|
cve-2026-91234
|
Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer) |
CRITICAL
|
9.8
|
N/A
|
cvelistv5 |
2026-10-30 |
|
cve-2026-91233
|
Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Enterprise Scheduling System) |
CRITICAL
|
9.8
|
N/A
|
cvelistv5 |
2026-10-30 |
|
cve-2026-91232
|
Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle SOA Suite. While the vulnerability is in Oracle SOA Suite, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of Oracle SOA Suite. CVSS 3.1 Base Score 9.9 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H). |
CRITICAL
|
9.9
|
N/A
|
cvelistv5 |
2026-11-04 |
|
cve-2026-91231
|
Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Adapters). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle SOA Suite. While the vulnerability is in Oracle SOA Suite, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of Oracle SOA Suite. CVSS 3.1 Base Score 10.0 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H). |
CRITICAL
|
10.0
|
N/A
|
cvelistv5 |
2026-11-04 |
|
cve-2026-91230
|
Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer) |
CRITICAL
|
9.3
|
N/A
|
cvelistv5 |
2026-10-30 |
|
cve-2026-91229
|
Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle SOA Suite. Successful attacks of this vulnerability can result in takeover of Oracle SOA Suite. CVSS 3.1 Base Score 7.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H). |
HIGH
|
7.5
|
N/A
|
cvelistv5 |
2026-11-04 |
|
cve-2026-91228
|
Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer) |
HIGH
|
7.1
|
N/A
|
cvelistv5 |
2026-10-30 |
|
cve-2026-91227
|
Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle SOA Suite. Successful attacks of this vulnerability can result in takeover of Oracle SOA Suite. CVSS 3.1 Base Score 7.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H). |
HIGH
|
7.5
|
N/A
|
cvelistv5 |
2026-11-04 |
|
cve-2026-91226
|
Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle SOA Suite. Successful attacks of this vulnerability can result in takeover of Oracle SOA Suite. CVSS 3.1 Base Score 7.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H). |
HIGH
|
7.5
|
N/A
|
cvelistv5 |
2026-11-04 |
|
cve-2026-91225
|
Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Adapters) |
CRITICAL
|
9.1
|
N/A
|
cvelistv5 |
2026-10-30 |
|
cve-2026-91224
|
Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle SOA Suite. While the vulnerability is in Oracle SOA Suite, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of Oracle SOA Suite. CVSS 3.1 Base Score 9.9 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H). |
CRITICAL
|
9.9
|
N/A
|
cvelistv5 |
2026-11-04 |
|
cve-2026-91223
|
Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle SOA Suite. Successful attacks of this vulnerability can result in takeover of Oracle SOA Suite. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H). |
HIGH
|
8.8
|
N/A
|
cvelistv5 |
2026-11-04 |
|
cve-2026-91222
|
Vulnerability in the Oracle Business Process Management Suite product of Oracle Fusion Middleware (component: Human W... |
CRITICAL
|
9.9
|
N/A
|
cvelistv5 |
2026-10-29 |
|
cve-2026-91221
|
Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3, IIOP to compromise Oracle SOA Suite. While the vulnerability is in Oracle SOA Suite, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of Oracle SOA Suite. CVSS 3.1 Base Score 10.0 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H). |
CRITICAL
|
10.0
|
N/A
|
cvelistv5 |
2026-11-04 |
|
cve-2026-91220
|
Vulnerability in the Oracle Business Process Management Suite product of Oracle Fusion Middleware (component: Human W... |
CRITICAL
|
9.8
|
N/A
|
cvelistv5 |
2026-10-21 |
|
cve-2026-91219
|
Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer) |
HIGH
|
8.6
|
N/A
|
cvelistv5 |
2026-10-30 |
|
cve-2026-91218
|
Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer) |
CRITICAL
|
9.6
|
N/A
|
cvelistv5 |
2026-10-30 |
|
cve-2026-91217
|
Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer) |
HIGH
|
8.6
|
N/A
|
cvelistv5 |
2026-10-30 |
|
cve-2026-91216
|
Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer) |
CRITICAL
|
10.0
|
N/A
|
cvelistv5 |
2026-10-30 |
|
cve-2026-91215
|
Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle SOA Suite. Successful attacks of this vulnerability can result in takeover of Oracle SOA Suite. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H). |
HIGH
|
8.8
|
N/A
|
cvelistv5 |
2026-11-04 |
|
cve-2026-91214
|
Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer) |
CRITICAL
|
9.8
|
N/A
|
cvelistv5 |
2026-10-30 |
|
cve-2026-91213
|
Vulnerability in the Oracle Business Process Management Suite product of Oracle Fusion Middleware (component: BPM Com... |
HIGH
|
8.8
|
N/A
|
cvelistv5 |
2026-10-29 |
|
cve-2026-91212
|
Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Generic REST) |
HIGH
|
8.6
|
N/A
|
cvelistv5 |
2026-10-28 |
|
cve-2026-91211
|
Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Connectors and... |
HIGH
|
8.7
|
N/A
|
cvelistv5 |
2026-10-28 |
|
cve-2026-91210
|
Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server) |
MEDIUM
|
6.5
|
N/A
|
cvelistv5 |
2026-11-03 |
|
cve-2026-91209
|
Vulnerability in the Oracle Solaris product of Oracle Systems (component: X Window System) |
MEDIUM
|
4.2
|
N/A
|
cvelistv5 |
2026-10-28 |
|
cve-2026-91208
|
Vulnerability in the Oracle Solaris product of Oracle Systems (component: Services) |
MEDIUM
|
5.1
|
N/A
|
cvelistv5 |
2026-10-28 |
|
cve-2026-89425
|
com.fasterxml.jackson.core/jackson-core: Jackson-core: Denial of Service via unbounded StringBuilder growth during malformed token processing |
HIGH
|
7.5
|
N/A
|
cvelistv5 |
2026-09-28 |
|
cve-2026-89407
|
SUSE CVE CVE-2026-89407 |
HIGH
|
7.5
|
N/A
|
cvelistv5 |
2026-10-03 |
|
cve-2026-8932
|
libcurl: libcurl: Security feature bypass due to improper mTLS connection reuse |
HIGH
|
7.5
|
N/A
|
cvelistv5 |
2026-09-01 |
ndaal KEV