CVE-2026-101517 is a vulnerability in Oracle Utilities Network Management System allowing a low privileged attacker with logon access to the infrastructure to compromise the system. Successful exploitation can lead to unauthorized access to critical or all accessible data within the system. The vulnerability affects multiple versions of the product ranging from 2.4.0.1.0 through 25.12.0.0.2. The CVSS 3.1 base score is 5.5, indicating a medium severity with high confidentiality impact but no integrity or availability impact.
CVE-2026-101516 is a vulnerability in Oracle Java SE, Oracle GraalVM for JDK, and Oracle GraalVM Enterprise Edition libraries. It allows an unauthenticated attacker with network access via multiple protocols to gain unauthorized read and write access to certain accessible data. The vulnerability affects specific versions of Oracle Java SE, GraalVM for JDK, and GraalVM Enterprise Edition. Exploitation can occur through APIs, including web services supplying data to these APIs, and also affects sandboxed Java Web Start applications or applets that run untrusted code relying on the Java sandbox for security. The CVSS 3.1 base score is 6.5, indicating a medium severity vulnerability. Oracle has released patches as part of their October 2026 Critical Patch Update and strongly recommends applying them promptly.
CVE-2026-101515 is a vulnerability in Oracle WebLogic Server's Centralized Thirdparty Jars component affecting versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. It allows an unauthenticated attacker with network access via HTTP to potentially gain unauthorized access to critical or all accessible data on the server. The vulnerability is rated medium severity with a CVSS 3.1 base score of 5.9, primarily impacting confidentiality. Oracle has released security patches as part of their October 2026 Critical Patch Update and strongly recommends applying these patches promptly.
CVE-2026-101513 is a vulnerability in Oracle MySQL Cluster (InnoDB component) affecting versions 8.0.0 through 8.0.37. It requires physical access and is difficult to exploit. Successful exploitation can cause a hang or repeated crashes, resulting in a complete denial of service (DoS). The CVSS 3.1 base score is 3.8, indicating a low severity impact focused on availability. Oracle has released security patches addressing this and many other vulnerabilities in their October 2026 Critical Patch Update.
CVE-2026-101512 is a vulnerability in the Oracle Database Server RDBMS component affecting versions 23.4.0 through 23.26.3. It allows a low privileged attacker with network access via HTTP and no privileges to compromise the database. Successful exploitation can lead to unauthorized access to critical or all accessible data within the RDBMS. The vulnerability has a CVSS 3.1 base score of 6.5, indicating a medium severity focused on confidentiality impact.
CVE-2026-101511 is a vulnerability in Oracle Enterprise Manager Base Platform affecting versions 13.5 and 24.1. It allows a low privileged attacker with network access via HTTP to gain unauthorized read access to some accessible data. The vulnerability has a CVSS 3.1 base score of 4.3, indicating a medium severity impact focused on confidentiality. Oracle has released security patches as part of its October 2026 Critical Patch Update advisory.
CVE-2026-101510 is a vulnerability in Oracle Net Services affecting Oracle Database Server versions 19.3 through 19.32, 21.3 through 21.23, and 23.4.0 through 23.26.3. It allows a high privileged attacker with no privileges but with logon access to cause a hang or repeated crash, resulting in a denial of service (DoS). The vulnerability has a CVSS 3.1 base score of 4.4, indicating a medium severity focused on availability impact.
Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: EAI). Supported versions that are affected are 17.0-26.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel CRM Integration. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Siebel CRM Integration. CVSS 3.1 Base Score 7.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H).
CVE-2026-101507 is a vulnerability in Oracle Trusted Answer Search version 26.1, specifically in the PLSQL package component. It allows a low privileged attacker with network access via HTTP to gain unauthorized access to critical data or all data accessible by Oracle Trusted Answer Search. The vulnerability has a CVSS 3.1 base score of 6.5, indicating a medium severity with a high confidentiality impact but no impact on integrity or availability.
CVE-2026-101506 is a vulnerability in Oracle Trusted Answer Search version 26.1 that allows a low privileged attacker with network access via HTTP to gain unauthorized access to critical data. The vulnerability has a CVSS 3.1 base score of 7.7, indicating high severity, with a confidentiality impact but no integrity or availability impact. Exploitation of this vulnerability can lead to complete access to all data accessible by Oracle Trusted Answer Search and may affect additional Oracle products due to scope change. Oracle has released patches for multiple products in its October 2026 Critical Patch Update, which likely includes this vulnerability. Users are strongly advised to apply the relevant patches promptly.
CVE-2026-101505 is a high-severity vulnerability in Oracle Trusted Answer Search version 26.1. It allows a low privileged attacker with network access via HTTP to compromise the application, requiring user interaction from a third party. Successful exploitation can lead to unauthorized creation, deletion, or modification of critical data, impacting Oracle Trusted Answer Search and potentially other products. The vulnerability has a CVSS 3.1 base score of 8.7, indicating significant confidentiality and integrity impacts. Oracle has released patches for this and many other vulnerabilities in its October 2026 Critical Patch Update advisory.
CVE-2026-101504 is a high-severity vulnerability in Oracle Trusted Answer Search version 26.1. It allows a low privileged attacker with network access via HTTP to compromise the application. Successful exploitation requires user interaction by someone other than the attacker and can lead to unauthorized access to critical data and unauthorized modification of some data. The vulnerability has a CVSS 3.1 base score of 7.6, indicating significant confidentiality and integrity impacts. Oracle has published a Critical Patch Update advisory that includes security patches for multiple products, but no explicit patch link for this specific vulnerability is provided in the input data.
CVE-2026-101503 is a critical vulnerability in Oracle Trusted Answer Search version 26.1. It allows a low privileged attacker with network access via Oracle Net to compromise the Oracle Trusted Answer Search component. The vulnerability has a CVSS 3.1 base score of 9.9, indicating high impact on confidentiality, integrity, and availability. Successful exploitation can lead to takeover of the Oracle Trusted Answer Search service and potentially affect additional Oracle products due to scope change. Oracle has released patches as part of its October 2026 Critical Patch Update.
CVE-2026-101502 is a vulnerability in Oracle Trusted Answer Search version 26.1. It allows a low privileged attacker with logon access to the infrastructure to compromise the product. Exploitation requires human interaction from a third party and is difficult to achieve. Successful exploitation can lead to unauthorized read, update, insert, or delete access to some data, and partial denial of service. The vulnerability impacts confidentiality, integrity, and availability with a medium severity score of 5.0.
CVE-2026-101501 is a critical vulnerability in Oracle Trusted Answer Search version 26.1. It allows a low privileged attacker with network access via Oracle Net to compromise the component. Exploitation can lead to unauthorized creation, deletion, or modification of critical data, unauthorized read access to some data, and denial of service through hangs or crashes. The vulnerability has a CVSS 3.1 base score of 9.9, indicating severe confidentiality, integrity, and availability impacts. Oracle has released patches as part of its October 2026 Critical Patch Update.
Vulnerability in the Oracle Global Lifecycle Management OPatchAuto product of Oracle Global Lifecycle Management (component: Database extensions). Supported versions that are affected are 12.2.0.1.16-12.2.0.1.52. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Global Lifecycle Management OPatchAuto executes to compromise Oracle Global Lifecycle Management OPatchAuto. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of Oracle Global Lifecycle Management OPatchAuto. CVSS 3.1 Base Score 6.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H).
CVE-2026-101499 is a critical vulnerability in Oracle WebCenter Sites versions 12.2.1.4.0 and 14.1.2.0.0. It allows an unauthenticated attacker with network access via HTTP to compromise the product, potentially leading to full takeover. The vulnerability has a CVSS 3.1 base score of 9.8, indicating high impact on confidentiality, integrity, and availability. Oracle has published a Critical Patch Update advisory addressing this and many other vulnerabilities. Customers are strongly advised to apply the relevant patches promptly.
CVE-2026-101498 is a vulnerability in Oracle Trusted Answer Search version 26.1, specifically in the PLSQL package component. It allows an unauthenticated attacker with network access via Oracle Net to potentially take over the Oracle Trusted Answer Search service. The vulnerability has a CVSS 3.1 base score of 8.1, indicating high severity with impacts on confidentiality, integrity, and availability.
CVE-2026-101497 is a vulnerability in Oracle Identity Manager versions 12.2.1.4.0 and 14.1.2.1.0 that allows a low privileged attacker with network access via HTTP to cause a partial denial of service. The vulnerability impacts availability but does not affect confidentiality or integrity. It has a CVSS 3.1 base score of 4.3, indicating medium severity. Oracle has released patches for this vulnerability as part of its October 2026 Critical Patch Update.
CVE-2026-101495 is a high-severity vulnerability in Oracle Siebel CRM Development's Siebel Approval Manager component. It affects versions from 17.0 through 26.9. The flaw allows an unauthenticated attacker with network access via HTTP to compromise the system, requiring user interaction from someone other than the attacker. Successful exploitation can lead to full takeover of the Siebel CRM Development environment. The vulnerability has a CVSS 3.1 base score of 8.8, indicating high impact on confidentiality, integrity, and availability.