CVE-2026-91356 is a vulnerability in Oracle PeopleSoft Enterprise HCM Global Payroll Switzerland version 9.2. It allows a high privileged attacker with logon access to the infrastructure to perform unauthorized read, update, insert, or delete operations on accessible data and cause a partial denial of service. The CVSS 3.1 base score is 4.2, indicating a medium severity level.
CVE-2026-91355 is a high-severity vulnerability in Oracle Outside In Technology version 8.5.8. It allows an unauthenticated attacker with logon access to the infrastructure where the technology executes to compromise the product, potentially leading to full takeover. The vulnerability impacts confidentiality, integrity, and availability with a CVSS 3.1 base score of 8.4.
CVE-2026-91354 is a critical vulnerability in Oracle Outside In Technology version 8.5.8. It allows a low privileged attacker with network access via HTTP to compromise the product, potentially leading to full takeover. The vulnerability has a CVSS 3.1 base score of 9.9, indicating severe impacts on confidentiality, integrity, and availability. The vulnerability may also affect additional Oracle products due to scope change. Oracle has released patches for multiple vulnerabilities in their October 2026 Critical Patch Update, which includes fixes for this issue.
CVE-2026-91353 is a high-severity vulnerability in Oracle Outside In Technology version 8.5.8. It allows an unauthenticated attacker with network access via HTTP to compromise the product, potentially leading to unauthorized access to critical or all accessible data. The vulnerability has a CVSS 3.1 base score of 8.6, indicating a significant confidentiality impact with no required privileges or user interaction. The vulnerability may also affect additional Oracle products due to scope change. Oracle has released a Critical Patch Update in October 2026 addressing this and many other vulnerabilities.
Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Clean Content SDK). The supported version that is affected is 8.5.8. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Outside In Technology. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Outside In Technology. CVSS 3.1 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).
CVE-2026-91351 is a vulnerability in Oracle Outside In Technology version 8.5.8 that allows a low privileged attacker with logon access to the infrastructure to compromise the product. Exploitation can lead to unauthorized creation, deletion, or modification of critical or accessible data and can cause a partial denial of service. The vulnerability has a CVSS 3.1 base score of 6.1, indicating medium severity with impacts on integrity and availability.
Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Clean Content SDK). The supported version that is affected is 8.5.8. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Outside In Technology. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Outside In Technology. CVSS 3.1 Base Score 7.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H).
Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Clean Content SDK). The supported version that is affected is 8.5.8. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Outside In Technology. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Outside In Technology. CVSS 3.1 Base Score 7.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H).
CVE-2026-91348 is a high-severity vulnerability in Oracle Solaris Utility component affecting versions 11.3 and 11.4. It allows an unauthenticated attacker with logon access to the infrastructure running Oracle Solaris to compromise the system, potentially resulting in full takeover. The vulnerability has a CVSS 3.1 base score of 8.4, indicating high impact on confidentiality, integrity, and availability. Oracle has released security patches addressing this and many other vulnerabilities in their October 2026 Critical Patch Update advisory.
CVE-2026-91347 is a high-severity vulnerability in the iSupport component of Oracle E-Business Suite versions 12.2.3 through 12.2.15. It allows a low privileged attacker with network access via HTTP to compromise iSupport, potentially impacting additional products. Successful exploitation can lead to unauthorized creation, deletion, or modification of critical or all accessible iSupport data, and can cause a partial denial of service. The vulnerability has a CVSS 3.1 base score of 8.5, reflecting high integrity and limited availability impacts.
CVE-2026-91346 is a high-severity vulnerability in Oracle Outside In Technology version 8.5.8. It allows an unauthenticated attacker with network access via HTTP to compromise the product. Successful exploitation requires human interaction from a person other than the attacker and can lead to unauthorized access to critical data and unauthorized modification of some data. The vulnerability has a CVSS 3.1 base score of 8.2, indicating significant confidentiality and integrity impacts. Oracle has released patches as part of its October 2026 Critical Patch Update.
Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Clean Content SDK). The supported version that is affected is 8.5.8. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Outside In Technology. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Outside In Technology. CVSS 3.1 Base Score 7.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H).
Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Clean Content SDK). The supported version that is affected is 8.5.8. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Outside In Technology. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Outside In Technology. CVSS 3.1 Base Score 7.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H).
CVE-2026-91343 is a high-severity vulnerability in Oracle Outside In Technology version 8.5.8. It allows an unauthenticated attacker with network access via HTTP to compromise the product, potentially impacting additional Oracle products. Successful exploitation can lead to unauthorized creation, deletion, or modification of critical data accessible through Oracle Outside In Technology. The vulnerability has a CVSS 3.1 base score of 8.6, indicating a significant integrity impact without confidentiality or availability loss.
CVE-2026-91342 is a high-severity vulnerability in Oracle Outside In Technology version 8.5.8. It allows an unauthenticated attacker with network access via HTTP to compromise the product, requiring user interaction from a person other than the attacker. Successful exploitation can lead to unauthorized creation, deletion, or modification of critical data, as well as unauthorized read access to some data. The vulnerability impacts confidentiality and integrity with a CVSS 3.1 base score of 8.2. Oracle has released patches addressing this and many other vulnerabilities in its October 2026 Critical Patch Update.
CVE-2026-91341 is a critical vulnerability in Oracle Outside In Technology version 8.5.8. It allows an unauthenticated attacker with network access via HTTP to compromise the product, potentially leading to unauthorized creation, deletion, or modification of critical data. The vulnerability also enables denial of service by causing the product to hang or crash repeatedly. The CVSS 3.1 base score is 9.1, indicating high severity with significant integrity and availability impacts. Oracle has released a Critical Patch Update advisory that includes patches for multiple vulnerabilities, including this one.
CVE-2026-91340 is a high-severity vulnerability in Oracle Outside In Technology version 8.5.8. It allows a low privileged attacker with network access via HTTP to compromise the product, potentially leading to full takeover. The vulnerability has a CVSS 3.1 base score of 8.8, indicating high impact on confidentiality, integrity, and availability. Oracle has included this vulnerability in its October 2026 Critical Patch Update advisory, which contains numerous security patches across multiple products.
CVE-2026-91339 is a vulnerability in Oracle E-Business Suite's iSupport component (Service Requests) affecting versions 12.2.3 through 12.2.15. It allows a low privileged attacker with network access via HTTP to gain unauthorized access to critical or all accessible iSupport data. The vulnerability has a CVSS 3.1 base score of 6.5, indicating a medium severity primarily impacting confidentiality. Oracle has released a Critical Patch Update addressing this and many other vulnerabilities, urging customers to apply patches promptly.
CVE-2026-91338 is a vulnerability in Oracle E-Business Suite's iSupport component affecting versions 12.2.3 through 12.2.15. It allows a low privileged attacker with network access via HTTP to perform unauthorized creation, deletion, or modification of critical or accessible data, as well as unauthorized read access to some data. The vulnerability has a CVSS 3.1 base score of 7.1, indicating high severity with confidentiality and integrity impacts. Oracle has released patches for this vulnerability as part of its October 2026 Critical Patch Update.
CVE-2026-91337 is a high-severity vulnerability in Oracle E-Business Suite's iProcurement component affecting versions 12.2.3 through 12.2.15. It allows an unauthenticated attacker with network access via HTTPS to potentially compromise the system. Successful exploitation can lead to unauthorized creation, deletion, or modification of critical data or full access to all data accessible through iProcurement. The vulnerability has a CVSS 3.1 base score of 7.4, indicating significant confidentiality and integrity impacts but no availability impact.