Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-91355 | high | 8.4 | No | Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Clean Content SDK). The support... | 2026-10-28 |
| CVE-2026-91354 | critical | 9.9 | No | Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Clean Content SDK). The support... | 2026-10-28 |
| CVE-2026-91353 | high | 8.6 | No | Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Clean Content SDK). The support... | 2026-10-28 |
| CVE-2026-91351 | medium | 6.1 | No | Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Clean Content SDK). The support... | 2026-10-28 |
| CVE-2026-91343 | high | 8.6 | No | Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Clean Content SDK). The support... | 2026-10-28 |
| CVE-2026-91338 | high | 7.1 | No | Vulnerability in the iSupport product of Oracle E-Business Suite (component: Internal operations). Supported versions that are affected are... | 2026-10-28 |
| CVE-2026-91337 | high | 7.4 | No | Vulnerability in the iProcurement product of Oracle E-Business Suite (component: Internal operations). Supported versions that are affected... | 2026-10-28 |
| CVE-2026-91336 | medium | 6.5 | No | Vulnerability in the Oracle Solaris product of Oracle Systems (component: Utility). The supported version that is affected is 11.4. Easily e... | 2026-10-28 |
| CVE-2026-91335 | low | 2.6 | No | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: AWT). S... | 2026-10-28 |
| CVE-2026-91334 | low | 3.7 | No | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: ImageIO... | 2026-10-28 |
| CVE-2026-91333 | low | 3.7 | No | Vulnerability in Oracle Java SE (component: Security). Supported versions that are affected are Oracle Java SE: 21.0.12.1, 25.0.4.1 and 27.... | 2026-10-28 |
| CVE-2026-91331 | low | 3.8 | No | Vulnerability in the PeopleSoft Enterprise CC Common Application Objects product of Oracle PeopleSoft (component: Common Application Objects... | 2026-10-28 |
| CVE-2026-91330 | low | 3.3 | No | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security). Supported versions that... | 2026-10-28 |
| CVE-2026-91329 | medium | 6.5 | No | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security). Supported versions that... | 2026-10-28 |
| CVE-2026-84725 | high | 8.1 | No | when EAP runs with -secmgr, the openjdk-orb's JDKBridge honours attacker-supplied CDR codebase URLs during object unmarshalling on :3528, al... | 2026-10-28 |
| CVE-2026-91328 | high | 7.8 | No | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Deployment SEC). Supported versions that are af... | 2026-10-28 |
| CVE-2026-91327 | high | 7.5 | No | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security). Supported versions that... | 2026-10-28 |
| CVE-2026-91326 | high | 8.8 | No | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security). Supported versions that... | 2026-10-28 |
| CVE-2026-39795 | critical | 9.3 | No | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in brewlabs SendPress Newsletters sendpre... | 2026-10-28 |
| CVE-2026-83500 | medium | 6.1 | No | Url redirection to untrusted site ('open redirect') in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a... | 2026-10-28 |