Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supported versions that are affected are 22.3-26.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel CRM Cloud Applications. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Siebel CRM Cloud Applications accessible data. CVSS 3.1 Base Score 5.3 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N).
CVE-2026-91360 is a vulnerability in Oracle Siebel CRM Cloud Applications affecting versions 22.3 through 26.9. It allows a low privileged attacker with network access via HTTP to gain unauthorized access to critical data or potentially all accessible data within the Siebel CRM Cloud Applications. The vulnerability has a CVSS 3.1 base score of 6.5, indicating a medium severity with a high confidentiality impact but no impact on integrity or availability. Oracle has released security patches as part of their October 2026 Critical Patch Update.
CVE-2026-91359 is a vulnerability in Oracle Siebel CRM Cloud Applications (Siebel Cloud Manager component) affecting versions 22.3 through 26.9. It allows an unauthenticated attacker with network access via HTTP to gain unauthorized read access to some accessible data within the application. The vulnerability has a CVSS 3.1 base score of 5.3, indicating a medium severity with confidentiality impact only. Oracle has published a Critical Patch Update advisory that includes patches addressing this and other vulnerabilities.
CVE-2026-91358 is a high-severity vulnerability in Oracle Business Process Management Suite versions 12.2.1.4.0 and 14.1.2.0.0. It allows an unauthenticated attacker with network access via HTTP to gain unauthorized access to critical data or full access to all accessible data within the suite. The attacker can also perform unauthorized update, insert, or delete operations on some data. The vulnerability has a CVSS 3.1 base score of 8.2, indicating significant confidentiality and integrity impacts. Oracle has released patches addressing this vulnerability as part of its October 2026 Critical Patch Update, and customers are strongly advised to apply these patches promptly.
CVE-2026-91357 is a vulnerability in Oracle Order Management component of Oracle E-Business Suite versions 12.2.3 through 12.2.15. It allows a low privileged attacker with network access via HTTP to potentially gain unauthorized access to critical or all accessible data within Oracle Order Management. The vulnerability is rated medium severity with a CVSS 3.1 base score of 5.3, primarily impacting confidentiality. Oracle has included this vulnerability in its October 2026 Critical Patch Update advisory.
CVE-2026-91356 is a vulnerability in Oracle PeopleSoft Enterprise HCM Global Payroll Switzerland version 9.2. It allows a high privileged attacker with logon access to the infrastructure to perform unauthorized read, update, insert, or delete operations on accessible data and cause a partial denial of service. The CVSS 3.1 base score is 4.2, indicating a medium severity level.
CVE-2026-91355 is a high-severity vulnerability in Oracle Outside In Technology version 8.5.8. It allows an unauthenticated attacker with logon access to the infrastructure where the technology executes to compromise the product, potentially leading to full takeover. The vulnerability impacts confidentiality, integrity, and availability with a CVSS 3.1 base score of 8.4.
CVE-2026-91354 is a critical vulnerability in Oracle Outside In Technology version 8.5.8. It allows a low privileged attacker with network access via HTTP to compromise the product, potentially leading to full takeover. The vulnerability has a CVSS 3.1 base score of 9.9, indicating severe impacts on confidentiality, integrity, and availability. The vulnerability may also affect additional Oracle products due to scope change. Oracle has released patches for multiple vulnerabilities in their October 2026 Critical Patch Update, which includes fixes for this issue.
CVE-2026-91353 is a high-severity vulnerability in Oracle Outside In Technology version 8.5.8. It allows an unauthenticated attacker with network access via HTTP to compromise the product, potentially leading to unauthorized access to critical or all accessible data. The vulnerability has a CVSS 3.1 base score of 8.6, indicating a significant confidentiality impact with no required privileges or user interaction. The vulnerability may also affect additional Oracle products due to scope change. Oracle has released a Critical Patch Update in October 2026 addressing this and many other vulnerabilities.
Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Clean Content SDK). The supported version that is affected is 8.5.8. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Outside In Technology. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Outside In Technology. CVSS 3.1 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).
CVE-2026-91351 is a vulnerability in Oracle Outside In Technology version 8.5.8 that allows a low privileged attacker with logon access to the infrastructure to compromise the product. Exploitation can lead to unauthorized creation, deletion, or modification of critical or accessible data and can cause a partial denial of service. The vulnerability has a CVSS 3.1 base score of 6.1, indicating medium severity with impacts on integrity and availability.
Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Clean Content SDK). The supported version that is affected is 8.5.8. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Outside In Technology. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Outside In Technology. CVSS 3.1 Base Score 7.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H).
Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Clean Content SDK). The supported version that is affected is 8.5.8. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Outside In Technology. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Outside In Technology. CVSS 3.1 Base Score 7.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H).
CVE-2026-91348 is a high-severity vulnerability in Oracle Solaris Utility component affecting versions 11.3 and 11.4. It allows an unauthenticated attacker with logon access to the infrastructure running Oracle Solaris to compromise the system, potentially resulting in full takeover. The vulnerability has a CVSS 3.1 base score of 8.4, indicating high impact on confidentiality, integrity, and availability. Oracle has released security patches addressing this and many other vulnerabilities in their October 2026 Critical Patch Update advisory.
CVE-2026-91347 is a high-severity vulnerability in the iSupport component of Oracle E-Business Suite versions 12.2.3 through 12.2.15. It allows a low privileged attacker with network access via HTTP to compromise iSupport, potentially impacting additional products. Successful exploitation can lead to unauthorized creation, deletion, or modification of critical or all accessible iSupport data, and can cause a partial denial of service. The vulnerability has a CVSS 3.1 base score of 8.5, reflecting high integrity and limited availability impacts.
CVE-2026-91346 is a high-severity vulnerability in Oracle Outside In Technology version 8.5.8. It allows an unauthenticated attacker with network access via HTTP to compromise the product. Successful exploitation requires human interaction from a person other than the attacker and can lead to unauthorized access to critical data and unauthorized modification of some data. The vulnerability has a CVSS 3.1 base score of 8.2, indicating significant confidentiality and integrity impacts. Oracle has released patches as part of its October 2026 Critical Patch Update.
Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Clean Content SDK). The supported version that is affected is 8.5.8. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Outside In Technology. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Outside In Technology. CVSS 3.1 Base Score 7.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H).
Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Clean Content SDK). The supported version that is affected is 8.5.8. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Outside In Technology. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Outside In Technology. CVSS 3.1 Base Score 7.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H).
CVE-2026-91343 is a high-severity vulnerability in Oracle Outside In Technology version 8.5.8. It allows an unauthenticated attacker with network access via HTTP to compromise the product, potentially impacting additional Oracle products. Successful exploitation can lead to unauthorized creation, deletion, or modification of critical data accessible through Oracle Outside In Technology. The vulnerability has a CVSS 3.1 base score of 8.6, indicating a significant integrity impact without confidentiality or availability loss.
CVE-2026-91342 is a high-severity vulnerability in Oracle Outside In Technology version 8.5.8. It allows an unauthenticated attacker with network access via HTTP to compromise the product, requiring user interaction from a person other than the attacker. Successful exploitation can lead to unauthorized creation, deletion, or modification of critical data, as well as unauthorized read access to some data. The vulnerability impacts confidentiality and integrity with a CVSS 3.1 base score of 8.2. Oracle has released patches addressing this and many other vulnerabilities in its October 2026 Critical Patch Update.