CVE-2026-91547 is a vulnerability in Oracle GoldenGate's Vendor Access Module affecting multiple versions. It allows a low privileged attacker with access to the infrastructure where Oracle GoldenGate runs to compromise the product. Successful exploitation can lead to unauthorized access to critical or all data accessible by Oracle GoldenGate. The CVSS 3.1 base score is 5.5, indicating a medium severity with high confidentiality impact but no integrity or availability impact.
CVE-2026-91546 is a high-severity vulnerability in Oracle Business Intelligence Enterprise Edition 12.2.1.4.0. It allows an unauthenticated attacker with network access via HTTP to potentially take over the affected system. The vulnerability is difficult to exploit but can lead to full confidentiality, integrity, and availability compromise. Oracle has released security patches addressing this and many other vulnerabilities in its October 2026 Critical Patch Update advisory.
CVE-2026-91545 is a high-severity vulnerability in Oracle Business Intelligence Enterprise Edition affecting versions 8.2.0.0.0 and 12.2.1.4.0. It allows an unauthenticated attacker with access to the infrastructure where the product runs to compromise the system, requiring human interaction from someone other than the attacker. Successful exploitation can lead to complete takeover of the Oracle Business Intelligence Enterprise Edition environment. The vulnerability has a CVSS 3.1 base score of 7.8, reflecting high impact on confidentiality, integrity, and availability.
CVE-2026-91542 is a high-severity vulnerability in Oracle WebCenter Sites versions 12.2.1.4.0 and 14.1.2.0.0. It allows an unauthenticated attacker with network access via HTTP to gain unauthorized access to critical or all accessible data within Oracle WebCenter Sites. The vulnerability has a CVSS 3.1 base score of 7.5, indicating a significant confidentiality impact without requiring user interaction or privileges.
Vulnerability in the PeopleSoft Enterprise FIN Common Objects Brazil product of Oracle PeopleSoft (component: Common Objects). The supported version that is affected is 9.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise FIN Common Objects Brazil. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise FIN Common Objects Brazil accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of PeopleSoft Enterprise FIN Common Objects Brazil. CVSS 3.1 Base Score 6.5 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L).
CVE-2026-91539 is a vulnerability in Oracle Business Intelligence Enterprise Edition 12.2.1.4.0 that allows a low privileged attacker with logon access to the infrastructure to compromise the product. Successful exploitation can lead to complete takeover of Oracle Business Intelligence Enterprise Edition. The vulnerability has a CVSS 3.1 base score of 7.8, indicating high severity with impacts on confidentiality, integrity, and availability.
CVE-2026-91537 is a vulnerability in Oracle Solaris 11.4 affecting the Utility component. It allows a low privileged attacker with logon access to the infrastructure running Oracle Solaris to compromise the system, potentially resulting in full takeover. The vulnerability has a CVSS 3.1 base score of 7.8, indicating high severity with impacts on confidentiality, integrity, and availability.
CVE-2026-91536 is a vulnerability in Oracle SOA Suite versions 12.2.1.4.0 and 14.1.2.0.0 that allows a low privileged attacker with network access via HTTPS to perform unauthorized update, insert, delete, and read operations on accessible data. It also enables the attacker to cause a partial denial of service. The vulnerability is rated with a CVSS 3.1 base score of 5.0, indicating medium severity.
CVE-2026-91535 is a high-severity vulnerability in Oracle Business Intelligence Enterprise Edition (BI Search component) affecting versions 8.2.0.0.0, 12.2.1.4.0, and 26.01.0.0.0. It allows a low privileged attacker with network access via HTTP to compromise the product, potentially resulting in full takeover. The vulnerability has a CVSS 3.1 base score of 8.8, indicating high impact on confidentiality, integrity, and availability. Oracle has included this vulnerability in its October 2026 Critical Patch Update advisory, which contains security patches for multiple products including Oracle BI Enterprise Edition. Customers are strongly advised to apply the available patches promptly to mitigate this risk.
CVE-2026-91534 is a high-severity vulnerability in Oracle Business Intelligence Enterprise Edition (OBIEE) versions 8.2.0.0.0, 12.2.1.4.0, and 26.1.0.0.0. It allows an unauthenticated attacker with network access via HTTP to cause denial of service by hanging or crashing the application and to gain unauthorized read and write access to some accessible data. The vulnerability impacts confidentiality, integrity, and availability with a CVSS 3.1 base score of 8.6. Oracle has released a Critical Patch Update addressing this and many other vulnerabilities. Users are strongly advised to apply the official patches promptly.
CVE-2026-91532 is a high-severity vulnerability in Oracle Applications Manager, part of Oracle E-Business Suite. It affects versions 12.2.3 through 12.2.15. The flaw allows a low privileged attacker with network access via HTTP to compromise Oracle Applications Manager, potentially leading to full takeover of the application. The vulnerability has a CVSS 3.1 base score of 8.8, indicating high impact on confidentiality, integrity, and availability. Oracle has released patches as part of its October 2026 Critical Patch Update. Customers are strongly advised to apply these patches promptly to mitigate the risk.
CVE-2026-91530 is a vulnerability in the Admin Client Executable component of Oracle GoldenGate versions 23.4 through 23.26.2.0.0. It allows a high privileged attacker with network access via HTTP to potentially gain unauthorized access to critical or all accessible data within Oracle GoldenGate. The vulnerability is rated with a CVSS 3.1 base score of 4.4, indicating a medium severity focused on confidentiality impact. The vulnerability is difficult to exploit and does not affect integrity or availability.
CVE-2026-91528 is a vulnerability in Oracle BI Publisher version 12.2.1.4.0 that allows a low privileged attacker with network access via HTTPS to gain unauthorized read access to some data accessible by Oracle BI Publisher. The vulnerability has a CVSS 3.1 base score of 4.3, indicating a medium severity with confidentiality impact only. Oracle has included this vulnerability in its October 2026 Critical Patch Update advisory, which contains numerous security patches across Oracle products.
CVE-2026-91527 is a vulnerability in Oracle ZFS Storage Appliance Kit version 8.8 that allows a low privileged attacker with network access via HTTP to compromise the system. The vulnerability has a high CVSS score of 8.8, indicating severe impacts on confidentiality, integrity, and availability. Successful exploitation can lead to complete takeover of the affected appliance. Oracle has published a Critical Patch Update advisory addressing this and many other vulnerabilities, recommending customers apply patches promptly.
CVE-2026-91526 is a vulnerability in Oracle BI Publisher that allows an unauthenticated attacker with network access via HTTP to potentially compromise the product. Exploitation is difficult and requires human interaction from a person other than the attacker. Successful exploitation can lead to unauthorized update, insert, or delete access to some Oracle BI Publisher accessible data, as well as unauthorized read access to a subset of that data. The vulnerability affects versions 8.2.0.0.0, 12.2.1.4.0, and 26.01.0.0.0. The CVSS 3.1 base score is 4.7, indicating a medium severity with confidentiality and integrity impacts but no availability impact. Oracle has released a Critical Patch Update that includes fixes for this and many other vulnerabilities.
CVE-2026-91524 is a vulnerability in Oracle Business Intelligence Enterprise Edition 12.2.1.4.0 that allows a low privileged attacker with network access via HTTP to cause a partial denial of service. The vulnerability has a CVSS 3.1 base score of 4.3, indicating a medium severity impact focused on availability. Oracle has released security patches addressing this and many other vulnerabilities in their October 2026 Critical Patch Update advisory.
CVE-2026-91523 is a medium severity vulnerability in Oracle Business Intelligence Enterprise Edition that allows a low privileged attacker with network access via HTTP to perform unauthorized read and write operations on accessible data. Exploitation requires user interaction from a person other than the attacker. The vulnerability affects versions 8.2.0.0.0, 12.2.1.4.0, and 26.01.0.0.0. The impact includes unauthorized update, insert, or delete access to some data and unauthorized read access to a subset of data. Oracle has released patches for this and many other vulnerabilities in its October 2026 Critical Patch Update advisory.
CVE-2026-91521 is a high-severity vulnerability in Oracle Agile Product Lifecycle Management for Process version 6.2.4. It allows a low privileged attacker with network access via HTTP to compromise the product, potentially leading to full takeover. The vulnerability has a CVSS 3.1 base score of 8.8, indicating high impact on confidentiality, integrity, and availability.
CVE-2026-91520 is a high-severity vulnerability in Oracle Agile Product Lifecycle Management for Process version 6.2.4. It allows a low privileged attacker with network access via HTTP to compromise the product, potentially leading to full takeover. The vulnerability has a CVSS 3.1 base score of 8.8, indicating high impact on confidentiality, integrity, and availability. Oracle has included this vulnerability in its October 2026 Critical Patch Update advisory, which contains numerous security patches across multiple products. Customers are strongly advised to apply the relevant patches promptly to mitigate this risk.
CVE-2026-91519 is a vulnerability in Oracle PeopleSoft Enterprise PeopleTools Report Distribution component affecting versions 8.61 through 8.63. It allows a low privileged attacker with network access via HTTP to gain unauthorized access to critical or all accessible data within PeopleSoft Enterprise PeopleTools. The vulnerability has a CVSS 3.1 base score of 6.5, indicating a medium severity with high confidentiality impact but no integrity or availability impact. Oracle has released security patches addressing this vulnerability as part of their October 2026 Critical Patch Update.