Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-108014 | not reported | — | No | Private keys for eight eMudhra intermediate CA certificates have been compromised https://emudhra.we-have-a-problem.com/ , which impacts cer... | 2026-10-28 |
| CVE-2026-102638 | high | 7.1 | No | A maliciously crafted HTML payload in the description of an electronic library (.lbr) file, when displayed in the Library Manager after the... | 2026-10-28 |
| CVE-2026-102637 | high | 7.1 | No | A maliciously crafted HTML payload in the documentName parameter of a Fusion protocol URL, when the protocol URL is invoked by a user, can t... | 2026-10-28 |
| CVE-2026-102636 | high | 7.1 | No | A maliciously crafted HTML payload in a design name, when displayed after another user opens the manipulated design, can trigger a Stored Cr... | 2026-10-28 |
| CVE-2026-87397 | high | 8.8 | No | Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Core). The supported version th... | 2026-10-28 |
| CVE-2026-87396 | medium | 6.5 | No | Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Core). The supported version th... | 2026-10-28 |
| CVE-2026-87394 | high | 8.2 | No | Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Core). The supported version th... | 2026-10-28 |
| CVE-2026-87393 | medium | 6.5 | No | Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Core). The supported version th... | 2026-10-28 |
| CVE-2026-87392 | medium | 6.5 | No | Vulnerability in the WebCenter Content: Imaging product of Oracle Fusion Middleware (component: Core). The supported version that is affecte... | 2026-10-28 |
| CVE-2026-87391 | medium | 5.5 | No | Vulnerability in the WebCenter Content: Imaging product of Oracle Fusion Middleware (component: Core). Supported versions that are affected... | 2026-10-28 |
| CVE-2026-87390 | medium | 5.4 | No | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are a... | 2026-10-28 |
| CVE-2026-87389 | low | 3.7 | No | Vulnerability in the JD Edwards EnterpriseOne Human Resources Management product of Oracle JD Edwards (component: Human Resources). The supp... | 2026-10-28 |
| CVE-2026-87388 | medium | 5.3 | No | Vulnerability in the JD Edwards EnterpriseOne Configurator product of Oracle JD Edwards (component: Configuration Management). The supported... | 2026-10-28 |
| CVE-2026-87387 | medium | 6.5 | No | Vulnerability in the JD Edwards EnterpriseOne Homebuilder product of Oracle JD Edwards (component: Homebuilder Management). The supported ve... | 2026-10-28 |
| CVE-2026-87386 | medium | 5.3 | No | Vulnerability in the JD Edwards EnterpriseOne General Ledger product of Oracle JD Edwards (component: E1 Foundation). The supported version... | 2026-10-28 |
| CVE-2026-87385 | medium | 4.8 | No | Vulnerability in the JD Edwards EnterpriseOne Human Resources Management product of Oracle JD Edwards (component: Human Resources). The supp... | 2026-10-28 |
| CVE-2026-87384 | medium | 5.4 | No | Vulnerability in the JD Edwards EnterpriseOne Human Resources Management product of Oracle JD Edwards (component: Human Resources). The supp... | 2026-10-28 |
| CVE-2026-87383 | medium | 6.7 | No | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Package Build SEC). Supported versions that are... | 2026-10-28 |
| CVE-2026-87382 | medium | 6.5 | No | Vulnerability in the JD Edwards EnterpriseOne Operational Sourcing product of Oracle JD Edwards (component: Operational Sourcing). The suppo... | 2026-10-28 |
| CVE-2026-87381 | medium | 5.4 | No | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Business Logic Infra SEC). Supported versions t... | 2026-10-28 |