Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-91645 | medium | 5.3 | No | Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerabilit... | 2026-10-27 |
| CVE-2026-91644 | critical | 9.3 | No | Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerabilit... | 2026-10-27 |
| CVE-2026-91643 | medium | 5.3 | No | Vulnerability in Oracle Essbase (component: Java Based Agent). The supported version that is affected is 21.8.3.0.0. Easily exploitable vuln... | 2026-10-27 |
| CVE-2026-91642 | high | 7.3 | No | Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerabilit... | 2026-10-27 |
| CVE-2026-91641 | medium | 5.0 | No | Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerabilit... | 2026-10-27 |
| CVE-2026-91640 | medium | 5.0 | No | Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerabilit... | 2026-10-27 |
| CVE-2026-91639 | high | 7.7 | No | Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerabilit... | 2026-10-27 |
| CVE-2026-91636 | high | 7.7 | No | Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerabilit... | 2026-10-27 |
| CVE-2026-91634 | medium | 5.3 | No | Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerabilit... | 2026-10-27 |
| CVE-2026-83367 | high | 7.4 | No | Vulnerability in the Oracle Shipping Execution product of Oracle E-Business Suite (component: Workflow Events). Supported versions that are... | 2026-10-27 |
| CVE-2026-83358 | medium | 6.5 | No | Vulnerability in the Oracle HRMS (Norway) product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are a... | 2026-10-27 |
| CVE-2026-83139 | medium | 6.5 | No | Vulnerability in the Oracle Order Management product of Oracle E-Business Suite (component: Product Diagnostic Tools). Supported versions th... | 2026-10-27 |
| CVE-2026-73964 | low | 2.7 | No | Vulnerability in the RDBMS component of Oracle Database Server. Supported versions that are affected are 19.3-19.32 and 21.3-21.23. Easily e... | 2026-10-27 |
| CVE-2026-70860 | medium | 5.9 | No | Vulnerability in the PeopleSoft Enterprise FIN Common Objects Argentina product of Oracle PeopleSoft (component: eProcurement). The supporte... | 2026-10-27 |
| CVE-2026-60876 | medium | 4.2 | No | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Search Framework). The supported version tha... | 2026-10-27 |
| CVE-2026-60746 | medium | 5.9 | No | Vulnerability in the Oracle Order Management product of Oracle E-Business Suite (component: Product Diagnostic Tools). Supported versions th... | 2026-10-27 |
| CVE-2026-60662 | high | 7.8 | No | Vulnerability in the Oracle Solaris product of Oracle Systems (component: Services). The supported version that is affected is 11.4. Easily... | 2026-10-27 |
| CVE-2026-60453 | medium | 5.3 | No | Vulnerability in the Oracle Solaris product of Oracle Systems (component: X Window System). The supported version that is affected is 11.4.... | 2026-10-27 |
| CVE-2026-47025 | high | 8.8 | No | Vulnerability in the Oracle Solaris product of Oracle Systems (component: Utility). Supported versions that are affected are 11.3 and 11.4.... | 2026-10-27 |
| CVE-2026-91767 | medium | 6.5 | No | php_openssl_matches_wildcard_name() in ext/openssl/xp_ssl.c underflows the length argument passed to memchr() when a TLS server certificate... | 2026-10-27 |