By publication date

Exploited and new serious CVEs: October 2026

8,751 records · 22 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

Page 62 of 88

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
35Monitor	CVE-2026-91213No exploit	Vulnerability in the Oracle Business Process Management Suite product of Oracle Fusion Middleware (component: BPM Composer).oracle · business process management suite · CWE-287 Auth bypass	High8.8	—	0.4%	Oct 20, 2026
39Monitor	CVE-2026-91214No exploit	Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer).oracle · soa suite · CWE-287 Pre-auth Auth bypass	Critical9.8	—	0.4%	Oct 20, 2026
35Monitor	CVE-2026-91215No exploit	Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer).oracle · soa suite · CWE-284 Broken access control (IDOR)	High8.8	—	0.4%	Oct 20, 2026
40Plan	CVE-2026-91216No exploit	Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer).oracle · soa suite · CWE-306 Pre-auth Auth bypass	Critical10.0	—	0.5%	Oct 20, 2026
34Monitor	CVE-2026-91217No exploit	Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer).oracle · soa suite · CWE-306 Pre-auth Auth bypass	High8.6	—	0.3%	Oct 20, 2026
38Monitor	CVE-2026-91218No exploit	Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer).oracle · soa suite · CWE-863 Broken access control (IDOR)	Critical9.6	—	0.3%	Oct 20, 2026
34Monitor	CVE-2026-91219No exploit	Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer).oracle · soa suite · CWE-306 Pre-auth Auth bypass	High8.6	—	0.3%	Oct 20, 2026
39Monitor	CVE-2026-91220No exploit	Vulnerability in the Oracle Business Process Management Suite product of Oracle Fusion Middleware (component: Human Workflow).oracle · business process management suite · CWE-287 Pre-auth Auth bypass	Critical9.8	—	0.4%	Oct 20, 2026
40Plan	CVE-2026-91221No exploit	Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer).oracle · soa suite · CWE-284 Pre-auth Broken access control (IDOR)	Critical10.0	—	0.5%	Oct 20, 2026
39Monitor	CVE-2026-91222No exploit	Vulnerability in the Oracle Business Process Management Suite product of Oracle Fusion Middleware (component: Human Workflow (11g+)).oracle · business process management suite · CWE-287 Auth bypass	Critical9.9	—	0.4%	Oct 20, 2026
35Monitor	CVE-2026-91223No exploit	Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer).oracle · soa suite · CWE-284 Broken access control (IDOR)	High8.8	—	0.4%	Oct 20, 2026
39Monitor	CVE-2026-91224No exploit	Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer).oracle · soa suite · CWE-284 Broken access control (IDOR)	Critical9.9	—	0.3%	Oct 20, 2026
36Monitor	CVE-2026-91225No exploit	Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Adapters).oracle · soa suite · CWE-306 Pre-auth Auth bypass	Critical9.1	—	0.4%	Oct 20, 2026
30Monitor	CVE-2026-91226No exploit	Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer).oracle · soa suite · CWE-284 Broken access control (IDOR)	High7.5	—	0.3%	Oct 20, 2026
30Monitor	CVE-2026-91227No exploit	Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer).oracle · soa suite · CWE-284 Broken access control (IDOR)	High7.5	—	0.2%	Oct 20, 2026
28Monitor	CVE-2026-91228No exploit	Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer).oracle · soa suite · CWE-863 Broken access control (IDOR)	High7.1	—	0.2%	Oct 20, 2026
30Monitor	CVE-2026-91229No exploit	Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer).oracle · soa suite · CWE-284 Broken access control (IDOR)	High7.5	—	0.3%	Oct 20, 2026
37Monitor	CVE-2026-91230No exploit	Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer).oracle · soa suite · CWE-306 Pre-auth Auth bypass	Critical9.3	—	0.3%	Oct 20, 2026
40Plan	CVE-2026-91231No exploit	Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Adapters).oracle · soa suite · CWE-306 Pre-auth Auth bypass	Critical10.0	—	0.5%	Oct 20, 2026
39Monitor	CVE-2026-91232No exploit	Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer).oracle · soa suite · CWE-284 Broken access control (IDOR)	Critical9.9	—	0.4%	Oct 20, 2026
39Monitor	CVE-2026-91233No exploit	Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Enterprise Scheduling System).oracle · soa suite · CWE-287 Pre-auth Auth bypass	Critical9.8	—	0.4%	Oct 20, 2026
39Monitor	CVE-2026-91234No exploit	Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer).oracle · soa suite · CWE-287 Pre-auth Auth bypass	Critical9.8	—	0.4%	Oct 20, 2026
39Monitor	CVE-2026-91235No exploit	Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer).oracle · soa suite · CWE-287 Pre-auth Auth bypass	Critical9.8	—	0.4%	Oct 20, 2026
39Monitor	CVE-2026-91236No exploit	Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer).oracle · soa suite · CWE-287 Pre-auth Auth bypass	Critical9.8	—	0.4%	Oct 20, 2026
30Monitor	CVE-2026-91237No exploit	Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer).oracle · soa suite · CWE-306 Pre-auth Auth bypass	High7.5	—	0.3%	Oct 20, 2026
28Monitor	CVE-2026-91238No exploit	Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer).oracle · soa suite · CWE-400 Denial of service	High7.1	—	0.3%	Oct 20, 2026
35Monitor	CVE-2026-91239No exploit	Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer).oracle · soa suite · CWE-306 Auth bypass	High8.8	—	0.4%	Oct 20, 2026
36Monitor	CVE-2026-91241No exploit	Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Analytics Web Administration).oracle · business intelligence · CWE-284 Broken access control (IDOR)	Critical9.1	—	0.3%	Oct 20, 2026
29Monitor	CVE-2026-91242No exploit	Vulnerability in the Oracle Solaris product of Oracle Systems (component: Plugins).oracle · solaris · CWE-284 Local privilege escalation Broken access control (IDOR)	High7.4	—	0.1%	Oct 20, 2026
38Monitor	CVE-2026-91243No exploit	Vulnerability in the Oracle Business Process Management Suite product of Oracle Fusion Middleware (component: Fabric Layer).oracle · business process management suite · CWE-284 Broken access control (IDOR)	Critical9.6	—	0.3%	Oct 20, 2026
39Monitor	CVE-2026-91250No exploit	Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Adapters).oracle · soa suite · CWE-269	Critical9.9	—	0.4%	Oct 20, 2026
39Monitor	CVE-2026-91251No exploit	Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Adapters).oracle · soa suite · CWE-284 Broken access control (IDOR)	Critical9.9	—	0.4%	Oct 20, 2026
32Monitor	CVE-2026-91252No exploit	Vulnerability in the Oracle Solaris product of Oracle Systems (component: Services).oracle · solaris · CWE-400 Pre-auth Denial of service	High8.2	—	0.4%	Oct 20, 2026
31Monitor	CVE-2026-91253No exploit	Vulnerability in the Oracle Solaris product of Oracle Systems (component: Kernel).oracle · solaris · CWE-269 Local privilege escalation	High7.8	—	0.1%	Oct 20, 2026
30Monitor	CVE-2026-91254No exploit	Vulnerability in the Oracle Solaris product of Oracle Systems (component: Kernel).oracle · solaris · CWE-400 Pre-auth Denial of service	High7.5	—	0.4%	Oct 20, 2026
30Monitor	CVE-2026-91255No exploit	Vulnerability in the Oracle Solaris product of Oracle Systems (component: Kernel).oracle · solaris · CWE-400 Pre-auth Denial of service	High7.5	—	0.4%	Oct 20, 2026
28Monitor	CVE-2026-91256No exploit	Vulnerability in the Oracle Solaris product of Oracle Systems (component: Services).oracle · solaris · CWE-400 Denial of service	High7.1	—	0.3%	Oct 20, 2026
35Monitor	CVE-2026-91259No exploit	Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Legacy UI).oracle · identity manager · CWE-287 Auth bypass	High8.8	—	0.4%	Oct 20, 2026
28Monitor	CVE-2026-91260No exploit	Vulnerability in the iProcurement product of Oracle E-Business Suite (component: E-Content Manager Catalog).oracle corporation · iprocurement · CWE-269	High7.2	—	0.3%	Oct 20, 2026
36Monitor	CVE-2026-91265No exploit	Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure SEC).oracle · jd edwards enterpriseone tools · CWE-287 Pre-auth Auth bypass	Critical9.1	—	0.4%	Oct 20, 2026
33Monitor	CVE-2026-91266No exploit	Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Monitoring and Diagnostics SEC).oracle · jd edwards enterpriseone tools · CWE-284 Local privilege escalation Broken access control (IDOR)	High8.4	—	0.1%	Oct 20, 2026
34Monitor	CVE-2026-91267No exploit	Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Interoperability SEC).oracle · jd edwards enterpriseone tools · CWE-306 Pre-auth Auth bypass	High8.6	—	0.3%	Oct 20, 2026
35Monitor	CVE-2026-91268No exploit	Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime SEC).oracle · jd edwards enterpriseone tools · CWE-284 Broken access control (IDOR)	High8.8	—	0.3%	Oct 20, 2026
32Monitor	CVE-2026-91269No exploit	Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure SEC).oracle · jd edwards enterpriseone tools · CWE-284 Broken access control (IDOR)	High8.1	—	0.3%	Oct 20, 2026
35Monitor	CVE-2026-91270No exploit	Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Monitoring and Diagnostics SEC).oracle · jd edwards enterpriseone tools · CWE-306 Auth bypass	High8.8	—	0.4%	Oct 20, 2026
32Monitor	CVE-2026-91271No exploit	Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Monitoring and Diagnostics SEC).oracle · jd edwards enterpriseone tools · CWE-284 Broken access control (IDOR)	High8.1	—	0.2%	Oct 20, 2026
29Monitor	CVE-2026-91272No exploit	Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Interoperability SEC).oracle · jd edwards enterpriseone tools · CWE-284 Pre-auth Broken access control (IDOR)	High7.4	—	0.3%	Oct 20, 2026
34Monitor	CVE-2026-91273No exploit	Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Object and Env Tech SEC).oracle · jd edwards enterpriseone tools · CWE-284 Pre-auth Broken access control (IDOR)	High8.6	—	0.3%	Oct 20, 2026
32Monitor	CVE-2026-91286No exploit	Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Monitoring and Diagnostics SEC).oracle · jd edwards enterpriseone tools · CWE-284 Pre-auth Broken access control (IDOR)	High8.2	—	0.2%	Oct 20, 2026
32Monitor	CVE-2026-91287No exploit	Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure SEC).oracle · jd edwards enterpriseone tools · CWE-284 Pre-auth Broken access control (IDOR)	High8.1	—	0.3%	Oct 20, 2026
29Monitor	CVE-2026-91288No exploit	Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Interoperability SEC).oracle · jd edwards enterpriseone tools · CWE-284 Pre-auth Broken access control (IDOR)	High7.4	—	0.2%	Oct 20, 2026
35Monitor	CVE-2026-91295No exploit	Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure SEC).oracle · jd edwards enterpriseone tools · CWE-306 Auth bypass	High8.8	—	0.4%	Oct 20, 2026
35Monitor	CVE-2026-91296No exploit	Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure SEC).oracle · jd edwards enterpriseone tools · CWE-601 Pre-auth Open redirect	High8.8	—	0.3%	Oct 20, 2026
40Plan	CVE-2026-91299No exploit	Vulnerability in the JD Edwards EnterpriseOne Orchestrator product of Oracle JD Edwards (component: E1 IOT Orchestrator Security).oracle · jd edwards enterpriseone orchestrator · CWE-284 Pre-auth Broken access control (IDOR)	Critical10.0	—	0.4%	Oct 20, 2026
35Monitor	CVE-2026-91303No exploit	Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security).oracle · jd edwards enterpriseone tools · CWE-284 Pre-auth Broken access control (IDOR)	High8.8	—	0.2%	Oct 20, 2026
31Monitor	CVE-2026-91304No exploit	Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security).oracle · jd edwards enterpriseone tools · CWE-284 Broken access control (IDOR)	High7.8	—	0.1%	Oct 20, 2026
36Monitor	CVE-2026-91305No exploit	Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security).oracle · jd edwards enterpriseone tools · CWE-287 Pre-auth Auth bypass	Critical9.1	—	0.4%	Oct 20, 2026
31Monitor	CVE-2026-91306No exploit	Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security).oracle · jd edwards enterpriseone tools · CWE-269 Local privilege escalation	High7.8	—	0.1%	Oct 20, 2026
30Monitor	CVE-2026-91307No exploit	Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security).oracle · jd edwards enterpriseone tools · CWE-200 Pre-auth Info leak	High7.5	—	0.3%	Oct 20, 2026
30Monitor	CVE-2026-91308No exploit	Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security).oracle · jd edwards enterpriseone tools · CWE-200 Pre-auth Info leak	High7.5	—	0.3%	Oct 20, 2026
35Monitor	CVE-2026-91310No exploit	Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation SEC).oracle · jd edwards enterpriseone tools · CWE-306 Auth bypass	High8.8	—	0.3%	Oct 20, 2026
31Monitor	CVE-2026-91311No exploit	Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security).oracle · jd edwards enterpriseone tools · CWE-269 Local privilege escalation	High7.8	—	0.1%	Oct 20, 2026
32Monitor	CVE-2026-91313No exploit	Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security).oracle · jd edwards enterpriseone tools · CWE-306 Pre-auth Auth bypass	High8.1	—	0.3%	Oct 20, 2026
31Monitor	CVE-2026-91314No exploit	Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security).oracle · jd edwards enterpriseone tools · CWE-284 Broken access control (IDOR)	High7.8	—	0.1%	Oct 20, 2026
31Monitor	CVE-2026-91315No exploit	Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security).oracle · jd edwards enterpriseone tools · CWE-284 Broken access control (IDOR)	High7.8	—	0.1%	Oct 20, 2026
28Monitor	CVE-2026-91316No exploit	Vulnerability in the iProcurement product of Oracle E-Business Suite (component: E-Content Manager Catalog).oracle corporation · iprocurement · CWE-284 Broken access control (IDOR)	High7.2	—	0.4%	Oct 20, 2026
30Monitor	CVE-2026-91321No exploit	Vulnerability in the iProcurement product of Oracle E-Business Suite (component: Requisition Management).oracle corporation · iprocurement · CWE-284 Broken access control (IDOR)	High7.5	—	0.3%	Oct 20, 2026
39Monitor	CVE-2026-91323No exploit	Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).oracle · weblogic server · CWE-287 Pre-auth Auth bypass	Critical9.8	—	0.5%	Oct 20, 2026
30Monitor	CVE-2026-91325No exploit	Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security).oracle · jd edwards enterpriseone tools · CWE-200 Pre-auth Info leak	High7.5	—	0.4%	Oct 20, 2026
35Monitor	CVE-2026-91326No exploit	Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security).oracle · jd edwards enterpriseone tools · CWE-284 Pre-auth Broken access control (IDOR)	High8.8	—	0.2%	Oct 20, 2026
30Monitor	CVE-2026-91327No exploit	Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security).oracle · jd edwards enterpriseone tools · CWE-284 Pre-auth Broken access control (IDOR)	High7.5	—	0.2%	Oct 20, 2026
31Monitor	CVE-2026-91328No exploit	Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Deployment SEC).oracle · jd edwards enterpriseone tools · CWE-601 Open redirect	High7.8	—	0.1%	Oct 20, 2026
29Monitor	CVE-2026-91337No exploit	Vulnerability in the iProcurement product of Oracle E-Business Suite (component: Internal operations).oracle corporation · iprocurement · CWE-284 Pre-auth Broken access control (IDOR)	High7.4	—	0.2%	Oct 20, 2026
28Monitor	CVE-2026-91338No exploit	Vulnerability in the iSupport product of Oracle E-Business Suite (component: Internal operations).oracle corporation · isupport · CWE-284 Broken access control (IDOR)	High7.1	—	0.1%	Oct 20, 2026
35Monitor	CVE-2026-91340No exploit	Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Clean Content SDK).oracle · outside in technology · CWE-284 Broken access control (IDOR)	High8.8	—	0.4%	Oct 20, 2026
36Monitor	CVE-2026-91341No exploit	Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Clean Content SDK).oracle · outside in technology · CWE-284 Pre-auth Broken access control (IDOR)	Critical9.1	—	0.4%	Oct 20, 2026
32Monitor	CVE-2026-91342No exploit	Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Clean Content SDK).oracle · outside in technology · CWE-284 Pre-auth Broken access control (IDOR)	High8.2	—	0.2%	Oct 20, 2026
34Monitor	CVE-2026-91343No exploit	Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Clean Content SDK).oracle · outside in technology · CWE-284 Pre-auth Broken access control (IDOR)	High8.6	—	0.3%	Oct 20, 2026
30Monitor	CVE-2026-91344No exploit	Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Clean Content SDK).oracle · outside in technology · CWE-400 Pre-auth Denial of service	High7.5	—	0.4%	Oct 20, 2026
30Monitor	CVE-2026-91345No exploit	Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Clean Content SDK).oracle · outside in technology · CWE-400 Pre-auth Denial of service	High7.5	—	0.4%	Oct 20, 2026
32Monitor	CVE-2026-91346No exploit	Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Clean Content SDK).oracle · outside in technology · CWE-20 Pre-auth	High8.2	—	0.2%	Oct 20, 2026
34Monitor	CVE-2026-91347No exploit	Vulnerability in the iSupport product of Oracle E-Business Suite (component: Service Requests).oracle corporation · isupport · CWE-284 Broken access control (IDOR)	High8.5	—	0.3%	Oct 20, 2026
33Monitor	CVE-2026-91348No exploit	Vulnerability in the Oracle Solaris product of Oracle Systems (component: Utility).oracle · solaris · CWE-269 Local privilege escalation	High8.4	—	0.1%	Oct 20, 2026
30Monitor	CVE-2026-91349No exploit	Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Clean Content SDK).oracle · outside in technology · CWE-400 Pre-auth Denial of service	High7.5	—	0.3%	Oct 20, 2026
30Monitor	CVE-2026-91350No exploit	Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Clean Content SDK).oracle · outside in technology · CWE-400 Pre-auth Denial of service	High7.5	—	0.4%	Oct 20, 2026
34Monitor	CVE-2026-91353No exploit	Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Clean Content SDK).oracle · outside in technology · CWE-200 Pre-auth Info leak	High8.6	—	0.4%	Oct 20, 2026
39Monitor	CVE-2026-91354No exploit	Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Clean Content SDK).oracle · outside in technology · CWE-284 Broken access control (IDOR)	Critical9.9	—	0.3%	Oct 20, 2026
33Monitor	CVE-2026-91355No exploit	Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Clean Content SDK).oracle · outside in technology · CWE-269 Local privilege escalation	High8.4	—	0.1%	Oct 20, 2026
32Monitor	CVE-2026-91358No exploit	Vulnerability in the Oracle Business Process Management Suite product of Oracle Fusion Middleware (component: Case management Service (11g+oracle · business process management suite · CWE-306 Pre-auth Auth bypass	High8.2	—	0.3%	Oct 20, 2026
30Monitor	CVE-2026-91377No exploit	Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: Open Integration).oracle corporation · siebel crm integration · CWE-200 Pre-auth Info leak	High7.5	—	0.3%	Oct 20, 2026
30Monitor	CVE-2026-91405No exploit	Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In PDF Export SDK).oracle · outside in technology · CWE-20 Pre-auth	High7.5	—	0.3%	Oct 20, 2026
30Monitor	CVE-2026-91406No exploit	Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In PDF Export SDK).oracle · outside in technology · CWE-20 Pre-auth	High7.5	—	0.3%	Oct 20, 2026
35Monitor	CVE-2026-91407No exploit	Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: REST WebServices).oracle · identity manager · CWE-306 Auth bypass	High8.8	—	0.4%	Oct 20, 2026
39Monitor	CVE-2026-91408No exploit	Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: End User Self Service).oracle · identity manager · CWE-287 Pre-auth Auth bypass	Critical9.8	—	0.3%	Oct 20, 2026
28Monitor	CVE-2026-91415No exploit	Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D).oracle corporation · oracle java se · CWE-20 Pre-auth	High7.0	—	0.2%	Oct 20, 2026
31Monitor	CVE-2026-91419No exploit	Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware (component: OSSL Module).oracle · http server · CWE-269 Local privilege escalation	High7.8	—	0.1%	Oct 20, 2026
28Monitor	CVE-2026-91433No exploit	Vulnerability in the Siebel Apps - Field Service product of Oracle Siebel CRM (component: Smart Answer).oracle · siebel crm · CWE-306 Auth bypass	High7.2	—	0.4%	Oct 20, 2026
34Monitor	CVE-2026-91437No exploit	Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure).oracle · siebel crm · CWE-284 Broken access control (IDOR)	High8.7	—	0.3%	Oct 20, 2026
28Monitor	CVE-2026-91438No exploit	Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure).oracle · siebel crm · CWE-284 Broken access control (IDOR)	High7.1	—	0.2%	Oct 20, 2026
35Monitor	CVE-2026-91442No exploit	Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure).oracle · siebel crm · CWE-306 Auth bypass	High8.8	—	0.3%	Oct 20, 2026

CVE-2026-91213
35Monitor
Vulnerability in the Oracle Business Process Management Suite product of Oracle Fusion Middleware (component: BPM Composer).
HighCVSS 8.8No exploitEPSS 0%
- Auth bypass
oracle · business process management suiteOct 20, 2026
CVE-2026-91214
39Monitor
Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer).
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- Auth bypass
oracle · soa suiteOct 20, 2026
CVE-2026-91215
35Monitor
Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer).
HighCVSS 8.8No exploitEPSS 0%
- Broken access control (IDOR)
oracle · soa suiteOct 20, 2026
CVE-2026-91216
40Plan
Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer).
CriticalCVSS 10.0No exploitEPSS 0%
- Pre-auth
- Auth bypass
oracle · soa suiteOct 20, 2026
CVE-2026-91217
34Monitor
Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer).
HighCVSS 8.6No exploitEPSS 0%
- Pre-auth
- Auth bypass
oracle · soa suiteOct 20, 2026
CVE-2026-91218
38Monitor
Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer).
CriticalCVSS 9.6No exploitEPSS 0%
- Broken access control (IDOR)
oracle · soa suiteOct 20, 2026
CVE-2026-91219
34Monitor
Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer).
HighCVSS 8.6No exploitEPSS 0%
- Pre-auth
- Auth bypass
oracle · soa suiteOct 20, 2026
CVE-2026-91220
39Monitor
Vulnerability in the Oracle Business Process Management Suite product of Oracle Fusion Middleware (component: Human Workflow).
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- Auth bypass
oracle · business process management suiteOct 20, 2026
CVE-2026-91221
40Plan
Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer).
CriticalCVSS 10.0No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
oracle · soa suiteOct 20, 2026
CVE-2026-91222
39Monitor
Vulnerability in the Oracle Business Process Management Suite product of Oracle Fusion Middleware (component: Human Workflow (11g+)).
CriticalCVSS 9.9No exploitEPSS 0%
- Auth bypass
oracle · business process management suiteOct 20, 2026
CVE-2026-91223
35Monitor
Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer).
HighCVSS 8.8No exploitEPSS 0%
- Broken access control (IDOR)
oracle · soa suiteOct 20, 2026
CVE-2026-91224
39Monitor
Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer).
CriticalCVSS 9.9No exploitEPSS 0%
- Broken access control (IDOR)
oracle · soa suiteOct 20, 2026
CVE-2026-91225
36Monitor
Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Adapters).
CriticalCVSS 9.1No exploitEPSS 0%
- Pre-auth
- Auth bypass
oracle · soa suiteOct 20, 2026
CVE-2026-91226
30Monitor
Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer).
HighCVSS 7.5No exploitEPSS 0%
- Broken access control (IDOR)
oracle · soa suiteOct 20, 2026
CVE-2026-91227
30Monitor
Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer).
HighCVSS 7.5No exploitEPSS 0%
- Broken access control (IDOR)
oracle · soa suiteOct 20, 2026
CVE-2026-91228
28Monitor
Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer).
HighCVSS 7.1No exploitEPSS 0%
- Broken access control (IDOR)
oracle · soa suiteOct 20, 2026
CVE-2026-91229
30Monitor
Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer).
HighCVSS 7.5No exploitEPSS 0%
- Broken access control (IDOR)
oracle · soa suiteOct 20, 2026
CVE-2026-91230
37Monitor
Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer).
CriticalCVSS 9.3No exploitEPSS 0%
- Pre-auth
- Auth bypass
oracle · soa suiteOct 20, 2026
CVE-2026-91231
40Plan
Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Adapters).
CriticalCVSS 10.0No exploitEPSS 0%
- Pre-auth
- Auth bypass
oracle · soa suiteOct 20, 2026
CVE-2026-91232
39Monitor
Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer).
CriticalCVSS 9.9No exploitEPSS 0%
- Broken access control (IDOR)
oracle · soa suiteOct 20, 2026
CVE-2026-91233
39Monitor
Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Enterprise Scheduling System).
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- Auth bypass
oracle · soa suiteOct 20, 2026
CVE-2026-91234
39Monitor
Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer).
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- Auth bypass
oracle · soa suiteOct 20, 2026
CVE-2026-91235
39Monitor
Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer).
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- Auth bypass
oracle · soa suiteOct 20, 2026
CVE-2026-91236
39Monitor
Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer).
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- Auth bypass
oracle · soa suiteOct 20, 2026
CVE-2026-91237
30Monitor
Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer).
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Auth bypass
oracle · soa suiteOct 20, 2026
CVE-2026-91238
28Monitor
Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer).
HighCVSS 7.1No exploitEPSS 0%
- Denial of service
oracle · soa suiteOct 20, 2026
CVE-2026-91239
35Monitor
Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer).
HighCVSS 8.8No exploitEPSS 0%
- Auth bypass
oracle · soa suiteOct 20, 2026
CVE-2026-91241
36Monitor
Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Analytics Web Administration).
CriticalCVSS 9.1No exploitEPSS 0%
- Broken access control (IDOR)
oracle · business intelligenceOct 20, 2026
CVE-2026-91242
29Monitor
Vulnerability in the Oracle Solaris product of Oracle Systems (component: Plugins).
HighCVSS 7.4No exploitEPSS 0%
- Local privilege escalation
- Broken access control (IDOR)
oracle · solarisOct 20, 2026
CVE-2026-91243
38Monitor
Vulnerability in the Oracle Business Process Management Suite product of Oracle Fusion Middleware (component: Fabric Layer).
CriticalCVSS 9.6No exploitEPSS 0%
- Broken access control (IDOR)
oracle · business process management suiteOct 20, 2026
CVE-2026-91250
39Monitor
Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Adapters).
CriticalCVSS 9.9No exploitEPSS 0%
oracle · soa suiteOct 20, 2026
CVE-2026-91251
39Monitor
Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Adapters).
CriticalCVSS 9.9No exploitEPSS 0%
- Broken access control (IDOR)
oracle · soa suiteOct 20, 2026
CVE-2026-91252
32Monitor
Vulnerability in the Oracle Solaris product of Oracle Systems (component: Services).
HighCVSS 8.2No exploitEPSS 0%
- Pre-auth
- Denial of service
oracle · solarisOct 20, 2026
CVE-2026-91253
31Monitor
Vulnerability in the Oracle Solaris product of Oracle Systems (component: Kernel).
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
oracle · solarisOct 20, 2026
CVE-2026-91254
30Monitor
Vulnerability in the Oracle Solaris product of Oracle Systems (component: Kernel).
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
oracle · solarisOct 20, 2026
CVE-2026-91255
30Monitor
Vulnerability in the Oracle Solaris product of Oracle Systems (component: Kernel).
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
oracle · solarisOct 20, 2026
CVE-2026-91256
28Monitor
Vulnerability in the Oracle Solaris product of Oracle Systems (component: Services).
HighCVSS 7.1No exploitEPSS 0%
- Denial of service
oracle · solarisOct 20, 2026
CVE-2026-91259
35Monitor
Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Legacy UI).
HighCVSS 8.8No exploitEPSS 0%
- Auth bypass
oracle · identity managerOct 20, 2026
CVE-2026-91260
28Monitor
Vulnerability in the iProcurement product of Oracle E-Business Suite (component: E-Content Manager Catalog).
HighCVSS 7.2No exploitEPSS 0%
oracle corporation · iprocurementOct 20, 2026
CVE-2026-91265
36Monitor
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure SEC).
CriticalCVSS 9.1No exploitEPSS 0%
- Pre-auth
- Auth bypass
oracle · jd edwards enterpriseone toolsOct 20, 2026
CVE-2026-91266
33Monitor
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Monitoring and Diagnostics SEC).
HighCVSS 8.4No exploitEPSS 0%
- Local privilege escalation
- Broken access control (IDOR)
oracle · jd edwards enterpriseone toolsOct 20, 2026
CVE-2026-91267
34Monitor
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Interoperability SEC).
HighCVSS 8.6No exploitEPSS 0%
- Pre-auth
- Auth bypass
oracle · jd edwards enterpriseone toolsOct 20, 2026
CVE-2026-91268
35Monitor
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime SEC).
HighCVSS 8.8No exploitEPSS 0%
- Broken access control (IDOR)
oracle · jd edwards enterpriseone toolsOct 20, 2026
CVE-2026-91269
32Monitor
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure SEC).
HighCVSS 8.1No exploitEPSS 0%
- Broken access control (IDOR)
oracle · jd edwards enterpriseone toolsOct 20, 2026
CVE-2026-91270
35Monitor
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Monitoring and Diagnostics SEC).
HighCVSS 8.8No exploitEPSS 0%
- Auth bypass
oracle · jd edwards enterpriseone toolsOct 20, 2026
CVE-2026-91271
32Monitor
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Monitoring and Diagnostics SEC).
HighCVSS 8.1No exploitEPSS 0%
- Broken access control (IDOR)
oracle · jd edwards enterpriseone toolsOct 20, 2026
CVE-2026-91272
29Monitor
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Interoperability SEC).
HighCVSS 7.4No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
oracle · jd edwards enterpriseone toolsOct 20, 2026
CVE-2026-91273
34Monitor
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Object and Env Tech SEC).
HighCVSS 8.6No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
oracle · jd edwards enterpriseone toolsOct 20, 2026
CVE-2026-91286
32Monitor
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Monitoring and Diagnostics SEC).
HighCVSS 8.2No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
oracle · jd edwards enterpriseone toolsOct 20, 2026
CVE-2026-91287
32Monitor
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure SEC).
HighCVSS 8.1No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
oracle · jd edwards enterpriseone toolsOct 20, 2026
CVE-2026-91288
29Monitor
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Interoperability SEC).
HighCVSS 7.4No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
oracle · jd edwards enterpriseone toolsOct 20, 2026
CVE-2026-91295
35Monitor
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure SEC).
HighCVSS 8.8No exploitEPSS 0%
- Auth bypass
oracle · jd edwards enterpriseone toolsOct 20, 2026
CVE-2026-91296
35Monitor
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure SEC).
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- Open redirect
oracle · jd edwards enterpriseone toolsOct 20, 2026
CVE-2026-91299
40Plan
Vulnerability in the JD Edwards EnterpriseOne Orchestrator product of Oracle JD Edwards (component: E1 IOT Orchestrator Security).
CriticalCVSS 10.0No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
oracle · jd edwards enterpriseone orchestratorOct 20, 2026
CVE-2026-91303
35Monitor
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security).
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
oracle · jd edwards enterpriseone toolsOct 20, 2026
CVE-2026-91304
31Monitor
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security).
HighCVSS 7.8No exploitEPSS 0%
- Broken access control (IDOR)
oracle · jd edwards enterpriseone toolsOct 20, 2026
CVE-2026-91305
36Monitor
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security).
CriticalCVSS 9.1No exploitEPSS 0%
- Pre-auth
- Auth bypass
oracle · jd edwards enterpriseone toolsOct 20, 2026
CVE-2026-91306
31Monitor
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security).
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
oracle · jd edwards enterpriseone toolsOct 20, 2026
CVE-2026-91307
30Monitor
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security).
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Info leak
oracle · jd edwards enterpriseone toolsOct 20, 2026
CVE-2026-91308
30Monitor
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security).
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Info leak
oracle · jd edwards enterpriseone toolsOct 20, 2026
CVE-2026-91310
35Monitor
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation SEC).
HighCVSS 8.8No exploitEPSS 0%
- Auth bypass
oracle · jd edwards enterpriseone toolsOct 20, 2026
CVE-2026-91311
31Monitor
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security).
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
oracle · jd edwards enterpriseone toolsOct 20, 2026
CVE-2026-91313
32Monitor
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security).
HighCVSS 8.1No exploitEPSS 0%
- Pre-auth
- Auth bypass
oracle · jd edwards enterpriseone toolsOct 20, 2026
CVE-2026-91314
31Monitor
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security).
HighCVSS 7.8No exploitEPSS 0%
- Broken access control (IDOR)
oracle · jd edwards enterpriseone toolsOct 20, 2026
CVE-2026-91315
31Monitor
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security).
HighCVSS 7.8No exploitEPSS 0%
- Broken access control (IDOR)
oracle · jd edwards enterpriseone toolsOct 20, 2026
CVE-2026-91316
28Monitor
Vulnerability in the iProcurement product of Oracle E-Business Suite (component: E-Content Manager Catalog).
HighCVSS 7.2No exploitEPSS 0%
- Broken access control (IDOR)
oracle corporation · iprocurementOct 20, 2026
CVE-2026-91321
30Monitor
Vulnerability in the iProcurement product of Oracle E-Business Suite (component: Requisition Management).
HighCVSS 7.5No exploitEPSS 0%
- Broken access control (IDOR)
oracle corporation · iprocurementOct 20, 2026
CVE-2026-91323
39Monitor
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- Auth bypass
oracle · weblogic serverOct 20, 2026
CVE-2026-91325
30Monitor
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security).
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Info leak
oracle · jd edwards enterpriseone toolsOct 20, 2026
CVE-2026-91326
35Monitor
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security).
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
oracle · jd edwards enterpriseone toolsOct 20, 2026
CVE-2026-91327
30Monitor
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security).
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
oracle · jd edwards enterpriseone toolsOct 20, 2026
CVE-2026-91328
31Monitor
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Deployment SEC).
HighCVSS 7.8No exploitEPSS 0%
- Open redirect
oracle · jd edwards enterpriseone toolsOct 20, 2026
CVE-2026-91337
29Monitor
Vulnerability in the iProcurement product of Oracle E-Business Suite (component: Internal operations).
HighCVSS 7.4No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
oracle corporation · iprocurementOct 20, 2026
CVE-2026-91338
28Monitor
Vulnerability in the iSupport product of Oracle E-Business Suite (component: Internal operations).
HighCVSS 7.1No exploitEPSS 0%
- Broken access control (IDOR)
oracle corporation · isupportOct 20, 2026
CVE-2026-91340
35Monitor
Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Clean Content SDK).
HighCVSS 8.8No exploitEPSS 0%
- Broken access control (IDOR)
oracle · outside in technologyOct 20, 2026
CVE-2026-91341
36Monitor
Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Clean Content SDK).
CriticalCVSS 9.1No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
oracle · outside in technologyOct 20, 2026
CVE-2026-91342
32Monitor
Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Clean Content SDK).
HighCVSS 8.2No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
oracle · outside in technologyOct 20, 2026
CVE-2026-91343
34Monitor
Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Clean Content SDK).
HighCVSS 8.6No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
oracle · outside in technologyOct 20, 2026
CVE-2026-91344
30Monitor
Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Clean Content SDK).
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
oracle · outside in technologyOct 20, 2026
CVE-2026-91345
30Monitor
Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Clean Content SDK).
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
oracle · outside in technologyOct 20, 2026
CVE-2026-91346
32Monitor
Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Clean Content SDK).
HighCVSS 8.2No exploitEPSS 0%
- Pre-auth
oracle · outside in technologyOct 20, 2026
CVE-2026-91347
34Monitor
Vulnerability in the iSupport product of Oracle E-Business Suite (component: Service Requests).
HighCVSS 8.5No exploitEPSS 0%
- Broken access control (IDOR)
oracle corporation · isupportOct 20, 2026
CVE-2026-91348
33Monitor
Vulnerability in the Oracle Solaris product of Oracle Systems (component: Utility).
HighCVSS 8.4No exploitEPSS 0%
- Local privilege escalation
oracle · solarisOct 20, 2026
CVE-2026-91349
30Monitor
Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Clean Content SDK).
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
oracle · outside in technologyOct 20, 2026
CVE-2026-91350
30Monitor
Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Clean Content SDK).
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
oracle · outside in technologyOct 20, 2026
CVE-2026-91353
34Monitor
Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Clean Content SDK).
HighCVSS 8.6No exploitEPSS 0%
- Pre-auth
- Info leak
oracle · outside in technologyOct 20, 2026
CVE-2026-91354
39Monitor
Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Clean Content SDK).
CriticalCVSS 9.9No exploitEPSS 0%
- Broken access control (IDOR)
oracle · outside in technologyOct 20, 2026
CVE-2026-91355
33Monitor
Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Clean Content SDK).
HighCVSS 8.4No exploitEPSS 0%
- Local privilege escalation
oracle · outside in technologyOct 20, 2026
CVE-2026-91358
32Monitor
Vulnerability in the Oracle Business Process Management Suite product of Oracle Fusion Middleware (component: Case management Service (11g+
HighCVSS 8.2No exploitEPSS 0%
- Pre-auth
- Auth bypass
oracle · business process management suiteOct 20, 2026
CVE-2026-91377
30Monitor
Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: Open Integration).
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Info leak
oracle corporation · siebel crm integrationOct 20, 2026
CVE-2026-91405
30Monitor
Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In PDF Export SDK).
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
oracle · outside in technologyOct 20, 2026
CVE-2026-91406
30Monitor
Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In PDF Export SDK).
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
oracle · outside in technologyOct 20, 2026
CVE-2026-91407
35Monitor
Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: REST WebServices).
HighCVSS 8.8No exploitEPSS 0%
- Auth bypass
oracle · identity managerOct 20, 2026
CVE-2026-91408
39Monitor
Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: End User Self Service).
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- Auth bypass
oracle · identity managerOct 20, 2026
CVE-2026-91415
28Monitor
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D).
HighCVSS 7.0No exploitEPSS 0%
- Pre-auth
oracle corporation · oracle java seOct 20, 2026
CVE-2026-91419
31Monitor
Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware (component: OSSL Module).
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
oracle · http serverOct 20, 2026
CVE-2026-91433
28Monitor
Vulnerability in the Siebel Apps - Field Service product of Oracle Siebel CRM (component: Smart Answer).
HighCVSS 7.2No exploitEPSS 0%
- Auth bypass
oracle · siebel crmOct 20, 2026
CVE-2026-91437
34Monitor
Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure).
HighCVSS 8.7No exploitEPSS 0%
- Broken access control (IDOR)
oracle · siebel crmOct 20, 2026
CVE-2026-91438
28Monitor
Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure).
HighCVSS 7.1No exploitEPSS 0%
- Broken access control (IDOR)
oracle · siebel crmOct 20, 2026
CVE-2026-91442
35Monitor
Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure).
HighCVSS 8.8No exploitEPSS 0%
- Auth bypass
oracle · siebel crmOct 20, 2026