CVE-2026-101562 is a vulnerability in Oracle Agile PLM version 2.6 that allows an unauthenticated attacker with network access via HTTP to gain unauthorized access to critical or all accessible data within the product. The vulnerability is easily exploitable and has a CVSS 3.1 base score of 7.5, indicating a high severity due to confidentiality impact. Oracle has released a Critical Patch Update advisory that includes patches for multiple vulnerabilities, but no explicit patch link for this specific vulnerability was provided in the advisory content.
CVE-2026-101560 is a vulnerability in Oracle Commerce Platform version 11.4.0 that allows a low privileged attacker with network access via HTTP to compromise the platform. Successful exploitation can lead to unauthorized creation, deletion, or modification of critical or all accessible data, as well as unauthorized read access to some data. The vulnerability has a CVSS 3.1 base score of 7.1, indicating high severity.
CVE-2026-101559 is a vulnerability in Oracle Purchasing component of Oracle E-Business Suite versions 12.2.3 through 12.2.15. It allows a low privileged attacker with network access via HTTP to gain unauthorized access to critical or all accessible data within Oracle Purchasing. The vulnerability has a CVSS 3.1 base score of 6.5, indicating a medium severity with high confidentiality impact but no impact on integrity or availability. Oracle has released security patches addressing this and many other vulnerabilities in their October 2026 Critical Patch Update advisory.
CVE-2026-101558 is a vulnerability in Oracle Purchasing component of Oracle E-Business Suite versions 12.2.3 through 12.2.15. It allows an unauthenticated attacker with network access via HTTP to compromise Oracle Purchasing, requiring user interaction from a person other than the attacker. Successful exploitation can lead to unauthorized update, insert, or delete access to some Oracle Purchasing data, as well as unauthorized read access to a subset of this data. The vulnerability has a CVSS 3.1 base score of 6.1, indicating medium severity with confidentiality and integrity impacts. The vulnerability may also impact additional products due to scope change. Oracle has released patches for this and many other vulnerabilities in its October 2026 Critical Patch Update advisory.
Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Purchasing. Successful attacks of this vulnerability can result in takeover of Oracle Purchasing. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).
CVE-2026-101556 is a vulnerability in Oracle Payroll within Oracle E-Business Suite versions 12.2.3 through 12.2.15. It allows a low privileged attacker with network access via HTTP to potentially compromise Oracle Payroll. The vulnerability is rated high severity with a CVSS 3.1 base score of 7.5, impacting confidentiality, integrity, and availability. Successful exploitation could lead to full takeover of Oracle Payroll. Oracle has released patches addressing this and many other vulnerabilities in their October 2026 Critical Patch Update advisory.
CVE-2026-101555 is a vulnerability in Oracle Payroll, part of Oracle E-Business Suite versions 12.2.3 through 12.2.15. It allows a low privileged attacker with network access via HTTP to potentially compromise Oracle Payroll. The vulnerability is difficult to exploit but can lead to full takeover of the Oracle Payroll component. The CVSS 3.1 base score is 7.5, indicating high severity with impacts on confidentiality, integrity, and availability.
CVE-2026-101554 is a vulnerability in Oracle Payroll, part of Oracle E-Business Suite, affecting versions 12.2.3 through 12.2.15. It allows a low privileged attacker with network access via HTTP to potentially compromise Oracle Payroll. The vulnerability is rated high severity with a CVSS 3.1 base score of 7.5, impacting confidentiality, integrity, and availability. Oracle has released security patches addressing this and many other vulnerabilities in its October 2026 Critical Patch Update. Customers are strongly advised to apply these patches promptly to mitigate the risk.
CVE-2026-101553 is a vulnerability in Oracle Payroll within Oracle E-Business Suite versions 12.2.3 through 12.2.15. It allows a low privileged attacker with network access via HTTP to compromise the system, potentially enabling unauthorized creation, deletion, or modification of critical or all accessible Oracle Payroll data. The vulnerability has a CVSS 3.1 base score of 6.5, indicating a medium severity with a significant impact on data integrity but no confidentiality or availability impact. Oracle has released security patches addressing this and many other vulnerabilities in their October 2026 Critical Patch Update advisory.
CVE-2026-101552 is a vulnerability in Oracle Application Object Library versions 12.2.3 through 12.2.15. It allows a low privileged attacker with network access via HTTP to potentially compromise the Oracle Application Object Library. The vulnerability is difficult to exploit but can lead to full takeover of the affected component. The CVSS 3.1 base score is 7.5, indicating a high severity with impacts on confidentiality, integrity, and availability.
CVE-2026-101551 is a vulnerability in Oracle Applications Manager within Oracle E-Business Suite versions 12.2.3 through 12.2.15. It allows an unauthenticated attacker with network access via HTTP to gain unauthorized access to critical data or all data accessible by Oracle Applications Manager. The vulnerability has a CVSS 3.1 base score of 7.5, indicating high severity with a significant confidentiality impact. Oracle has released a Critical Patch Update addressing this and many other vulnerabilities. Users are strongly advised to apply the provided patches promptly to mitigate risk.
CVE-2026-101549 is a vulnerability in Oracle Application Testing Suite version 13.3.0.1 affecting the OpenScript component. It allows a low privileged attacker with access to the infrastructure where the suite runs to compromise the application, potentially resulting in full takeover. The vulnerability has a CVSS 3.1 base score of 7.8, indicating high severity with impacts on confidentiality, integrity, and availability.
CVE-2026-101548 is a vulnerability in Oracle Application Testing Suite version 13.3.0.1, specifically in the OpenScript component. It allows a low privileged attacker with logon access to the infrastructure where the suite runs to potentially compromise the application. Exploitation is difficult but can lead to full takeover of Oracle Application Testing Suite. The vulnerability has a CVSS 3.1 base score of 7.0, indicating high severity with impacts on confidentiality, integrity, and availability.
CVE-2026-101547 is a vulnerability in Oracle Demand Planning versions 12.1 and 12.2 that allows an unauthenticated attacker with network access via HTTP to perform unauthorized update, insert, delete, and read operations on accessible data. Successful exploitation requires human interaction from a user other than the attacker and may impact additional Oracle products beyond Demand Planning. The vulnerability has a CVSS 3.1 base score of 6.1, indicating medium severity with confidentiality and integrity impacts but no availability impact. Oracle has released security patches for this vulnerability as part of its October 2026 Critical Patch Update.
CVE-2026-101546 is a vulnerability in Oracle Materials Requirement Planning, part of Oracle E-Business Suite Internal Operations. It affects versions 12.2.3 through 12.2.15. The flaw is difficult to exploit but allows a low privileged attacker with network access via HTTP to potentially take over the Oracle Materials Requirement Planning component. The CVSS 3.1 base score is 7.5, indicating high severity with impacts on confidentiality, integrity, and availability.
CVE-2026-101545 is a vulnerability in Oracle Inventory Management within Oracle E-Business Suite versions 12.2.3 through 12.2.15. It allows a low privileged attacker with logon access to the infrastructure where Oracle Inventory Management runs to compromise the product. Successful exploitation can lead to full takeover of Oracle Inventory Management. The vulnerability has a CVSS 3.1 base score of 7.0, indicating high severity with impacts on confidentiality, integrity, and availability.
CVE-2026-101544 is a vulnerability in Oracle Payroll within Oracle E-Business Suite versions 12.2.3 through 12.2.15. It allows a low privileged attacker with logon access to the infrastructure where Oracle Payroll runs to compromise the application. The vulnerability is difficult to exploit but can lead to full takeover of Oracle Payroll. The CVSS 3.1 base score is 7.0, indicating high severity with impacts on confidentiality, integrity, and availability.
CVE-2026-101543 is a vulnerability in Oracle Capacity, part of Oracle E-Business Suite's Internal Operations component. It affects versions 12.2.3 through 12.2.15. The flaw is difficult to exploit but allows a low-privileged attacker with network access via HTTP to compromise Oracle Capacity. Successful exploitation can lead to full takeover of the Oracle Capacity product. The vulnerability has a CVSS 3.1 base score of 7.5, indicating high severity with impacts on confidentiality, integrity, and availability.
CVE-2026-101542 is a high-severity vulnerability in Oracle Capacity, part of Oracle E-Business Suite (component: Internal Operations). It affects versions 12.2.3 through 12.2.15. The vulnerability allows a low privileged attacker with network access via HTTP to compromise Oracle Capacity, potentially leading to full takeover of the product. The CVSS 3.1 base score is 8.8, indicating high impact on confidentiality, integrity, and availability. Oracle has included this vulnerability in its October 2026 Critical Patch Update advisory, which contains numerous security patches across multiple products.
CVE-2026-101541 is a vulnerability in Oracle Capacity, part of the Oracle E-Business Suite Internal Operations component. It affects versions 12.2.3 through 12.2.15. The flaw allows a low privileged attacker with network access via HTTP to compromise Oracle Capacity, potentially leading to unauthorized access to critical data or complete access to all data accessible by Oracle Capacity. The vulnerability has a CVSS 3.1 base score of 7.7, indicating a high severity with significant confidentiality impact but no integrity or availability impact. The vulnerability may also affect additional Oracle products due to scope change.