.org/i/cve-2026-91218.json", "kind": "vuln", "live": true, "knownExploited": false, "severity": "critical", "title": "Oracle Corporation Oracle SOA Suite", "summary": "", "titlePt": null, "summaryPt": null, "affected": [ { "vendor": "Oracle Corporation", "product": "Oracle SOA Suite", "defaultStatus": "unknown", "versions": [ { "version": "12.2.1.4.0", "status": "affected", "lessThan": null, "lessThanOrEqual": null }, { "version": "14.1.2.0.0", "status": "affected", "lessThan": null, "lessThanOrEqual": null } ], "omitted": 0, "fixed": [] } ], "omitted": 0, "references": [ { "url": "https://www.oracle.com/security-alerts/cpuoct2026.html", "tag": "vendor-advisory" } ], "cwes": [], "ssvc": null, "fix": "none", "tags": [ "oracle-corporation" ], "cves": [ "CVE-2026-91218" ], "ghsa": null, "cvss": { "score": 9.6, "version": "3.1", "by": "oracle" }, "epss": { "percentage": 0.00365, "percentile": 0.29206, "asOf": "2026-10-23", "by": "FIRST" }, "packages": [], "vendor": "Oracle Corporation", "product": "Oracle SOA Suite", "kev": null, "breach": null, "retracted": false, "sources": [ { "label": "cve.now", "url": "https://cve.now/CVE-2026-91218" } ], "cveVersion": 1, "cvePending": false, "publishedAt": "2026-10-20T21:24:41.914Z", "updatedAt": "2026-10-20T21:24:41.914Z" }, { "id": "cve-2026-91216", "url": "https://cveboard.org/i/cve-2026-91216", "urlPt": "https://cveboard.org/pt/i/cve-2026-91216", "json": "https://cveboard.org/i/cve-2026-91216.json", "kind": "vuln", "live": true, "knownExploited": false, "severity": "critical", "title": "Oracle Corporation Oracle SOA Suite", "summary": "", "titlePt": null, "summaryPt": null, "affected": [ { "vendor": "Oracle Corporation", "product": "Oracle SOA Suite", "defaultStatus": "unknown", "versions": [ { "version": "12.2.1.4.0", "status": "affected", "lessThan": null, "lessThanOrEqual": null }, { "version": "14.1.2.0.0", "status": "affected", "lessThan": null, "lessThanOrEqual": null } ], "omitted": 0, "fixed": [] } ], "omitted": 0, "references": [ { "url": "https://www.oracle.com/security-alerts/cpuoct2026.html", "tag": "vendor-advisory" } ], "cwes": [], "ssvc": null, "fix": "none", "tags": [ "oracle-corporation" ], "cves": [ "CVE-2026-91216" ], "ghsa": null, "cvss": { "score": 10, "version": "3.1", "by": "oracle" }, "epss": { "percentage": 0.00522, "percentile": 0.43471, "asOf": "2026-10-23", "by": "FIRST" }, "packages": [], "vendor": "Oracle Corporation", "product": "Oracle SOA Suite", "kev": null, "breach": null, "retracted": false, "sources": [ { "label": "cve.now", "url": "https://cve.now/CVE-2026-91216" } ], "cveVersion": 1, "cvePending": false, "publishedAt": "2026-10-20T21:24:41.210Z", "updatedAt": "2026-10-20T21:24:41.210Z" }, { "id": "cve-2026-91214", "url": "https://cveboard.org/i/cve-2026-91214", "urlPt": "https://cveboard.org/pt/i/cve-2026-91214", "json": "https://cveboard.org/i/cve-2026-91214.json", "kind": "vuln", "live": true, "knownExploited": false, "severity": "critical", "title": "Oracle Corporation Oracle SOA Suite", "summary": "", "titlePt": null, "summaryPt": null, "affected": [ { "vendor": "Oracle Corporation", "product": "Oracle SOA Suite", "defaultStatus": "unknown", "versions": [ { "version": "12.2.1.4.0", "status": "affected", "lessThan": null, "lessThanOrEqual": null }, { "version": "14.1.2.0.0", "status": "affected", "lessThan": null, "lessThanOrEqual": null } ], "omitted": 0, "fixed": [] } ], "omitted": 0, "references": [ { "url": "https://www.oracle.com/security-alerts/cpuoct2026.html", "tag": "vendor-advisory" } ], "cwes": [ { "id": "CWE-306", "name": "Missing Authentication for Critical Function" }, { "id": "CWE-287", "name": "Improper Authentication" } ], "ssvc": { "exploitation": "none", "automatable": "yes", "impact": "total", "at": "2026-10-21T10:54:27.057Z" }, "fix": "none", "tags": [ "oracle-corporation" ], "cves": [ "CVE-2026-91214" ], "ghsa": null, "cvss": { "score": 9.8, "version": "3.1", "by": "oracle" }, "epss": { "percentage": 0.0045, "percentile": 0.38131, "asOf": "2026-10-23", "by": "FIRST" }, "packages": [], "vendor": "Oracle Corporation", "product": "Oracle SOA Suite", "kev": null, "breach": null, "retracted": false, "sources": [ { "label": "cve.now", "url": "https://cve.now/CVE-2026-91214" } ], "cveVersion": 1, "cvePending": false, "publishedAt": "2026-10-20T21:24:40.530Z", "updatedAt": "2026-10-20T21:24:40.530Z" }, { "id": "cve-2026-87347", "url": "https://cveboard.org/i/cve-2026-87347", "urlPt": "https://cveboard.org/pt/i/cve-2026-87347", "json": "https://cveboard.org/i/cve-2026-87347.json", "kind": "vuln", "live": true, "knownExploited": false, "severity": "critical", "title": "Oracle Corporation Oracle HTTP Server", "summary": "", "titlePt": null, "summaryPt": null, "affected": [ { "vendor": "Oracle Corporation", "product": "Oracle HTTP Server", "defaultStatus": "unknown", "versions": [ { "version": "12.2.1.4.0", "status": "affected", "lessThan": null, "lessThanOrEqual": null }, { "version": "14.1.2.0.0", "status": "affected", "lessThan": null, "lessThanOrEqual": null } ], "omitted": 0, "fixed": [] } ], "omitted": 0, "references": [ { "url": "https://www.oracle.com/security-alerts/cpuoct2026.html", "tag": "vendor-advisory" } ], "cwes": [], "ssvc": null, "fix": "none", "tags": [ "oracle-corporation" ], "cves": [ "CVE-2026-87347" ], "ghsa": null, "cvss": { "score": 9.6, "version": "3.1", "by": "oracle" }, "epss": { "percentage": 0.00366, "percentile": 0.29248, "asOf": "2026-10-23", "by": "FIRST" }, "packages": [], "vendor": "Oracle Corporation", "product": "Oracle HTTP Server", "kev": null, "breach": null, "retracted": false, "sources": [ { "label": "cve.now", "url": "https://cve.now/CVE-2026-87347" } ], "cveVersion": 1, "cvePending": false, "publishedAt": "2026-10-20T21:24:12.754Z", "updatedAt": "2026-10-20T21:24:12.754Z" }, { "id": "cve-2026-87337", "url": "https://cveboard.org/i/cve-2026-87337", "urlPt": "https://cveboard.org/pt/i/cve-2026-87337", "json": "https://cveboard.org/i/cve-2026-87337.json", "kind": "vuln", "live": true, "knownExploited": false, "severity": "critical", "title": "Oracle Corporation Oracle Access Manager", "summary": "", "titlePt": null, "summaryPt": null, "affected": [ { "vendor": "Oracle Corporation", "product": "Oracle Access Manager", "defaultStatus": "unknown", "versions": [ { "version": "12.2.1.4.0", "status": "affected", "lessThan": null, "lessThanOrEqual": null }, { "version": "14.1.2.1.0", "status": "affected", "lessThan": null, "lessThanOrEqual": null } ], "omitted": 0, "fixed": [] } ], "omitted": 0, "references": [ { "url": "https://www.oracle.com/security-alerts/cpuoct2026.html", "tag": "vendor-advisory" } ], "cwes": [], "ssvc": null, "fix": "none", "tags": [ "oracle-corporation" ], "cves": [ "CVE-2026-87337" ], "ghsa": null, "cvss": { "score": 10, "version": "3.1", "by": "oracle" }, "epss": { "percentage": 0.00427, "percentile": 0.35952, "asOf": "2026-10-23", "by": "FIRST" }, "packages": [], "vendor": "Oracle Corporation", "product": "Oracle Access Manager", "kev": null, "breach": null, "retracted": false, "sources": [ { "label": "cve.now", "url": "https://cve.now/CVE-2026-87337" } ], "cveVersion": 1, "cvePending": false, "publishedAt": "2026-10-20T21:24:09.487Z", "updatedAt": "2026-10-20T21:24:09.487Z" }, { "id": "cve-2026-87302", "url": "https://cveboard.org/i/cve-2026-87302", "urlPt": "https://cveboard.org/pt/i/cve-2026-87302", "json": "https://cveboard.org/i/cve-2026-87302.json", "kind": "vuln", "live": true, "knownExploited": false, "severity": "critical", "title": "Oracle Corporation Oracle WebLogic Server", "summary": "", "titlePt": null, "summaryPt": null, "affected": [ { "vendor": "Oracle Corporation", "product": "Oracle WebLogic Server", "defaultStatus": "unknown", "versions": [ { "version": "12.2.1.4.0", "status": "affected", "lessThan": null, "lessThanOrEqual": null }, { "version": "14.1.1.0.0", "status": "affected", "lessThan": null, "lessThanOrEqual": null }, { "version": "14.1.2.0.0", "status": "affected", "lessThan": null, "lessThanOrEqual": null }, { "version": "15.1.1.0.0", "status": "affected", "lessThan": null, "lessThanOrEqual": null } ], "omitted": 0, "fixed": [] } ], "omitted": 0, "references": [ { "url": "https://www.oracle.com/security-alerts/cpuoct2026.html", "tag": "vendor-advisory" } ], "cwes": [ { "id": "CWE-306", "name": "Missing Authentication for Critical Function" }, { "id": "CWE-287", "name": "Improper Authentication" } ], "ssvc": { "exploitation": "none", "automatable": "yes", "impact": "total", "at": "2026-10-21T10:56:07.990Z" }, "fix": "none", "tags": [ "oracle-corporation" ], "cves": [ "CVE-2026-87302" ], "ghsa": null, "cvss": { "score": 9.1, "version": "3.1", "by": "oracle" }, "epss": { "percentage": 0.00405, "percentile": 0.33621, "asOf": "2026-10-23", "by": "FIRST" }, "packages": [], "vendor": "Oracle Corporation", "product": "Oracle WebLogic Server", "kev": null, "breach": null, "retracted": false, "sources": [ { "label": "cve.now", "url": "https://cve.now/CVE-2026-87302" } ], "cveVersion": 1, "cvePending": false, "publishedAt": "2026-10-20T21:23:55.953Z", "updatedAt": "2026-10-20T21:23:55.953Z" }, { "id": "cve-2026-87251", "url": "https://cveboard.org/i/cve-2026-87251", "urlPt": "https://cveboard.org/pt/i/cve-2026-87251", "json": "https://cveboard.org/i/cve-2026-87251.json", "kind": "vuln", "live": true, "knownExploited": false, "severity": "critical", "title": "Oracle Corporation Oracle Access Manager", "summary": "", "titlePt": null, "summaryPt": null, "affected": [ { "vendor": "Oracle Corporation", "product": "Oracle Access Manager", "defaultStatus": "unknown", "versions": [ { "version": "12.2.1.4.0", "status": "affected", "lessThan": null, "lessThanOrEqual": null }, { "version": "14.1.2.1.0", "status": "affected", "lessThan": null, "lessThanOrEqual": null } ], "omitted": 0, "fixed": [] } ], "omitted": 0, "references": [ { "url": "https://www.oracle.com/security-alerts/cpuoct2026.html", "tag": "vendor-advisory" } ], "cwes": [ { "id": "CWE-306", "name": "Missing Authentication for Critical Function" }, { "id": "CWE-287", "name": "Improper Authentication" } ], "ssvc": { "exploitation": "none", "automatable": "yes", "impact": "total", "at": "2026-10-21T10:54:33.356Z" }, "fix": "none", "tags": [ "oracle-corporation" ], "cves": [ "CVE-2026-87251" ], "ghsa": null, "cvss": { "score": 9.8, "version": "3.1", "by": "oracle" }, "epss": { "percentage": 0.0045, "percentile": 0.38175, "asOf": "2026-10-23", "by": "FIRST" }, "packages": [], "vendor": "Oracle Corporation", "product": "Oracle Access Manager", "kev": null, "breach": null, "retracted": false, "sources": [ { "label": "cve.now", "url": "https://cve.now/CVE-2026-87251" } ], "cveVersion": 1, "cvePending": false, "publishedAt": "2026-10-20T21:23:50.337Z", "updatedAt": "2026-10-20T21:23:50.337Z" }, { "id": "cve-2026-83399", "url": "https://cveboard.org/i/cve-2026-83399", "urlPt": "https://cveboard.org/pt/i/cve-2026-83399", "json": "https://cveboard.org/i/cve-2026-83399.json", "kind": "vuln", "live": true, "knownExploited": false, "severity": "critical", "title": "Oracle Corporation Oracle WebLogic Server", "summary": "", "titlePt": null, "summaryPt": null, "affected": [ { "vendor": "Oracle Corporation", "product": "Oracle WebLogic Server", "defaultStatus": "unknown", "versions": [ { "version": "12.2.1.4.0", "status": "affected", "lessThan": null, "lessThanOrEqual": null }, { "version": "14.1.1.0.0", "status": "affected", "lessThan": null, "lessThanOrEqual": null }, { "version": "14.1.2.0.0", "status": "affected", "lessThan": null, "lessThanOrEqual": null }, { "version": "15.1.1.0.0", "status": "affected", "lessThan": null, "lessThanOrEqual": null } ], "omitted": 0, "fixed": [] } ], "omitted": 0, "references": [ { "url": "https://www.oracle.com/security-alerts/cpuoct2026.html", "tag": "vendor-advisory" } ], "cwes": [ { "id": "CWE-306", "name": "Missing Authentication for Critical Function" }, { "id": "CWE-287", "name": "Improper Authentication" } ], "ssvc": { "exploitation": "none", "automatable": "yes", "impact": "total", "at": "2026-10-21T10:54:39.679Z" }, "fix": "none", "tags": [ "oracle-corporation" ], "cves": [ "CVE-2026-83399" ], "ghsa": null, "cvss": { "score": 9.8, "version": "3.1", "by": "oracle" }, "epss": { "percentage": 0.00483, "percentile": 0.40722, "asOf": "2026-10-23", "by": "FIRST" }, "packages": [], "vendor": "Oracle Corporation", "product": "Oracle WebLogic Server", "kev": null, "breach": null, "retracted": false, "sources": [ { "label": "cve.now", "url": "https://cve.now/CVE-2026-83399" } ], "cveVersion": 1, "cvePending": false, "publishedAt": "2026-10-20T21:23:46.187Z", "updatedAt": "2026-10-20T21:23:46.187Z" }, { "id": "cve-2026-83397", "url": "https://cveboard.org/i/cve-2026-83397", "urlPt": "https://cveboard.org/pt/i/cve-2026-83397", "json": "https://cveboard.org/i/cve-2026-83397.json", "kind": "vuln", "live": true, "knownExploited": false, "severity": "critical", "title": "Oracle Corporation Oracle Data Integrator", "summary": "", "titlePt": null, "summaryPt": null, "affected": [ { "vendor": "Oracle Corporation", "product": "Oracle Data Integrator", "defaultStatus": "unknown", "versions": [ { "version": "12.2.1.4.0", "status": "affected", "lessThan": null, "lessThanOrEqual": null }, { "version": "14.1.2.0.0", "status": "affected", "lessThan": null, "lessThanOrEqual": null } ], "omitted": 0, "fixed": [] } ], "omitted": 0, "references": [ { "url": "https://www.oracle.com/security-alerts/cpuoct2026.html", "tag": "vendor-advisory" } ], "cwes": [ { "id": "CWE-306", "name": "Missing Authentication for Critical Function" }, { "id": "CWE-287", "name": "Improper Authentication" } ], "ssvc": { "exploitation": "none", "automatable": "yes", "impact": "total", "at": "2026-10-21T10:54:45.996Z" }, "fix": "none", "tags": [ "oracle-corporation" ], "cves": [ "CVE-2026-83397" ], "ghsa": null, "cvss": { "score": 9.8, "version": "3.1", "by": "oracle" }, "epss": { "percentage": 0.0045, "percentile": 0.38129, "asOf": "2026-10-23", "by": "FIRST" }, "packages": [], "vendor": "Oracle Corporation", "product": "Oracle Data Integrator", "kev": null, "breach": null, "retracted": false, "sources": [ { "label": "cve.now", "url": "https://cve.now/CVE-2026-83397" } ], "cveVersion": 1, "cvePending": false, "publishedAt": "2026-10-20T21:23:45.465Z", "updatedAt": "2026-10-20T21:23:45.465Z" }, { "id": "cve-2026-83396", "url": "https://cveboard.org/i/cve-2026-83396", "urlPt": "https://cveboard.org/pt/i/cve-2026-83396", "json": "https://cveboard.org/i/cve-2026-83396.json", "kind": "vuln", "live": true, "knownExploited": false, "severity": "critical", "title": "Oracle Corporation Oracle Data Integrator", "summary": "", "titlePt": null, "summaryPt": null, "affected": [ { "vendor": "Oracle Corporation", "product": "Oracle Data Integrator", "defaultStatus": "unknown", "versions": [ { "version": "12.2.1.4.0", "status": "affected", "lessThan": null, "lessThanOrEqual": null }, { "version": "14.1.2.0.0", "status": "affected", "lessThan": null, "lessThanOrEqual": null } ], "omitted": 0, "fixed": [] } ], "omitted": 0, "references": [ { "url": "https://www.oracle.com/security-alerts/cpuoct2026.html", "tag": "vendor-advisory" } ], "cwes": [ { "id": "CWE-306", "name": "Missing Authentication for Critical Function" }, { "id": "CWE-287", "name": "Improper Authentication" } ], "ssvc": { "exploitation": "none", "automatable": "yes", "impact": "total", "at": "2026-10-21T10:54:52.244Z" }, "fix": "none", "tags": [ "oracle-corporation" ], "cves": [ "CVE-2026-83396" ], "ghsa": null, "cvss": { "score": 9.8, "version": "3.1", "by": "oracle" }, "epss": { "percentage": 0.0045, "percentile": 0.38132, "asOf": "2026-10-23", "by": "FIRST" }, "packages": [], "vendor": "Oracle Corporation", "product": "Oracle Data Integrator", "kev": null, "breach": null, "retracted": false, "sources": [ { "label": "cve.now", "url": "https://cve.now/CVE-2026-83396" } ], "cveVersion": 1, "cvePending": false, "publishedAt": "2026-10-20T21:23:45.085Z", "updatedAt": "2026-10-20T21:23:45.085Z" }, { "id": "cve-2026-60432", "url": "https://cveboard.org/i/cve-2026-60432", "urlPt": "https://cveboard.org/pt/i/cve-2026-60432", "json": "https://cveboard.org/i/cve-2026-60432.json", "kind": "vuln", "live": true, "knownExploited": false, "severity": "critical", "title": "Oracle Corporation Oracle Solaris", "summary": "", "titlePt": null, "summaryPt": null, "affected": [ { "vendor": "Oracle Corporation", "product": "Oracle Solaris", "defaultStatus": "unknown", "versions": [ { "version": "11.3", "status": "affected", "lessThan": null, "lessThanOrEqual": null }, { "version": "11.4", "status": "affected", "lessThan": null, "lessThanOrEqual": null } ], "omitted": 0, "fixed": [] } ], "omitted": 0, "references": [ { "url": "https://www.oracle.com/security-alerts/cpuoct2026.html", "tag": "vendor-advisory" } ], "cwes": [ { "id": "CWE-306", "name": "Missing Authentication for Critical Function" }, { "id": "CWE-287", "name": "Improper Authentication" } ], "ssvc": { "exploitation": "none", "automatable": "yes", "impact": "total", "at": "2026-10-21T10:54:58.387Z" }, "fix": "none", "tags": [ "oracle-corporation" ], "cves": [ "CVE-2026-60432" ], "ghsa": null, "cvss": { "score": 9.8, "version": "3.1", "by": "oracle" }, "epss": { "percentage": 0.0045, "percentile": 0.3813, "asOf": "2026-10-23", "by": "FIRST" }, "packages": [], "vendor": "Oracle Corporation", "product": "Oracle Solaris", "kev": null, "breach": null, "retracted": false, "sources": [ { "label": "cve.now", "url": "https://cve.now/CVE-2026-60432" } ], "cveVersion": 1, "cvePending": false, "publishedAt": "2026-10-20T21:23:22.761Z", "updatedAt": "2026-10-20T21:23:22.761Z" }, { "id": "cve-2026-101809", "url": "https://cveboard.org/i/cve-2026-101809", "urlPt": "https://cveboard.org/pt/i/cve-2026-101809", "json": "https://cveboard.org/i/cve-2026-101809.json", "kind": "vuln", "live": true, "knownExploited": false, "severity": "critical", "title": "Oracle Corporation Workflow", "summary": "", "titlePt": null, "summaryPt": null, "affected": [ { "vendor": "Oracle Corporation", "product": "Workflow", "defaultStatus": "unknown", "versions": [ { "version": "12.2.3", "status": "affected", "lessThan": null, "lessThanOrEqual": "12.2.15" } ], "omitted": 0, "fixed": [] } ], "omitted": 0, "references": [ { "url": "https://www.oracle.com/security-alerts/cpuoct2026.html", "tag": "vendor-advisory" } ], "cwes": [ { "id": "CWE-284", "name": "Improper Access Control" } ], "ssvc": { "exploitation": "none", "automatable": "yes", "impact": "total", "at": "2026-10-23T00:00:00.000Z" }, "fix": "none", "tags": [ "oracle-corporation" ], "cves": [ "CVE-2026-101809" ], "ghsa": null, "cvss": { "score": 10, "version": "3.1", "by": "oracle" }, "epss": { "percentage": 0.00483, "percentile": 0.40671, "asOf": "2026-10-23", "by": "FIRST" }, "packages": [], "vendor": "Oracle Corporation", "product": "Workflow", "kev": null, "breach": null, "retracted": false, "sources": [ { "label": "cve.now", "url": "https://cve.now/CVE-2026-101809" } ], "cveVersion": 1, "cvePending": false, "publishedAt": "2026-10-20T21:23:04.910Z", "updatedAt": "2026-10-20T21:23:04.910Z" }, { "id": "cve-2026-101808", "url": "https://cveboard.org/i/cve-2026-101808", "urlPt": "https://cveboard.org/pt/i/cve-2026-101808", "json": "https://cveboard.org/i/cve-2026-101808.json", "kind": "vuln", "live": true, "knownExploited": false, "severity": "critical", "title": "Oracle Corporation Oracle Product Workbench", "summary": "", "titlePt": null, "summaryPt": null, "affected": [ { "vendor": "Oracle Corporation", "product": "Oracle Product Workbench", "defaultStatus": "unknown", "versions": [ { "version": "12.2.3", "status": "affected", "lessThan": null, "lessThanOrEqual": "12.2.15" } ], "omitted": 0, "fixed": [] } ], "omitted": 0, "references": [ { "url": "https://www.oracle.com/security-alerts/cpuoct2026.html", "tag": "vendor-advisory" } ], "cwes": [ { "id": "CWE-306", "name": "Missing Authentication for Critical Function" }, { "id": "CWE-287", "name": "Improper Authentication" } ], "ssvc": { "exploitation": "none", "automatable": "yes", "impact": "total", "at": "2026-10-21T10:56:14.083Z" }, "fix": "none", "tags": [ "oracle-corporation" ], "cves": [ "CVE-2026-101808" ], "ghsa": null, "cvss": { "score": 9.1, "version": "3.1", "by": "oracle" }, "epss": { "percentage": 0.00404, "percentile": 0.33576, "asOf": "2026-10-23", "by": "FIRST" }, "packages": [], "vendor": "Oracle Corporation", "product": "Oracle Product Workbench", "kev": null, "breach": null, "retracted": false, "sources": [ { "label": "cve.now", "url": "https://cve.now/CVE-2026-101808" } ], "cveVersion": 1, "cvePending": false, "publishedAt": "2026-10-20T21:23:04.544Z", "updatedAt": "2026-10-20T21:23:04.544Z" }, { "id": "cve-2026-101767", "url": "https://cveboard.org/i/cve-2026-101767", "urlPt": "https://cveboard.org/pt/i/cve-2026-101767", "json": "https://cveboard.org/i/cve-2026-101767.json", "kind": "vuln", "live": true, "knownExploited": false, "severity": "critical", "title": "Oracle Corporation Oracle Application Object Library", "summary": "", "titlePt": null, "summaryPt": null, "affected": [ { "vendor": "Oracle Corporation", "product": "Oracle Application Object Library", "defaultStatus": "unknown", "versions": [ { "version": "12.2.3", "status": "affected", "lessThan": null, "lessThanOrEqual": "12.2.15" } ], "omitted": 0, "fixed": [] } ], "omitted": 0, "references": [ { "url": "https://www.oracle.com/security-alerts/cpuoct2026.html", "tag": "vendor-advisory" } ], "cwes": [ { "id": "CWE-306", "name": "Missing Authentication for Critical Function" }, { "id": "CWE-287", "name": "Improper Authentication" } ], "ssvc": { "exploitation": "none", "automatable": "yes", "impact": "total", "at": "2026-10-21T10:55:05.355Z" }, "fix": "none", "tags": [ "oracle-corporation" ], "cves": [ "CVE-2026-101767" ], "ghsa": null, "cvss": { "score": 9.8, "version": "3.1", "by": "oracle" }, "epss": { "percentage": 0.00493, "percentile": 0.41447, "asOf": "2026-10-23", "by": "FIRST" }, "packages": [], "vendor": "Oracle Corporation", "product": "Oracle Application Object Library", "kev": null, "breach": null, "retracted": false, "sources": [ { "label": "cve.now", "url": "https://cve.now/CVE-2026-101767" } ], "cveVersion": 1, "cvePending": false, "publishedAt": "2026-10-20T21:22:48.577Z", "updatedAt": "2026-10-20T21:22:48.577Z" }, { "id": "cve-2026-101765", "url": "https://cveboard.org/i/cve-2026-101765", "urlPt": "https://cveboard.org/pt/i/cve-2026-101765", "json": "https://cveboard.org/i/cve-2026-101765.json", "kind": "vuln", "live": true, "knownExploited": false, "severity": "critical", "title": "Oracle Corporation Oracle Communications Billing and Revenue Management", "summary": "", "titlePt": null, "summaryPt": null, "affected": [ { "vendor": "Oracle Corporation", "product": "Oracle Communications Billing and Revenue Management", "defaultStatus": "unknown", "versions": [ { "version": "15.0.0.0.0", "status": "affected", "lessThan": null, "lessThanOrEqual": null }, { "version": "15.0.1.0.0", "status": "affected", "lessThan": null, "lessThanOrEqual": null }, { "version": "15.1.0.0.0", "status": "affected", "lessThan": null, "lessThanOrEqual": null }, { "version": "15.2.0.0.0", "status": "affected", "lessThan": null, "lessThanOrEqual": null } ], "omitted": 0, "fixed": [] } ], "omitted": 0, "references": [ { "url": "https://www.oracle.com/security-alerts/cpuoct2026.html", "tag": "vendor-advisory" } ], "cwes": [ { "id": "CWE-306", "name": "Missing Authentication for Critical Function" }, { "id": "CWE-287", "name": "Improper Authentication" } ], "ssvc": { "exploitation": "none", "automatable": "yes", "impact": "total", "at": "2026-10-21T10:56:20.273Z" }, "fix": "none", "tags": [ "oracle-corporation" ], "cves": [ "CVE-2026-101765" ], "ghsa": null, "cvss": { "score": 9.1, "version": "3.1", "by": "oracle" }, "epss": { "percentage": 0.00377, "percentile": 0.30494, "asOf": "2026-10-23", "by": "FIRST" }, "packages": [], "vendor": "Oracle Corporation", "product": "Oracle Communications Billing and Revenue Management", "kev": null, "breach": null, "retracted": false, "sources": [ { "label": "cve.now", "url": "https://cve.now/CVE-2026-101765" } ], "cveVersion": 1, "cvePending": false, "publishedAt": "2026-10-20T21:22:47.845Z", "updatedAt": "2026-10-20T21:22:47.845Z" }, { "id": "cve-2026-101763", "url": "https://cveboard.org/i/cve-2026-101763", "urlPt": "https://cveboard.org/pt/i/cve-2026-101763", "json": "https://cveboard.org/i/cve-2026-101763.json", "kind": "vuln", "live": true, "knownExploited": false, "severity": "critical", "title": "Oracle Corporation Oracle Communications BRM - Elastic Charging Engine", "summary": "", "titlePt": null, "summaryPt": null, "affected": [ { "vendor": "Oracle Corporation", "product": "Oracle Communications BRM - Elastic Charging Engine", "defaultStatus": "unknown", "versions": [ { "version": "15.0.0.0.0", "status": "affected", "lessThan": null, "lessThanOrEqual": null }, { "version": "15.0.1.0.0", "status": "affected", "lessThan": null, "lessThanOrEqual": null }, { "version": "15.1.0.0.0", "status": "affected", "lessThan": null, "lessThanOrEqual": null }, { "version": "15.2.0.0.0", "status": "affected", "lessThan": null, "lessThanOrEqual": null } ], "omitted": 0, "fixed": [] } ], "omitted": 0, "references": [ { "url": "https://www.oracle.com/security-alerts/cpuoct2026.html", "tag": "vendor-advisory" } ], "cwes": [ { "id": "CWE-306", "name": "Missing Authentication for Critical Function" }, { "id": "CWE-287", "name": "Improper Authentication" } ], "ssvc": { "exploitation": "none", "automatable": "yes", "impact": "total", "at": "2026-10-21T10:55:11.582Z" }, "fix": "none", "tags": [ "oracle-corporation" ], "cves": [ "CVE-2026-101763" ], "ghsa": null, "cvss": { "score": 9.8, "version": "3.1", "by": "oracle" }, "epss": { "percentage": 0.0045, "percentile": 0.3813, "asOf": "2026-10-23", "by": "FIRST" }, "packages": [], "vendor": "Oracle Corporation", "product": "Oracle Communications BRM - Elastic Charging Engine", "kev": null, "breach": null, "retracted": false, "sources": [ { "label": "cve.now", "url": "https://cve.now/CVE-2026-101763" } ], "cveVersion": 1, "cvePending": false, "publishedAt": "2026-10-20T21:22:47.110Z", "updatedAt": "2026-10-20T21:22:47.110Z" }, { "id": "cve-2026-101634", "url": "https://cveboard.org/i/cve-2026-101634", "urlPt": "https://cveboard.org/pt/i/cve-2026-101634", "json": "https://cveboard.org/i/cve-2026-101634.json", "kind": "vuln", "live": true, "knownExploited": false, "severity": "critical", "title": "Oracle Corporation Oracle Mobile Field Service", "summary": "", "titlePt": null, "summaryPt": null, "affected": [ { "vendor": "Oracle Corporation", "product": "Oracle Mobile Field Service", "defaultStatus": "unknown", "versions": [ { "version": "12.2.3", "status": "affected", "lessThan": null, "lessThanOrEqual": "12.2.15" } ], "omitted": 0, "fixed": [] } ], "omitted": 0, "references": [ { "url": "https://www.oracle.com/security-alerts/cpuoct2026.html", "tag": "vendor-advisory" } ], "cwes": [ { "id": "CWE-284", "name": "Improper Access Control" } ], "ssvc": { "exploitation": "none", "automatable": "yes", "impact": "partial", "at": "2026-10-21T19:03:05.906Z" }, "fix": "none", "tags": [ "oracle-corporation" ], "cves": [ "CVE-2026-101634" ], "ghsa": null, "cvss": { "score": 9.1, "version": "3.1", "by": "oracle" }, "epss": { "percentage": 0.00504, "percentile": 0.42225, "asOf": "2026-10-23", "by": "FIRST" }, "packages": [], "vendor": "Oracle Corporation", "product": "Oracle Mobile Field Service", "kev": null, "breach": null, "retracted": false, "sources": [ { "label": "cve.now", "url": "https://cve.now/CVE-2026-101634" } ], "cveVersion": 1, "cvePending": false, "publishedAt": "2026-10-20T21:22:01.321Z", "updatedAt": "2026-10-20T21:22:01.321Z" }, { "id": "cve-2026-101590", "url": "https://cveboard.org/i/cve-2026-101590", "urlPt": "https://cveboard.org/pt/i/cve-2026-101590", "json": "https://cveboard.org/i/cve-2026-101590.json", "kind": "vuln", "live": true, "knownExploited": false, "severity": "critical", "title": "Oracle Corporation Helidon", "summary": "", "titlePt": null, "summaryPt": null, "affected": [ { "vendor": "Oracle Corporation", "product": "Helidon", "defaultStatus": "unknown", "versions": [ { "version": "4.0.0", "status": "affected", "lessThan": null, "lessThanOrEqual": "4.5.5" } ], "omitted": 0, "fixed": [] } ], "omitted": 0, "references": [ { "url": "https://www.oracle.com/security-alerts/cpuoct2026.html", "tag": "vendor-advisory" } ], "cwes": [ { "id": "CWE-306", "name": "Missing Authentication for Critical Function" }, { "id": "CWE-287", "name": "Improper Authentication" } ], "ssvc": { "exploitation": "none", "automatable": "yes", "impact": "total", "at": "2026-10-21T00:00:00.000Z" }, "fix": "none", "tags": [ "oracle-corporation" ], "cves": [ "CVE-2026-101590" ], "ghsa": null, "cvss": { "score": 9.1, "version": "3.1", "by": "oracle" }, "epss": { "percentage": 0.00377, "percentile": 0.30493, "asOf": "2026-10-23", "by": "FIRST" }, "packages": [], "vendor": "Oracle Corporation", "product": "Helidon", "kev": null, "breach": null, "retracted": false, "sources": [ { "label": "cve.now", "url": "https://cve.now/CVE-2026-101590" } ], "cveVersion": 1, "cvePending": false, "publishedAt": "2026-10-20T21:21:44.842Z", "updatedAt": "2026-10-20T21:21:44.842Z" }, { "id": "cve-2026-101537", "url": "https://cveboard.org/i/cve-2026-101537", "urlPt": "https://cveboard.org/pt/i/cve-2026-101537", "json": "https://cveboard.org/i/cve-2026-101537.json", "kind": "vuln", "live": true, "knownExploited": false, "severity": "critical", "title": "Oracle Corporation Oracle Solaris", "summary": "", "titlePt": null, "summaryPt": null, "affected": [ { "vendor": "Oracle Corporation", "product": "Oracle Solaris", "defaultStatus": "unknown", "versions": [ { "version": "11.4", "status": "affected", "lessThan": null, "lessThanOrEqual": null } ], "omitted": 0, "fixed": [] } ], "omitted": 0, "references": [ { "url": "https://www.oracle.com/security-alerts/cpuoct2026.html", "tag": "vendor-advisory" } ], "cwes": [ { "id": "CWE-306", "name": "Missing Authentication for Critical Function" }, { "id": "CWE-287", "name": "Improper Authentication" } ], "ssvc": { "exploitation": "none", "automatable": "yes", "impact": "total", "at": "2026-10-21T10:55:17.785Z" }, "fix": "none", "tags": [ "oracle-corporation" ], "cves": [ "CVE-2026-101537" ], "ghsa": null, "cvss": { "score": 9.8, "version": "3.1", "by": "oracle" }, "epss": { "percentage": 0.00331, "percentile": 0.25017, "asOf": "2026-10-23", "by": "FIRST" }, "packages": [], "vendor": "Oracle Corporation", "product": "Oracle Solaris", "kev": null, "breach": null, "retracted": false, "sources": [ { "label": "cve.now", "url": "https://cve.now/CVE-2026-101537" } ], "cveVersion": 1, "cvePending": false, "publishedAt": "2026-10-20T21:21:25.830Z", "updatedAt": "2026-10-20T21:21:25.830Z" }, { "id": "cve-2026-101529", "url": "https://cveboard.org/i/cve-2026-101529", "urlPt": "https://cveboard.org/pt/i/cve-2026-101529", "json": "https://cveboard.org/i/cve-2026-101529.json", "kind": "vuln", "live": true, "knownExploited": false, "severity": "critical", "title": "Oracle Corporation Oracle Enterprise Manager for Oracle Database", "summary": "", "titlePt": null, "summaryPt": null, "affected": [ { "vendor": "Oracle Corporation", "product": "Oracle Enterprise Manager for Oracle Database", "defaultStatus": "unknown", "versions": [ { "version": "13.5", "status": "affected", "lessThan": null, "lessThanOrEqual": null }, { "version": "24.1", "status": "affected", "lessThan": null, "lessThanOrEqual": null } ], "omitted": 0, "fixed": [] } ], "omitted": 0, "references": [ { "url": "https://www.oracle.com/security-alerts/cpuoct2026.html", "tag": "vendor-advisory" } ], "cwes": [], "ssvc": null, "fix": "none", "tags": [ "oracle-corporation" ], "cves": [ "CVE-2026-101529" ], "ghsa": null, "cvss": { "score": 9.9, "version": "3.1", "by": "oracle" }, "epss": { "percentage": 0.00479, "percentile": 0.40423, "asOf": "2026-10-23", "by": "FIRST" }, "packages": [], "vendor": "Oracle Corporation", "product": "Oracle Enterprise Manager for Oracle Database", "kev": null, "breach": null, "retracted": false, "sources": [ { "label": "cve.now", "url": "https://cve.now/CVE-2026-101529" } ], "cveVersion": 1, "cvePending": false, "publishedAt": "2026-10-20T21:21:22.741Z", "updatedAt": "2026-10-20T21:21:22.741Z" }, { "id": "cve-2026-101528", "url": "https://cveboard.org/i/cve-2026-101528", "urlPt": "https://cveboard.org/pt/i/cve-2026-101528", "json": "https://cveboard.org/i/cve-2026-101528.json", "kind": "vuln", "live": true, "knownExploited": false, "severity": "critical", "title": "Oracle Corporation Oracle Enterprise Manager for Oracle Database", "summary": "", "titlePt": null, "summaryPt": null, "affected": [ { "vendor": "Oracle Corporation", "product": "Oracle Enterprise Manager for Oracle Database", "defaultStatus": "unknown", "versions": [ { "version": "13.5", "status": "affected", "lessThan": null, "lessThanOrEqual": null }, { "version": "24.1", "status": "affected", "lessThan": null, "lessThanOrEqual": null } ], "omitted": 0, "fixed": [] } ], "omitted": 0, "references": [ { "url": "https://www.oracle.com/security-alerts/cpuoct2026.html", "tag": "vendor-advisory" } ], "cwes": [], "ssvc": null, "fix": "none", "tags": [ "oracle-corporation" ], "cves": [ "CVE-2026-101528" ], "ghsa": null, "cvss": { "score": 9.9, "version": "3.1", "by": "oracle" }, "epss": { "percentage": 0.00479, "percentile": 0.40423, "asOf": "2026-10-23", "by": "FIRST" }, "packages": [], "vendor": "Oracle Corporation", "product": "Oracle Enterprise Manager for Oracle Database", "kev": null, "breach": null, "retracted": false, "sources": [ { "label": "cve.now", "url": "https://cve.now/CVE-2026-101528" } ], "cveVersion": 1, "cvePending": false, "publishedAt": "2026-10-20T21:21:22.382Z", "updatedAt": "2026-10-20T21:21:22.382Z" }, { "id": "cve-2026-101521", "url": "https://cveboard.org/i/cve-2026-101521", "urlPt": "https://cveboard.org/pt/i/cve-2026-101521", "json": "https://cveboard.org/i/cve-2026-101521.json", "kind": "vuln", "live": true, "knownExploited": false, "severity": "critical", "title": "Oracle Corporation Oracle APEX", "summary": "", "titlePt": null, "summaryPt": null, "affected": [ { "vendor": "Oracle Corporation", "product": "Oracle APEX", "defaultStatus": "unknown", "versions": [ { "version": "24.1.0", "status": "affected", "lessThan": null, "lessThanOrEqual": "24.1.21" }, { "version": "24.2.0", "status": "affected", "lessThan": null, "lessThanOrEqual": "24.2.20" }, { "version": "26.1.0", "status": "affected", "lessThan": null, "lessThanOrEqual": "26.1.4" } ], "omitted": 0, "fixed": [] } ], "omitted": 0, "references": [ { "url": "https://www.oracle.com/security-alerts/cpuoct2026.html", "tag": "vendor-advisory" } ], "cwes": [ { "id": "CWE-306", "name": "Missing Authentication for Critical Function" }, { "id": "CWE-287", "name": "Improper Authentication" } ], "ssvc": { "exploitation": "none", "automatable": "yes", "impact": "total", "at": "2026-10-21T00:00:00.000Z" }, "fix": "none", "tags": [ "oracle-corporation" ], "cves": [ "CVE-2026-101521" ], "ghsa": null, "cvss": { "score": 9.8, "version": "3.1", "by": "oracle" }, "epss": { "percentage": 0.00518, "percentile": 0.43212, "asOf": "2026-10-23", "by": "FIRST" }, "packages": [], "vendor": "Oracle Corporation", "product": "Oracle APEX", "kev": null, "breach": null, "retracted": false, "sources": [ { "label": "cve.now", "url": "https://cve.now/CVE-2026-101521" } ], "cveVersion": 1, "cvePending": false, "publishedAt": "2026-10-20T21:21:20.206Z", "updatedAt": "2026-10-20T21:21:20.206Z" }, { "id": "cve-2026-101503", "url": "https://cveboard.org/i/cve-2026-101503", "urlPt": "https://cveboard.org/pt/i/cve-2026-101503", "json": "https://cveboard.org/i/cve-2026-101503.json", "kind": "vuln", "live": true, "knownExploited": false, "severity": "critical", "title": "Oracle Corporation Oracle Trusted Answer Search", "summary": "", "titlePt": null, "summaryPt": null, "affected": [ { "vendor": "Oracle Corporation", "product": "Oracle Trusted Answer Search", "defaultStatus": "unknown", "versions": [ { "version": "26.1", "status": "affected", "lessThan": null, "lessThanOrEqual": null } ], "omitted": 0, "fixed": [] } ], "omitted": 0, "references": [ { "url": "https://www.oracle.com/security-alerts/cpuoct2026.html", "tag": "vendor-advisory" } ], "cwes": [], "ssvc": null, "fix": "none", "tags": [ "oracle-corporation" ], "cves": [ "CVE-2026-101503" ], "ghsa": null, "cvss": { "score": 9.9, "version": "3.1", "by": "oracle" }, "epss": { "percentage": 0.00479, "percentile": 0.40431, "asOf": "2026-10-23", "by": "FIRST" }, "packages": [], "vendor": "Oracle Corporation", "product": "Oracle Trusted Answer Search", "kev": null, "breach": null, "retracted": false, "sources": [ { "label": "cve.now", "url": "https://cve.now/CVE-2026-101503" } ], "cveVersion": 1, "cvePending": false, "publishedAt": "2026-10-20T21:21:14.136Z", "updatedAt": "2026-10-20T21:21:14.136Z" }, { "id": "cve-2026-101501", "url": "https://cveboard.org/i/cve-2026-101501", "urlPt": "https://cveboard.org/pt/i/cve-2026-101501", "json": "https://cveboard.org/i/cve-2026-101501.json", "kind": "vuln", "live": true, "knownExploited": false, "severity": "critical", "title": "Oracle Corporation Oracle Trusted Answer Search", "summary": "", "titlePt": null, "summaryPt": null, "affected": [ { "vendor": "Oracle Corporation", "product": "Oracle Trusted Answer Search", "defaultStatus": "unknown", "versions": [ { "version": "26.1", "status": "affected", "lessThan": null, "lessThanOrEqual": null } ], "omitted": 0, "fixed": [] } ], "omitted": 0, "references": [ { "url": "https://www.oracle.com/security-alerts/cpuoct2026.html", "tag": "vendor-advisory" } ], "cwes": [], "ssvc": null, "fix": "none", "tags": [ "oracle-corporation" ], "cves": [ "CVE-2026-101501" ], "ghsa": null, "cvss": { "score": 9.9, "version": "3.1", "by": "oracle" }, "epss": { "percentage": 0.00411, "percentile": 0.34191, "asOf": "2026-10-23", "by": "FIRST" }, "packages": [], "vendor": "Oracle Corporation", "product": "Oracle Trusted Answer Search", "kev": null, "breach": null, "retracted": false, "sources": [ { "label": "cve.now", "url": "https://cve.now/CVE-2026-101501" } ], "cveVersion": 1, "cvePending": false, "publishedAt": "2026-10-20T21:21:13.412Z", "updatedAt": "2026-10-20T21:21:13.412Z" }, { "id": "cve-2026-101499", "url": "https://cveboard.org/i/cve-2026-101499", "urlPt": "https://cveboard.org/pt/i/cve-2026-101499", "json": "https://cveboard.org/i/cve-2026-101499.json", "kind": "vuln", "live": true, "knownExploited": false, "severity": "critical", "title": "Oracle Corporation Oracle WebCenter Sites", "summary": "", "titlePt": null, "summaryPt": null, "affected": [ { "vendor": "Oracle Corporation", "product": "Oracle WebCenter Sites", "defaultStatus": "unknown", "versions": [ { "version": "12.2.1.4.0", "status": "affected", "lessThan": null, "lessThanOrEqual": null }, { "version": "14.1.2.0.0", "status": "affected", "lessThan": null, "lessThanOrEqual": null } ], "omitted": 0, "fixed": [] } ], "omitted": 0, "references": [ { "url": "https://www.oracle.com/security-alerts/cpuoct2026.html", "tag": "vendor-advisory" } ], "cwes": [ { "id": "CWE-306", "name": "Missing Authentication for Critical Function" }, { "id": "CWE-287", "name": "Improper Authentication" } ], "ssvc": { "exploitation": "none", "automatable": "yes", "impact": "total", "at": "2026-10-21T10:55:30.250Z" }, "fix": "none", "tags": [ "oracle-corporation" ], "cves": [ "CVE-2026-101499" ], "ghsa": null, "cvss": { "score": 9.8, "version": "3.1", "by": "oracle" }, "epss": { "percentage": 0.00483, "percentile": 0.40723, "asOf": "2026-10-23", "by": "FIRST" }, "packages": [], "vendor": "Oracle Corporation", "product": "Oracle WebCenter Sites", "kev": null, "breach": null, "retracted": false, "sources": [ { "label": "cve.now", "url": "https://cve.now/CVE-2026-101499" } ], "cveVersion": 1, "cvePending": false, "publishedAt": "2026-10-20T21:21:12.682Z", "updatedAt": "2026-10-20T21:21:12.682Z" }, { "id": "cve-2026-101484", "url": "https://cveboard.org/i/cve-2026-101484", "urlPt": "https://cveboard.org/pt/i/cve-2026-101484", "json": "https://cveboard.org/i/cve-2026-101484.json", "kind": "vuln", "live": true, "knownExploited": false, "severity": "critical", "title": "Oracle Corporation Oracle Secure Backup", "summary": "", "titlePt": null, "summaryPt": null, "affected": [ { "vendor": "Oracle Corporation", "product": "Oracle Secure Backup", "defaultStatus": "unknown", "versions": [ { "version": "19.1.0.0.0", "status": "affected", "lessThan": null, "lessThanOrEqual": null }, { "version": "19.1.0.1.0", "status": "affected", "lessThan": null, "lessThanOrEqual": null } ], "omitted": 0, "fixed": [] } ], "omitted": 0, "references": [ { "url": "https://www.oracle.com/security-alerts/cpuoct2026.html", "tag": "vendor-advisory" } ], "cwes": [ { "id": "CWE-306", "name": "Missing Authentication for Critical Function" }, { "id": "CWE-287", "name": "Improper Authentication" } ], "ssvc": { "exploitation": "none", "automatable": "yes", "impact": "total", "at": "2026-10-21T00:00:00.000Z" }, "fix": "none", "tags": [ "oracle-corporation" ], "cves": [ "CVE-2026-101484" ], "ghsa": null, "cvss": { "score": 9.8, "version": "3.1", "by": "oracle" }, "epss": { "percentage": 0.00483, "percentile": 0.40685, "asOf": "2026-10-23", "by": "FIRST" }, "packages": [], "vendor": "Oracle Corporation", "product": "Oracle Secure Backup", "kev": null, "breach": null, "retracted": false, "sources": [ { "label": "cve.now", "url": "https://cve.now/CVE-2026-101484" } ], "cveVersion": 1, "cvePending": false, "publishedAt": "2026-10-20T21:21:07.600Z", "updatedAt": "2026-10-20T21:21:07.600Z" }, { "id": "cve-2026-101446", "url": "https://cveboard.org/i/cve-2026-101446", "urlPt": "https://cveboard.org/pt/i/cve-2026-101446", "json": "https://cveboard.org/i/cve-2026-101446.json", "kind": "vuln", "live": true, "knownExploited": false, "severity": "critical", "title": "Oracle Corporation Siebel CRM Cloud Applications", "summary": "", "titlePt": null, "summaryPt": null, "affected": [ { "vendor": "Oracle Corporation", "product": "Siebel CRM Cloud Applications", "defaultStatus": "unknown", "versions": [ { "version": "17.0", "status": "affected", "lessThan": null, "lessThanOrEqual": "26.9" } ], "omitted": 0, "fixed": [] } ], "omitted": 0, "references": [ { "url": "https://www.oracle.com/security-alerts/cpuoct2026.html", "tag": "vendor-advisory" } ], "cwes": [], "ssvc": null, "fix": "none", "tags": [ "oracle-corporation" ], "cves": [ "CVE-2026-101446" ], "ghsa": null, "cvss": { "score": 9.9, "version": "3.1", "by": "oracle" }, "epss": { "percentage": 0.00447, "percentile": 0.37855, "asOf": "2026-10-23", "by": "FIRST" }, "packages": [], "vendor": "Oracle Corporation", "product": "Siebel CRM Cloud Applications", "kev": null, "breach": null, "retracted": false, "sources": [ { "label": "cve.now", "url": "https://cve.now/CVE-2026-101446" } ], "cveVersion": 1, "cvePending": false, "publishedAt": "2026-10-20T21:20:53.472Z", "updatedAt": "2026-10-20T21:20:53.472Z" }, { "id": "cve-2026-101420", "url": "https://cveboard.org/i/cve-2026-101420", "urlPt": "https://cveboard.org/pt/i/cve-2026-101420", "json": "https://cveboard.org/i/cve-2026-101420.json", "kind": "vuln", "live": true, "knownExploited": false, "severity": "critical", "title": "Oracle Corporation PeopleSoft Enterprise PeopleTools", "summary": "", "titlePt": null, "summaryPt": null, "affected": [ { "vendor": "Oracle Corporation", "product": "PeopleSoft Enterprise PeopleTools", "defaultStatus": "unknown", "versions": [ { "version": "8.61", "status": "affected", "lessThan": null, "lessThanOrEqual": "8.63" } ], "omitted": 0, "fixed": [] } ], "omitted": 0, "references": [ { "url": "https://www.oracle.com/security-alerts/cpuoct2026.html", "tag": "vendor-advisory" } ], "cwes": [ { "id": "CWE-284", "name": "Improper Access Control" } ], "ssvc": { "exploitation": "none", "automatable": "no", "impact": "total", "at": "2026-10-22T00:00:00.000Z" }, "fix": "none", "tags": [ "oracle-corporation" ], "cves": [ "CVE-2026-101420" ], "ghsa": null, "cvss": { "score": 9.6, "version": "3.1", "by": "oracle" }, "epss": { "percentage": 0.00326, "percentile": 0.24472, "asOf": "2026-10-23", "by": "FIRST" }, "packages": [], "vendor": "Oracle Corporation", "product": "PeopleSoft Enterprise PeopleTools", "kev": null, "breach": null, "retracted": false, "sources": [ { "label": "cve.now", "url": "https://cve.now/CVE-2026-101420" } ], "cveVersion": 1, "cvePending": false, "publishedAt": "2026-10-20T21:20:44.411Z", "updatedAt": "2026-10-20T21:20:44.411Z" } ], "tag": { "tag": "oracle-corporation", "name": "Oracle Corporation", "kev": null } }