Known Exploited Vulnerabilities (KEV)

ID Title Severity CVSS EPSS Source Updated
cve-2026-101677 Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/J) MEDIUM 4.3 N/A cvelistv5 2026-10-21
cve-2026-101676 Vulnerability in the Oracle Concurrent Processing product of Oracle E-Business Suite (component: Other Issues) HIGH 7.8 N/A cvelistv5 2026-11-03
cve-2026-101675 Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Internal Operations) MEDIUM 6.7 N/A cvelistv5 2026-10-21
cve-2026-101674 Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Internal Operations) MEDIUM 6.7 N/A cvelistv5 2026-10-21
cve-2026-101673 Vulnerability in the Oracle US Federal Human Resources product of Oracle E-Business Suite (component: Internal Operat... MEDIUM 6.5 N/A cvelistv5 2026-10-21
cve-2026-101672 Vulnerability in the Oracle Call Center Technology product of Oracle E-Business Suite (component: Internal Operations) HIGH 8.1 N/A cvelistv5 2026-10-27
cve-2026-101671 Vulnerability in the Oracle Email Center product of Oracle E-Business Suite (component: Message Component) MEDIUM 6.1 N/A cvelistv5 2026-10-21
cve-2026-101670 Vulnerability in the Oracle Email Center product of Oracle E-Business Suite (component: Message Component) MEDIUM 6.5 N/A cvelistv5 2026-10-21
cve-2026-101669 Vulnerability in the Oracle Public Sector Human Resources product of Oracle E-Business Suite (component: Regression T... MEDIUM 6.8 N/A cvelistv5 2026-10-21
cve-2026-101668 Vulnerability in the Oracle Customer Care product of Oracle E-Business Suite (component: Internal Operations) MEDIUM 6.1 N/A cvelistv5 2026-10-21
cve-2026-101667 Vulnerability in the Oracle Trade Management product of Oracle E-Business Suite (component: Claim LOV) MEDIUM 5.4 N/A cvelistv5 2026-10-21
cve-2026-101666 Vulnerability in the Oracle Trade Management product of Oracle E-Business Suite (component: Claim LOV) MEDIUM 5.4 N/A cvelistv5 2026-10-21
cve-2026-101665 Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Admin UI) HIGH 8.1 N/A cvelistv5 2026-10-27
cve-2026-101664 Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Internal Operations) HIGH 8.8 N/A cvelistv5 2026-10-24
cve-2026-101662 Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Admin UI) HIGH 7.1 N/A cvelistv5 2026-10-21
cve-2026-101661 Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Admin UI) HIGH 7.4 N/A cvelistv5 2026-10-21
cve-2026-101660 Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Admin UI) HIGH 7.5 N/A cvelistv5 2026-10-21
cve-2026-101658 Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Admin UI) HIGH 7.4 N/A cvelistv5 2026-10-21
cve-2026-101656 Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Internal Operations) HIGH 8.8 N/A cvelistv5 2026-10-24
cve-2026-101655 Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Internal Operations) HIGH 8.8 N/A cvelistv5 2026-10-24
cve-2026-101654 Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Internal Operations) HIGH 8.8 N/A cvelistv5 2026-10-24
cve-2026-101653 Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Internal Operations) HIGH 8.8 N/A cvelistv5 2026-10-24
cve-2026-101651 Vulnerability in the Oracle Partner Management product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Partner Management. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Partner Management accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N). MEDIUM 6.5 N/A cvelistv5 2026-11-05
cve-2026-101650 Vulnerability in the Oracle Partner Management product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Partner Management. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Partner Management accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Partner Management. CVSS 3.1 Base Score 7.1 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L). HIGH 7.1 N/A cvelistv5 2026-11-05
cve-2026-101649 Vulnerability in the Oracle Partner Management product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTPS to compromise Oracle Partner Management. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Partner Management accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Partner Management. CVSS 3.1 Base Score 7.1 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L). HIGH 7.1 N/A cvelistv5 2026-11-05
cve-2026-101648 Vulnerability in the Oracle Partner Management product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Partner Management. While the vulnerability is in Oracle Partner Management, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Partner Management accessible data as well as unauthorized access to critical data or complete access to all Oracle Partner Management accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Partner Management. CVSS 3.1 Base Score 8.4 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:L). HIGH 8.4 N/A cvelistv5 2026-11-05
cve-2026-101647 Vulnerability in the Oracle iSetup product of Oracle E-Business Suite (component: General Ledger Update Transform, Re... HIGH 7.5 N/A cvelistv5 2026-10-21
cve-2026-101646 Vulnerability in the Oracle iSetup product of Oracle E-Business Suite (component: General Ledger Update Transform, Re... HIGH 7.2 N/A cvelistv5 2026-10-21
cve-2026-101645 Vulnerability in the Oracle iSetup product of Oracle E-Business Suite (component: General Ledger Update Transform, Re... HIGH 7.5 N/A cvelistv5 2026-10-21
cve-2026-101644 Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Internal Operations) MEDIUM 6.6 N/A cvelistv5 2026-10-21