Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-101846 | low | 3.5 | No | Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affe... | 2026-10-27 |
| CVE-2026-101845 | low | 3.1 | No | Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affe... | 2026-10-27 |
| CVE-2026-101844 | low | 3.1 | No | Vulnerability in the Oracle Concurrent Processing product of Oracle E-Business Suite (component: Concurrent Requests). Supported versions th... | 2026-10-27 |
| CVE-2026-101843 | medium | 4.5 | No | Vulnerability in the Production Scheduling product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are... | 2026-10-27 |
| CVE-2026-101840 | high | 7.2 | No | Vulnerability in the Oracle Contract Lifecycle Management for Public Sector product of Oracle E-Business Suite (component: Award/PO). Suppor... | 2026-10-27 |
| CVE-2026-101837 | high | 7.7 | No | Vulnerability in the Oracle Shipping Execution product of Oracle E-Business Suite (component: Workflow Events). Supported versions that are... | 2026-10-27 |
| CVE-2026-101836 | medium | 6.5 | No | Vulnerability in the iSupplier Portal product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affec... | 2026-10-27 |
| CVE-2026-101835 | high | 7.5 | No | Vulnerability in the Oracle Shipping Execution product of Oracle E-Business Suite (component: Workflow Events). Supported versions that are... | 2026-10-27 |
| CVE-2026-101833 | high | 7.6 | No | Vulnerability in the Oracle Shipping Execution product of Oracle E-Business Suite (component: Internal Operations). Supported versions that... | 2026-10-27 |
| CVE-2026-101832 | medium | 6.5 | No | Vulnerability in the Oracle Order Management product of Oracle E-Business Suite (component: Product Diagnostic Tools). Supported versions th... | 2026-10-27 |
| CVE-2026-101387 | high | 7.6 | No | Vulnerability in the Oracle Capacity product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affect... | 2026-10-27 |
| CVE-2026-101386 | medium | 4.2 | No | Vulnerability in Oracle REST Data Services (component: Core). Supported versions that are affected are 24.2.0-26.1.0. Difficult to exploit v... | 2026-10-27 |
| CVE-2026-101385 | medium | 4.9 | No | Vulnerability in Oracle REST Data Services (component: Core). Supported versions that are affected are 24.2.0-26.1.0. Easily exploitable vul... | 2026-10-27 |
| CVE-2026-101384 | medium | 5.0 | No | Vulnerability in Oracle REST Data Services (component: Core). Supported versions that are affected are 24.2.0-26.1.0. Easily exploitable vul... | 2026-10-27 |
| CVE-2026-101383 | medium | 5.4 | No | Vulnerability in Oracle REST Data Services (component: Core). Supported versions that are affected are 24.2.0-26.1.0. Easily exploitable vul... | 2026-10-27 |
| CVE-2026-101382 | medium | 4.2 | No | Vulnerability in Oracle REST Data Services (component: Core). Supported versions that are affected are 24.2.0-26.1.0. Difficult to exploit v... | 2026-10-27 |
| CVE-2026-101381 | medium | 5.4 | No | Vulnerability in Oracle REST Data Services (component: ADP). Supported versions that are affected are 24.2.0-26.1.0. Easily exploitable vuln... | 2026-10-27 |
| CVE-2016-20101 | high | 8.1 | No | Issuu Panel plugin for WordPress before 1.6.6 contains a PHP file inclusion vulnerability that allows unauthenticated attackers to include r... | 2026-10-27 |
| CVE-2015-20123 | high | 7.5 | No | Aspose Doc Exporter plugin for WordPress before 2.0 contains a path traversal vulnerability that allows unauthenticated attackers to downloa... | 2026-10-27 |
| CVE-2012-20005 | medium | 6.1 | No | SocialFit plugin for WordPress through 1.2.2 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers t... | 2026-10-27 |