THE LATEST / SECURITY & VULNERABILITIES
Threat News
Recent vulnerabilities and security advisories, straight from the source.
The complete recent NVD stream, including unscored entries. All entries link to the original publisher.
For severity filtering, choose All CVEs above. Scores are available for NVD entries when supplied by an assessor. A severity filter excludes unscored entries; choose “Unscored / not supplied” to see them. Severity describes technical impact, not exploitation or risk.
16,435 stories · Past 30 days · Newest first
Subscribe to this view · RSSSource updates · Some delayed
- NVDUpdates delayed · Checked
- CISA · Known ExploitedUp to date · Checked
- CISA · IndustrialUpdates delayed · Checked
- CERT-EUUp to date · Checked
Sources refresh hourly; NVD every two hours. Available stories remain readable while a source recovers.
- NVD
CVE-2026-101845 — Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite (component: Internal Operations). Supported versio…
Low · CVSS 3.1 3.1 · Assessor: [email protected]
Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Purchasing. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Purchasing accessible data. CVSS 3.1 Base Score 3.1 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR…
CVE-2026-101845Read original ↗ (opens in a new tab) - NVD
CVE-2026-101844 — Vulnerability in the Oracle Concurrent Processing product of Oracle E-Business Suite (component: Concurrent Requests). Suppo…
Low · CVSS 3.1 3.1 · Assessor: [email protected]
Vulnerability in the Oracle Concurrent Processing product of Oracle E-Business Suite (component: Concurrent Requests). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Concurrent Processing. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Concurrent Processing accessible data. CVSS 3.1 Base Score 3.1 (Confidentiality impacts). CVSS Vector:…
CVE-2026-101844Read original ↗ (opens in a new tab) - NVD
CVE-2026-101843 — Vulnerability in the Production Scheduling product of Oracle E-Business Suite (component: Internal Operations). Supported ve…
Medium · CVSS 3.1 4.5 · Assessor: [email protected]
Vulnerability in the Production Scheduling product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Production Scheduling executes to compromise Production Scheduling. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Production Scheduling accessible data as well as unauthorized read…
CVE-2026-101843Read original ↗ (opens in a new tab) - NVD
CVE-2026-101842 — Vulnerability in the Strategic Network Optimization product of Oracle E-Business Suite (component: Installation of SNO). Sup…
High · CVSS 3.1 8.8 · Assessor: [email protected]
Vulnerability in the Strategic Network Optimization product of Oracle E-Business Suite (component: Installation of SNO). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Strategic Network Optimization. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of Strategic Network Optimization. CVSS 3.1 Base Scor…
CVE-2026-101842Read original ↗ (opens in a new tab) - NVD
CVE-2026-101841 — Vulnerability in the Global Order Promising product of Oracle E-Business Suite (component: Web Service). Supported versions…
High · CVSS 3.1 8.2 · Assessor: [email protected]
Vulnerability in the Global Order Promising product of Oracle E-Business Suite (component: Web Service). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Global Order Promising. While the vulnerability is in Global Order Promising, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized creation, deletion or modificatio…
CVE-2026-101841Read original ↗ (opens in a new tab) - NVD
CVE-2026-101840 — Vulnerability in the Oracle Contract Lifecycle Management for Public Sector product of Oracle E-Business Suite (component: A…
High · CVSS 3.1 7.2 · Assessor: [email protected]
Vulnerability in the Oracle Contract Lifecycle Management for Public Sector product of Oracle E-Business Suite (component: Award/PO). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Contract Lifecycle Management for Public Sector. Successful attacks of this vulnerability can result in takeover of Oracle Contract Lifecycle Management for Public Sector. CVSS 3.1 Base Score 7.2 (Confidentiality,…
CVE-2026-101840Read original ↗ (opens in a new tab) - NVD
CVE-2026-101837 — Vulnerability in the Oracle Shipping Execution product of Oracle E-Business Suite (component: Workflow Events). Supported ve…
High · CVSS 3.1 7.7 · Assessor: [email protected]
Vulnerability in the Oracle Shipping Execution product of Oracle E-Business Suite (component: Workflow Events). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Shipping Execution. While the vulnerability is in Oracle Shipping Execution, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized ability to cause a h…
CVE-2026-101837Read original ↗ (opens in a new tab) - NVD
CVE-2026-101836 — Vulnerability in the iSupplier Portal product of Oracle E-Business Suite (component: Internal Operations). Supported version…
Medium · CVSS 3.1 6.5 · Assessor: [email protected]
Vulnerability in the iSupplier Portal product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise iSupplier Portal. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all iSupplier Portal accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N…
CVE-2026-101836Read original ↗ (opens in a new tab) - NVD
CVE-2026-101835 — Vulnerability in the Oracle Shipping Execution product of Oracle E-Business Suite (component: Workflow Events). Supported ve…
High · CVSS 3.1 7.5 · Assessor: [email protected]
Vulnerability in the Oracle Shipping Execution product of Oracle E-Business Suite (component: Workflow Events). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Shipping Execution. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Shipping Execution accessible data. CVSS 3.1 Base Score 7.5 (Confidentiality impacts). CVS…
CVE-2026-101835Read original ↗ (opens in a new tab) - NVD
CVE-2026-101834 — Vulnerability in the Oracle Shipping Execution product of Oracle E-Business Suite (component: Workflow Events). Supported ve…
High · CVSS 3.1 8.1 · Assessor: [email protected]
Vulnerability in the Oracle Shipping Execution product of Oracle E-Business Suite (component: Workflow Events). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Shipping Execution. Successful attacks of this vulnerability can result in takeover of Oracle Shipping Execution. CVSS 3.1 Base Score 8.1 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI…
CVE-2026-101834Read original ↗ (opens in a new tab) - NVD
CVE-2026-101833 — Vulnerability in the Oracle Shipping Execution product of Oracle E-Business Suite (component: Internal Operations). Supporte…
High · CVSS 3.1 7.6 · Assessor: [email protected]
Vulnerability in the Oracle Shipping Execution product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Shipping Execution. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Shipping Execution accessible data as well as unauthorized update, insert or delete acc…
CVE-2026-101833Read original ↗ (opens in a new tab) - NVD
CVE-2026-101832 — Vulnerability in the Oracle Order Management product of Oracle E-Business Suite (component: Product Diagnostic Tools). Suppo…
Medium · CVSS 3.1 6.5 · Assessor: [email protected]
Vulnerability in the Oracle Order Management product of Oracle E-Business Suite (component: Product Diagnostic Tools). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Order Management. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Order Management accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality impacts). C…
CVE-2026-101832Read original ↗ (opens in a new tab) - NVD
CVE-2026-101831 — Vulnerability in the Oracle Quality product of Oracle E-Business Suite (component: Internal Operations). Supported versions…
High · CVSS 3.1 8.1 · Assessor: [email protected]
Vulnerability in the Oracle Quality product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Quality. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Quality accessible data as well as unauthorized access to critical data or complete access to…
CVE-2026-101831Read original ↗ (opens in a new tab) - NVD
CVE-2026-101830 — Vulnerability in the Oracle Project Contracts product of Oracle E-Business Suite (component: Internal Operations). Supported…
High · CVSS 3.1 7.7 · Assessor: [email protected]
Vulnerability in the Oracle Project Contracts product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Project Contracts. While the vulnerability is in Oracle Project Contracts, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical da…
CVE-2026-101830Read original ↗ (opens in a new tab) - NVD
CVE-2026-101829 — Vulnerability in the Oracle Mobile Application Server product of Oracle E-Business Suite (component: MWA Terminal Server). S…
High · CVSS 3.1 7.4 · Assessor: [email protected]
Vulnerability in the Oracle Mobile Application Server product of Oracle E-Business Suite (component: MWA Terminal Server). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Mobile Application Server. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Mobile Application Server accessible data as well as u…
CVE-2026-101829Read original ↗ (opens in a new tab) - NVD
CVE-2026-101828 — Vulnerability in the Oracle Mobile Application Server product of Oracle E-Business Suite (component: MWA Terminal Server). S…
Medium · CVSS 3.1 6.5 · Assessor: [email protected]
Vulnerability in the Oracle Mobile Application Server product of Oracle E-Business Suite (component: MWA Terminal Server). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Mobile Application Server. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Mobile Application Server accessible data. CVSS 3.1 Base Score 6.5 (Confi…
CVE-2026-101828Read original ↗ (opens in a new tab) - NVD
CVE-2026-101827 — Vulnerability in the Oracle HCM Common Architecture product of Oracle E-Business Suite (component: Internal Operations). Sup…
High · CVSS 3.1 7.1 · Assessor: [email protected]
Vulnerability in the Oracle HCM Common Architecture product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle HCM Common Architecture. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle HCM Common Architecture accessible data as well as unauthor…
CVE-2026-101827Read original ↗ (opens in a new tab) - NVD
CVE-2026-101826 — Vulnerability in the Oracle HCM Common Architecture product of Oracle E-Business Suite (component: Internal Operations). Sup…
High · CVSS 3.1 7.5 · Assessor: [email protected]
Vulnerability in the Oracle HCM Common Architecture product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle HCM Common Architecture. Successful attacks of this vulnerability can result in takeover of Oracle HCM Common Architecture. CVSS 3.1 Base Score 7.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1…
CVE-2026-101826Read original ↗ (opens in a new tab) - NVD
CVE-2026-101825 — Vulnerability in the Oracle HCM Common Architecture product of Oracle E-Business Suite (component: Internal Operations). Sup…
High · CVSS 3.1 7.5 · Assessor: [email protected]
Vulnerability in the Oracle HCM Common Architecture product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle HCM Common Architecture. Successful attacks of this vulnerability can result in takeover of Oracle HCM Common Architecture. CVSS 3.1 Base Score 7.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1…
CVE-2026-101825Read original ↗ (opens in a new tab) - NVD
CVE-2026-101824 — Vulnerability in the Document Management and Collaboration product of Oracle E-Business Suite (component: Attachments). Supp…
High · CVSS 3.1 8.7 · Assessor: [email protected]
Vulnerability in the Document Management and Collaboration product of Oracle E-Business Suite (component: Attachments). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Document Management and Collaboration. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Document Management and Collaboration, attacks may significantly impact additio…
CVE-2026-101824Read original ↗ (opens in a new tab) - NVD
CVE-2026-101823 — Vulnerability in the Oracle Bills of Material product of Oracle E-Business Suite (component: Internal Operations). Supported…
High · CVSS 3.1 7.5 · Assessor: [email protected]
Vulnerability in the Oracle Bills of Material product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Bills of Material. Successful attacks of this vulnerability can result in takeover of Oracle Bills of Material. CVSS 3.1 Base Score 7.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI…
CVE-2026-101823Read original ↗ (opens in a new tab) - NVD
CVE-2026-101822 — Vulnerability in the Oracle Bills of Material product of Oracle E-Business Suite (component: Internal Operations). Supported…
High · CVSS 3.1 7.2 · Assessor: [email protected]
Vulnerability in the Oracle Bills of Material product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Bills of Material. While the vulnerability is in Oracle Bills of Material, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized creation, deletion…
CVE-2026-101822Read original ↗ (opens in a new tab) - NVD
CVE-2026-101821 — Vulnerability in the Oracle Compensation Workbench product of Oracle E-Business Suite (component: Total Compensation Stateme…
Medium · CVSS 3.1 5.4 · Assessor: [email protected]
Vulnerability in the Oracle Compensation Workbench product of Oracle E-Business Suite (component: Total Compensation Statement). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Compensation Workbench. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Compensation Workbench, attacks may significantly impact additional pro…
CVE-2026-101821Read original ↗ (opens in a new tab) - NVD
CVE-2026-101820 — Vulnerability in the Oracle General Ledger product of Oracle E-Business Suite (component: ADADMIN). Supported versions that…
High · CVSS 3.1 7.5 · Assessor: [email protected]
Vulnerability in the Oracle General Ledger product of Oracle E-Business Suite (component: ADADMIN). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle General Ledger. Successful attacks of this vulnerability can result in takeover of Oracle General Ledger. CVSS 3.1 Base Score 7.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H).
CVE-2026-101820Read original ↗ (opens in a new tab) - NVD
CVE-2026-101819 — Vulnerability in the Oracle General Ledger product of Oracle E-Business Suite (component: Internal Operations). Supported ve…
Medium · CVSS 3.1 6.5 · Assessor: [email protected]
Vulnerability in the Oracle General Ledger product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle General Ledger. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle General Ledger accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality impacts). CVSS Vector:…
CVE-2026-101819Read original ↗ (opens in a new tab)
Summaries are excerpts from the publishers. The default Advisories view includes CISA KEV, CISA Industrial and CERT-EU. When several scores exist, PATCHBAY shows the newest valid CVSS version, then prefers a primary assessment, NVD, and a stable assessor ordering. Open the original for all assessments. CISA Known Exploited dates indicate catalog additions. This product uses data from the NVD API but is not endorsed or certified by the NVD.