#oraclecorporation
LightNews LightNews
stackflag.bsky.social
CVE-2026-114820 - oracle java se
Certain versions of Oracle Java SE, GraalVM for JDK and GraalVM Enterprise let anyone on the network use built‑in APIs to gain full control of the program’s data. This means…

Too many irrelevant or confusing CVEs? Use stackflag.com

#oraclecorporation #CVE #infosec
CVE-2026-114820: Oracle Java SE and GraalVM can be accessed remotely to alter data
Certain versions of Oracle Java SE, GraalVM for JDK and GraalVM Enterprise let anyone on the network use built‑in APIs to gain full control of the.
stackflag.com
October 24, 2026 at 7:10 PM
stackflag.bsky.social
CVE-2026-83397 - oracle data integrator
The Oracle Data Integrator component of Oracle Fusion Middleware (Console/Repository Explorer) in versions 12.2.1.4.0 and 14.1.2.0.0 can be accessed without a login…

Too many irrelevant or confusing CVEs? Use stackflag.com

#oraclecorporation #CVE #infosec
CVE-2026-83397: Oracle Data Integrator can be taken over via web
The Oracle Data Integrator component of Oracle Fusion Middleware (Console/Repository Explorer) in versions 12.2.1.4.0 and 14.1.2.0.0 can be accessed.
stackflag.com
October 22, 2026 at 8:40 PM
stackflag.bsky.social
CVE-2026-91323 - oracle weblogic server
Versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0 of Oracle WebLogic Server are affected. An attacker on the network can access the server through a web…

Too many irrelevant or confusing CVEs? Use stackflag.com

#oraclecorporation #CVE #infosec
CVE-2026-91323: Oracle WebLogic Server can be taken over remotely
Versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0 of Oracle WebLogic Server are affected.
stackflag.com
October 23, 2026 at 2:10 AM
stackflag.bsky.social
CVE-2026-91491 - oracle identity manager connector
The Oracle Identity Manager Connector (versions 12.2.1.4.0 and 14.1.2.1.0) can be accessed without authentication over the network using LDAP. An attacker…

Too many irrelevant or confusing CVEs? Use stackflag.com

#oraclecorporation #CVE #infosec
CVE-2026-91491: Oracle Identity Manager Connector can be taken over via LDAP
The Oracle Identity Manager Connector (versions 12.2.1.4.0 and 14.1.2.1.0) can be accessed without authentication over the network using LDAP.
stackflag.com
October 23, 2026 at 2:30 AM
stackflag.bsky.social
CVE-2026-91490 - oracle identity manager connector
The Oracle Identity Manager Connector in Oracle Fusion Middleware (versions 12.2.1.4.0 and 14.1.2.1.0) can be accessed over the network without…

Too many irrelevant or confusing CVEs? Use stackflag.com

#oraclecorporation #CVE #infosec
CVE-2026-91490: Oracle Identity Manager Connector allows remote data changes
The Oracle Identity Manager Connector in Oracle Fusion Middleware (versions 12.2.1.4.0 and 14.1.2.1.0) can be accessed over the network without.
stackflag.com
October 23, 2026 at 2:30 AM
stackflag.bsky.social
CVE-2026-91241 - oracle business intelligence enterprise edition
Versions of Oracle Business Intelligence Enterprise Edition (8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0) allow an attacker who already has…

Too many irrelevant or confusing CVEs? Use stackflag.com

#oraclecorporation #CVE #infosec
CVE-2026-91241: Oracle Business Intelligence Enterprise Edition can be taken over
Versions of Oracle Business Intelligence Enterprise Edition (8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0) allow an attacker who already has high‑level access on.
stackflag.com
October 23, 2026 at 1:50 AM
stackflag.bsky.social
CVE-2026-91624 - oracle agile product lifecycle management for process
The Oracle Agile Product Lifecycle Management for Process version 6.2.4 can be accessed over the network without any login. An attacker…

Too many irrelevant or confusing CVEs? Use stackflag.com

#oraclecorporation #CVE #infosec
CVE-2026-91624: Oracle Agile PLM for Process permits remote data takeover
The Oracle Agile Product Lifecycle Management for Process version 6.2.4 can be accessed over the network without any login.
stackflag.com
October 23, 2026 at 2:50 AM
stackflag.bsky.social
CVE-2026-91622 - oracle agile product lifecycle management for process
The Oracle Agile Product Lifecycle Management for Process version 6.2.4 can be accessed over the network without authentication,…

Too many irrelevant or confusing CVEs? Use stackflag.com

#oraclecorporation #CVE #infosec
CVE-2026-91622: Oracle Agile PLM for Process permits remote data tampering
The Oracle Agile Product Lifecycle Management for Process version 6.2.4 can be accessed over the network without authentication, letting an attacker.
stackflag.com
October 23, 2026 at 2:40 AM
stackflag.bsky.social
CVE-2026-91495 - oracle webcenter content
The Content Server component in Oracle WebCenter Content (versions 12.2.1.4.0 and 14.1.2.0.0) can be accessed over the network without any login and fully…

Too many irrelevant or confusing CVEs? Use stackflag.com

#oraclecorporation #CVE #infosec
CVE-2026-91495: Oracle WebCenter Content can be taken over remotely
The Content Server component in Oracle WebCenter Content (versions 12.2.1.4.0 and 14.1.2.0.0) can be accessed over the network without any login and fully.
stackflag.com
October 23, 2026 at 2:40 AM
stackflag.bsky.social
CVE-2026-101763 - oracle communications brm - elastic charging engine
Versions 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0 and 15.2.0.0.0 of Oracle Communications BRM Elastic Charging Engine’s cloud‑native…

Too many irrelevant or confusing CVEs? Use stackflag.com

#oraclecorporation #CVE #infosec
CVE-2026-101763: Oracle BRM Elastic Charging Engine can be taken over
Versions 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0 and 15.2.0.0.0 of Oracle Communications BRM Elastic Charging Engine’s cloud‑native deployment can be accessed.
stackflag.com
October 22, 2026 at 8:10 PM
stackflag.bsky.social
CVE-2026-91403 - oracle java se
Certain versions of Oracle Java SE, GraalVM for JDK and GraalVM Enterprise Edition can be accessed over the network without any login, letting an attacker read,…

Too many irrelevant or confusing CVEs? Use stackflag.com

#oraclecorporation #Debian13 #CVE #infosec
CVE-2026-91403: Oracle Java SE and GraalVM enable remote data takeover
Certain versions of Oracle Java SE, GraalVM for JDK and GraalVM Enterprise Edition can be accessed over the network without any login, letting an attacker.
stackflag.com
October 23, 2026 at 7:20 AM
stackflag.bsky.social
CVE-2026-91230 - oracle soa suite
The Oracle SOA Suite component in Fusion Middleware (versions 12.2.1.4.0 and 14.1.2.0.0) can be reached over the network without any login. An attacker could view, change…

Too many irrelevant or confusing CVEs? Use stackflag.com

#oraclecorporation #CVE #infosec
CVE-2026-91230: Oracle SOA Suite lets remote attacker access data
The Oracle SOA Suite component in Fusion Middleware (versions 12.2.1.4.0 and 14.1.2.0.0) can be reached over the network without any login.
stackflag.com
October 23, 2026 at 1:30 AM
stackflag.bsky.social
CVE-2026-87337 - oracle access manager
The authentication part of Oracle Access Manager in versions 12.2.1.4.0 and 14.1.2.1.0 can be tricked over the web without any login. An attacker could create, delete…

Too many irrelevant or confusing CVEs? Use stackflag.com

#oraclecorporation #CVE #infosec
CVE-2026-87337: Oracle Access Manager lets remote attacker modify data
The authentication part of Oracle Access Manager in versions 12.2.1.4.0 and 14.1.2.1.0 can be tricked over the web without any login.
stackflag.com
October 23, 2026 at 12:50 AM
stackflag.bsky.social
CVE-2026-91665 - oracle essbase
The 21.8.3.0.0 version of Oracle Essbase allows anyone on the network to access it without a password and gain full control. This could let an attacker read,…

Too many irrelevant or confusing CVEs? Use stackflag.com

#oracleessbase #oraclecorporation #CVE #infosec
CVE-2026-91665: Oracle Essbase can be taken over remotely
The 21.8.3.0.0 version of Oracle Essbase allows anyone on the network to access it without a password and gain full control.
stackflag.com
October 23, 2026 at 12:40 AM
stackflag.bsky.social
CVE-2026-101503 - oracle trusted answer search
The Oracle Trusted Answer Search component can be compromised by someone with low-level network access. This could let an attacker gain full control of the…

Too many irrelevant or confusing CVEs? Use stackflag.com

#oraclecorporation #CVE #infosec
CVE-2026-101503: Oracle Trusted Answer Search can be taken over
The Oracle Trusted Answer Search component can be compromised by someone with low-level network access.
stackflag.com
October 22, 2026 at 9:50 PM
stackflag.bsky.social
CVE-2026-91663 - oracle essbase
A flaw in Oracle Essbase version 21.8.3.0.0 lets someone with limited rights on the network access the system and gain full control. This could let an attacker…

Too many irrelevant or confusing CVEs? Use stackflag.com

#oracleessbase #oraclecorporation #CVE #infosec
CVE-2026-91663: Oracle Essbase can be taken over by low‑privilege attacker
A flaw in Oracle Essbase version 21.8.3.0.0 lets someone with limited rights on the network access the system and gain full control.
stackflag.com
October 23, 2026 at 3:20 AM
stackflag.bsky.social
CVE-2026-91658 - oracle essbase
A version of Oracle Essbase (21.8.3.0.0) lets a user with only basic network access take full control of the system through its web interface. This can lead to…

Too many irrelevant or confusing CVEs? Use stackflag.com

#oracleessbase #oraclecorporation #CVE #infosec
CVE-2026-91658: Oracle Essbase can be taken over remotely
A version of Oracle Essbase (21.8.3.0.0) lets a user with only basic network access take full control of the system through its web interface.
stackflag.com
October 23, 2026 at 3:20 AM
stackflag.bsky.social
CVE-2026-91299 - jd edwards enterpriseone orchestrator
Versions 9.2.0.0 through 9.2.26.5 of JD Edwards EnterpriseOne Orchestrator allow anyone on the network to access it without a password using HTTP. An…

Too many irrelevant or confusing CVEs? Use stackflag.com

#oraclecorporation #CVE #infosec
CVE-2026-91299: Oracle JD Edwards Orchestrator can be taken over
Versions 9.2.0.0 through 9.2.26.5 of JD Edwards EnterpriseOne Orchestrator allow anyone on the network to access it without a password using HTTP.
stackflag.com
October 23, 2026 at 12:30 AM
stackflag.bsky.social
CVE-2026-91655 - oracle essbase
Oracle Essbase version 21.8.3.0.0 can be tricked by someone with only basic network access to view, change or delete the data it stores. This could expose…

Too many irrelevant or confusing CVEs? Use stackflag.com

#oracleessbase #oraclecorporation #CVE #infosec
CVE-2026-91655: Oracle Essbase lets low‑privilege network user access data
Oracle Essbase version 21.8.3.0.0 can be tricked by someone with only basic network access to view, change or delete the data it stores.
stackflag.com
October 23, 2026 at 3:10 AM
stackflag.bsky.social
CVE-2026-91638 - oracle essbase
The 21.8.3.0.0 version of Oracle Essbase allows anyone with basic network access over HTTP to gain full control of the system. This could let an attacker read,…

Too many irrelevant or confusing CVEs? Use stackflag.com

#oracleessbase #oraclecorporation #CVE #infosec
CVE-2026-91638: Oracle Essbase can be taken over by low‑privilege attacker
The 21.8.3.0.0 version of Oracle Essbase allows anyone with basic network access over HTTP to gain full control of the system.
stackflag.com
October 23, 2026 at 3:00 AM
stackflag.bsky.social
CVE-2026-83399 - oracle weblogic server
Certain versions of Oracle WebLogic Server (12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, 15.1.1.0.0) let an attacker on the network connect without credentials and gain full…

Too many irrelevant or confusing CVEs? Use stackflag.com

#oraclecorporation #CVE #infosec
CVE-2026-83399: Oracle WebLogic Server can be taken over remotely
Certain versions of Oracle WebLogic Server (12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, 15.1.1.0.0) let an attacker on the network connect without credentials and.
stackflag.com
October 22, 2026 at 8:50 PM
stackflag.bsky.social
CVE-2026-91341 - oracle outside in technology
The Outside In Clean Content SDK in Oracle Outside In Technology version 8.5.8 can be accessed over the network without authentication. An attacker could…

Too many irrelevant or confusing CVEs? Use stackflag.com

#oraclecorporation #CVE #infosec
CVE-2026-91341: Oracle Outside In Technology can be taken over via web
The Outside In Clean Content SDK in Oracle Outside In Technology version 8.5.8 can be accessed over the network without authentication.
stackflag.com
October 23, 2026 at 2:10 AM
stackflag.bsky.social
CVE-2026-91408 - oracle identity manager
Versions 12.2.1.4.0 and 14.1.2.1.0 of Oracle Identity Manager allow anyone on the network to gain full control of the system without logging in. This could let…

Too many irrelevant or confusing CVEs? Use stackflag.com

#oraclecorporation #CVE #infosec
CVE-2026-91408: Oracle Identity Manager can be taken over remotely
Versions 12.2.1.4.0 and 14.1.2.1.0 of Oracle Identity Manager allow anyone on the network to gain full control of the system without logging in.
stackflag.com
October 23, 2026 at 2:20 AM
stackflag.bsky.social
CVE-2026-91251 - oracle soa suite
The adapters component in Oracle SOA Suite versions 12.2.1.4.0 and 14.1.2.0.0 can be triggered over the network by a low‑privilege user, potentially giving an attacker…

Too many irrelevant or confusing CVEs? Use stackflag.com

#oraclecorporation #CVE #infosec
CVE-2026-91251: Oracle SOA Suite adapters allow remote takeover
The adapters component in Oracle SOA Suite versions 12.2.1.4.0 and 14.1.2.0.0 can be triggered over the network by a low‑privilege user, potentially.
stackflag.com
October 23, 2026 at 2:00 AM
stackflag.bsky.social
CVE-2026-91250 - oracle soa suite
The adapters component in Oracle SOA Suite versions 12.2.1.4.0 and 14.1.2.0.0 can be accessed over the network by a user with low privileges. This can let an attacker gain…

Too many irrelevant or confusing CVEs? Use stackflag.com

#oraclecorporation #CVE #infosec
CVE-2026-91250: Oracle SOA Suite adapters allow remote takeover
The adapters component in Oracle SOA Suite versions 12.2.1.4.0 and 14.1.2.0.0 can be accessed over the network by a user with low privileges.
stackflag.com
October 23, 2026 at 2:00 AM