CVE-2026-91345 is a vulnerability in Oracle Outside In Technology version 8.5.8 that allows an unauthenticated attacker with network access via HTTP to cause a denial of service by triggering a hang or repeated crash. The vulnerability has a CVSS 3.1 base score of 7.5, indicating high severity with impact on availability only. No confidentiality or integrity impacts are reported. Oracle has published a Critical Patch Update advisory that includes security patches for multiple products, including Oracle Outside In Technology, recommending timely patch application.
CVE-2026-91344 is a vulnerability in Oracle Outside In Technology version 8.5.8 that allows an unauthenticated attacker with network access via HTTP to cause a denial of service by hanging or crashing the product. The vulnerability has a CVSS 3.1 base score of 7.5, indicating high severity due to its impact on availability. Oracle has acknowledged this issue in its October 2026 Critical Patch Update advisory.
A vulnerability in Oracle JD Edwards EnterpriseOne Tools (component Deployment SEC) versions 9.2.0.0 through 9.2.26.5 allows an unauthenticated attacker with logon access to the infrastructure to potentially take over the JD Edwards EnterpriseOne Tools. Exploitation requires user interaction from a person other than the attacker. The vulnerability has a CVSS 3.1 base score of 7.8, indicating high severity with impacts on confidentiality, integrity, and availability.
CVE-2026-91315 is a vulnerability in Oracle JD Edwards EnterpriseOne Tools (Installation Security component) affecting versions 9.2.0.0 through 9.2.26.5. It allows an unauthenticated attacker with logon access to the infrastructure to potentially take over the JD Edwards EnterpriseOne Tools. Exploitation requires user interaction from someone other than the attacker. The vulnerability has a CVSS 3.1 base score of 7.8, indicating high severity with impacts on confidentiality, integrity, and availability.
CVE-2026-91314 is a vulnerability in Oracle JD Edwards EnterpriseOne Tools (Installation Security component) affecting versions 9.2.0.0 through 9.2.26.5. It allows an unauthenticated attacker with logon access to the infrastructure where the tools execute to compromise the system. Exploitation requires human interaction from a user other than the attacker. Successful exploitation can lead to full takeover of JD Edwards EnterpriseOne Tools. The vulnerability has a CVSS 3.1 base score of 7.8, indicating high severity with impacts on confidentiality, integrity, and availability.
CVE-2026-91311 is a high-severity vulnerability in Oracle JD Edwards EnterpriseOne Tools (Installation Security component) affecting versions 9.2.0.0 through 9.2.26.5. It allows a low privileged attacker with logon access to the infrastructure where the software runs to fully compromise the JD Edwards EnterpriseOne Tools product. The vulnerability impacts confidentiality, integrity, and availability, with a CVSS 3.1 base score of 7.8. Oracle has included this vulnerability in its October 2026 Critical Patch Update advisory, which provides patches for affected versions.
CVE-2026-91308 is a vulnerability in Oracle JD Edwards EnterpriseOne Tools (Installation Security component) affecting versions 9.2.0.0 through 9.2.26.5. It allows an unauthenticated attacker with network access via Oracle Net to gain unauthorized access to critical data or full access to all accessible JD Edwards EnterpriseOne Tools data. The vulnerability has a CVSS 3.1 base score of 7.5, indicating high severity with a high confidentiality impact but no integrity or availability impact. Oracle has released patches for this vulnerability as part of its October 2026 Critical Patch Update.
CVE-2026-91306 is a vulnerability in Oracle JD Edwards EnterpriseOne Tools (Installation Security component) affecting versions 9.2.0.0 through 9.2.26.5. It allows a low privileged attacker with logon access to the infrastructure where the product runs to fully compromise the JD Edwards EnterpriseOne Tools. The vulnerability has a high CVSS score of 7.8, impacting confidentiality, integrity, and availability. Oracle has included this vulnerability in its October 2026 Critical Patch Update, indicating that patches are available.
CVE-2026-91304 is a vulnerability in Oracle JD Edwards EnterpriseOne Tools (Installation Security component) affecting versions 9.2.0.0 through 9.2.26.5. It allows an unauthenticated attacker with logon access to the infrastructure to compromise the product, requiring user interaction from a third party. The vulnerability can lead to full takeover of JD Edwards EnterpriseOne Tools. The CVSS 3.1 base score is 7.8, indicating high severity with impacts on confidentiality, integrity, and availability.
CVE-2026-91288 is a vulnerability in Oracle JD Edwards EnterpriseOne Tools (Interoperability SEC component) affecting versions 9.2.0.0 through 9.2.26.5. It allows an unauthenticated attacker with network access via JDENET to potentially create, delete, or modify critical data or access all data accessible by JD Edwards EnterpriseOne Tools. The vulnerability is rated high severity with a CVSS 3.1 base score of 7.4, indicating high confidentiality and integrity impact but no availability impact. Oracle has released patches for this vulnerability as part of its October 2026 Critical Patch Update.
CVE-2026-91287 is a high-severity vulnerability in Oracle JD Edwards EnterpriseOne Tools versions 9.2.0.0 through 9.2.26.5. It allows an unauthenticated attacker with physical access to the communication segment attached to the hardware running the software to compromise the system. Successful exploitation can lead to unauthorized creation, deletion, or modification of critical data or full access to all data accessible by JD Edwards EnterpriseOne Tools. The vulnerability has a CVSS 3.1 base score of 8.1, indicating high impact on confidentiality and integrity.
CVE-2026-91278 is a vulnerability in Oracle JD Edwards EnterpriseOne Tools (Monitoring and Diagnostics SEC component) versions 9.2.0.0 through 9.2.26.5. It allows a low privileged attacker with logon access to the infrastructure where the product runs to compromise the system, potentially gaining unauthorized access to critical or all accessible data. The vulnerability has a CVSS 3.1 base score of 5.5, indicating a medium severity focused on confidentiality impact.
CVE-2026-91271 is a high-severity vulnerability in Oracle JD Edwards EnterpriseOne Tools (component: Monitoring and Diagnostics SEC) affecting versions 9.2.0.0 through 9.2.26.5. It allows a low-privileged attacker with network access via HTTP to gain unauthorized creation, deletion, or modification access to critical data or all accessible data within JD Edwards EnterpriseOne Tools. The vulnerability has a CVSS 3.1 base score of 8.1, indicating high impact on confidentiality and integrity without affecting availability. Oracle has included this vulnerability in its October 2026 Critical Patch Update advisory, indicating that patches addressing this issue are available.
A vulnerability in Oracle JD Edwards EnterpriseOne Tools (Monitoring and Diagnostics SEC component) affects versions 9.2.0.0 through 9.2.26.5. This flaw allows a low privileged attacker with network access via HTTP to compromise the product, potentially resulting in full takeover. The vulnerability has a high CVSS 3.1 score of 8.8, indicating severe impacts on confidentiality, integrity, and availability.
CVE-2026-91267 is a high-severity vulnerability in Oracle JD Edwards EnterpriseOne Tools (Interoperability SEC component) versions 9.2.0.0 through 9.2.26.5. It allows an unauthenticated attacker with network access via SOAP to gain unauthorized access to critical data or potentially all accessible data within JD Edwards EnterpriseOne Tools. The vulnerability has a CVSS 3.1 base score of 8.6, indicating a significant confidentiality impact without requiring privileges or user interaction.
Vulnerability in the Oracle Solaris product of Oracle Systems (component: X Window System). The supported version that is affected is 11.4. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle Solaris. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Solaris accessible data as well as unauthorized read access to a subset of Oracle Solaris accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Solaris. CVSS 3.1 Base Score 4.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L).
Vulnerability in the Oracle Solaris product of Oracle Systems (component: Services). The supported version that is affected is 11.4. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle Solaris. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Solaris accessible data. CVSS 3.1 Base Score 2.5 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N).
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Updates Environment Mgmt). Supported versions that are affected are 8.61-8.63. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where PeopleSoft Enterprise PeopleTools executes to compromise PeopleSoft Enterprise PeopleTools. Successful attacks of this vulnerability can result in unauthorized read access to a subset of PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.1 Base Score 2.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N).
Vulnerability in the Oracle Solaris product of Oracle Systems (component: Image Packaging System). The supported version that is affected is 11.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Solaris. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Solaris accessible data. CVSS 3.1 Base Score 7.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N).
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Report Distribution). Supported versions that are affected are 8.61-8.63. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.1 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N).