Known Exploited Vulnerabilities (KEV)

ID Title Severity CVSS EPSS Source Updated
cve-2026-91265 Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructur... CRITICAL 9.1 0.42% cvelistv5 2026-11-02
cve-2026-91264 Vulnerability in the PeopleSoft Enterprise SCM Manufacturing product of Oracle PeopleSoft (component: Security) LOW 3.7 0.23% cvelistv5 2026-10-28
cve-2026-91263 Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Notification Configur... MEDIUM 4.9 0.15% cvelistv5 2026-10-28
cve-2026-91262 Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server) MEDIUM 5.4 0.23% cvelistv5 2026-11-03
cve-2026-91261 Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server) LOW 3.1 0.23% cvelistv5 2026-11-03
cve-2026-91260 Vulnerability in the iProcurement product of Oracle E-Business Suite (component: E-Content Manager Catalog) HIGH 7.2 0.32% cvelistv5 2026-10-28
cve-2026-91259 Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Legacy UI) HIGH 8.8 0.39% cvelistv5 2026-11-03
cve-2026-91257 Vulnerability in the iSupport product of Oracle E-Business Suite (component: Service Requests) MEDIUM 6.5 0.36% cvelistv5 2026-10-28
cve-2026-91256 Vulnerability in the Oracle Solaris product of Oracle Systems (component: Services) HIGH 7.1 0.36% cvelistv5 2026-10-28
cve-2026-91255 Vulnerability in the Oracle Solaris product of Oracle Systems (component: Kernel) HIGH 7.5 0.44% cvelistv5 2026-10-22
cve-2026-91254 Vulnerability in the Oracle Solaris product of Oracle Systems (component: Kernel) HIGH 7.5 0.44% cvelistv5 2026-10-22
cve-2026-91253 Vulnerability in the Oracle Solaris product of Oracle Systems (component: Kernel) HIGH 7.8 0.14% cvelistv5 2026-10-28
cve-2026-91252 Vulnerability in the Oracle Solaris product of Oracle Systems (component: Services) HIGH 8.2 0.41% cvelistv5 2026-10-28
cve-2026-91251 Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Adapters) CRITICAL 9.9 0.39% cvelistv5 2026-10-28
cve-2026-91250 Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Adapters) CRITICAL 9.9 0.39% cvelistv5 2026-10-28
cve-2026-91249 Vulnerability in the Oracle Solaris product of Oracle Systems (component: Libraries) LOW 3.3 0.14% cvelistv5 2026-10-28
cve-2026-91248 Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Portal. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle WebCenter Portal accessible data. CVSS 3.1 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N). MEDIUM 5.3 0.32% cvelistv5 2026-11-04
cve-2026-91247 Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Portal. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle WebCenter Portal accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle WebCenter Portal. CVSS 3.1 Base Score 5.9 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:L). MEDIUM 5.9 0.26% cvelistv5 2026-11-04
cve-2026-91246 Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Portal. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle WebCenter Portal, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle WebCenter Portal accessible data as well as unauthorized read access to a subset of Oracle WebCenter Portal accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N). MEDIUM 6.1 0.13% cvelistv5 2026-11-04
cve-2026-91245 Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Portal. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle WebCenter Portal accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N). MEDIUM 6.5 0.34% cvelistv5 2026-11-04
cve-2026-91244 Vulnerability in the Oracle Solaris product of Oracle Systems (component: Services) MEDIUM 4.7 0.11% cvelistv5 2026-10-29
cve-2026-91243 Vulnerability in the Oracle Business Process Management Suite product of Oracle Fusion Middleware (component: Fabric ... CRITICAL 9.6 0.33% cvelistv5 2026-10-28
cve-2026-91242 Vulnerability in the Oracle Solaris product of Oracle Systems (component: Plugins) HIGH 7.4 0.14% cvelistv5 2026-10-28
cve-2026-91241 Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Analytic... CRITICAL 9.1 0.32% cvelistv5 2026-10-28
cve-2026-91240 Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites) MEDIUM 5.9 0.31% cvelistv5 2026-10-28
cve-2026-91239 Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer) HIGH 8.8 0.40% cvelistv5 2026-10-30
cve-2026-91238 Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer) HIGH 7.1 0.36% cvelistv5 2026-10-30
cve-2026-91237 Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer) HIGH 7.5 0.40% cvelistv5 2026-10-30
cve-2026-91236 Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer) CRITICAL 9.8 0.47% cvelistv5 2026-10-30
cve-2026-91235 Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer) CRITICAL 9.8 0.47% cvelistv5 2026-10-30