THE LATEST / SECURITY & VULNERABILITIES
Threat News
Recent vulnerabilities and security advisories, straight from the source.
Every cached source, newest first. All entries link to the original publisher.
For severity filtering, choose All CVEs above. Scores are available for NVD entries when supplied by an assessor. A severity filter excludes unscored entries; choose “Unscored / not supplied” to see them. Severity describes technical impact, not exploitation or risk.
16,370 stories · Past 30 days · Newest first
Subscribe to this view · RSSSource updates · Some delayed
- NVDUpdates delayed · Checked
- CISA · Known ExploitedUp to date · Checked
- CISA · IndustrialUpdates delayed · Checked
- CERT-EUUp to date · Checked
Sources refresh hourly; NVD every two hours. Available stories remain readable while a source recovers.
- NVD
CVE-2026-101717 — Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Security). The supported version that is af…
Medium · CVSS 3.1 6.4 · Assessor: [email protected]
Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Security). The supported version that is affected is 9.3.6. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Agile PLM executes to compromise Oracle Agile PLM. While the vulnerability is in Oracle Agile PLM, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical data or com…
CVE-2026-101717Read original ↗ (opens in a new tab) - NVD
CVE-2026-101716 — Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Web Client). The supported version that is…
Medium · CVSS 3.1 5.3 · Assessor: [email protected]
Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Web Client). The supported version that is affected is 9.3.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Agile PLM. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Agile PLM accessible data. CVSS 3.1 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).
CVE-2026-101716Read original ↗ (opens in a new tab) - NVD
CVE-2026-101715 — Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Application Server). The supported version…
Medium · CVSS 3.1 6.5 · Assessor: [email protected]
Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Application Server). The supported version that is affected is 9.3.6. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Agile PLM. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Agile PLM accessible data as well as unauthorized update, insert or delete access to some of Oracle Agile PLM acces…
CVE-2026-101715Read original ↗ (opens in a new tab) - NVD
CVE-2026-101714 — Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Web Client). The supported version that is…
Medium · CVSS 3.1 6.1 · Assessor: [email protected]
Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Web Client). The supported version that is affected is 9.3.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Agile PLM. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Agile PLM, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can r…
CVE-2026-101714Read original ↗ (opens in a new tab) - NVD
CVE-2026-101713 — Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Application Server). The supported version…
Medium · CVSS 3.1 5.4 · Assessor: [email protected]
Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Application Server). The supported version that is affected is 9.3.6. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Agile PLM. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Agile PLM, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerabilit…
CVE-2026-101713Read original ↗ (opens in a new tab) - NVD
CVE-2026-101712 — Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Internal Operations). Supported versions…
High · CVSS 3.1 7.5 · Assessor: [email protected]
Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Payroll. Successful attacks of this vulnerability can result in takeover of Oracle Payroll. CVSS 3.1 Base Score 7.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H).
CVE-2026-101712Read original ↗ (opens in a new tab) - NVD
CVE-2026-101711 — Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Payroll). Supported versions that are aff…
Medium · CVSS 3.1 6.6 · Assessor: [email protected]
Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Payroll). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Payroll. Successful attacks of this vulnerability can result in takeover of Oracle Payroll. CVSS 3.1 Base Score 6.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H).
CVE-2026-101711Read original ↗ (opens in a new tab) - NVD
CVE-2026-101710 — Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Internal Operations). Supported versions…
Medium · CVSS 3.1 6.8 · Assessor: [email protected]
Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Payroll. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Payroll accessible data as well as unauthorized access to critical data or complete access…
CVE-2026-101710Read original ↗ (opens in a new tab) - NVD
CVE-2026-101709 — Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Internal Operations). Supported versions…
Medium · CVSS 3.1 5.4 · Assessor: [email protected]
Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Payroll. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Payroll, attacks may significantly impact additional products (scope change). Successful attacks of this vulne…
CVE-2026-101709Read original ↗ (opens in a new tab) - NVD
CVE-2026-101708 — Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Internal Operations). Supported versions…
High · CVSS 3.1 7.5 · Assessor: [email protected]
Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Payroll. Successful attacks of this vulnerability can result in takeover of Oracle Payroll. CVSS 3.1 Base Score 7.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H).
CVE-2026-101708Read original ↗ (opens in a new tab) - NVD
CVE-2026-101707 — Vulnerability in the Oracle Concurrent Processing product of Oracle E-Business Suite (component: Other Issues). Supported ve…
High · CVSS 3.1 7.4 · Assessor: [email protected]
Vulnerability in the Oracle Concurrent Processing product of Oracle E-Business Suite (component: Other Issues). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Concurrent Processing. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Concurrent Processing accessible data as well as unauthorized access…
CVE-2026-101707Read original ↗ (opens in a new tab) - NVD
CVE-2026-101706 — Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite (component: Documents). Supported vers…
Medium · CVSS 3.1 6.5 · Assessor: [email protected]
Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite (component: Documents). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle One-to-One Fulfillment. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle One-to-One Fulfillment accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality impacts)…
CVE-2026-101706Read original ↗ (opens in a new tab) - NVD
CVE-2026-101705 — Vulnerability in the Oracle Common Applications product of Oracle E-Business Suite (component: Role Summary). Supported vers…
High · CVSS 3.1 7.7 · Assessor: [email protected]
Vulnerability in the Oracle Common Applications product of Oracle E-Business Suite (component: Role Summary). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Common Applications. While the vulnerability is in Oracle Common Applications, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized creation, deletion…
CVE-2026-101705Read original ↗ (opens in a new tab) - NVD
CVE-2026-101704 — Vulnerability in the Oracle Concurrent Processing product of Oracle E-Business Suite (component: Other). Supported versions…
High · CVSS 3.1 8.2 · Assessor: [email protected]
Vulnerability in the Oracle Concurrent Processing product of Oracle E-Business Suite (component: Other). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Concurrent Processing executes to compromise Oracle Concurrent Processing. While the vulnerability is in Oracle Concurrent Processing, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability c…
CVE-2026-101704Read original ↗ (opens in a new tab) - NVD
CVE-2026-101703 — Vulnerability in the Pasta product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are…
High · CVSS 3.1 7.5 · Assessor: [email protected]
Vulnerability in the Pasta product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Pasta. Successful attacks of this vulnerability can result in takeover of Pasta. CVSS 3.1 Base Score 7.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H).
CVE-2026-101703Read original ↗ (opens in a new tab) - NVD
CVE-2026-101701 — Vulnerability in the Oracle Concurrent Processing product of Oracle E-Business Suite (component: Request Submission and Sche…
Medium · CVSS 3.1 6.0 · Assessor: [email protected]
Vulnerability in the Oracle Concurrent Processing product of Oracle E-Business Suite (component: Request Submission and Scheduling). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Concurrent Processing executes to compromise Oracle Concurrent Processing. While the vulnerability is in Oracle Concurrent Processing, attacks may significantly impact additional products (scope change). Successful att…
CVE-2026-101701Read original ↗ (opens in a new tab) - NVD
CVE-2026-101700 — Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Core). Supported versi…
High · CVSS 3.1 8.1 · Assessor: [email protected]
Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Core). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Application Object Library. Successful attacks of this vulnerability can result in takeover of Oracle Application Object Library. CVSS 3.1 Base Score 8.1 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N…
CVE-2026-101700Read original ↗ (opens in a new tab) - NVD
CVE-2026-101699 — Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite (component: Documents). Supported vers…
High · CVSS 3.1 7.5 · Assessor: [email protected]
Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite (component: Documents). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle One-to-One Fulfillment. Successful attacks of this vulnerability can result in takeover of Oracle One-to-One Fulfillment. CVSS 3.1 Base Score 7.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR…
CVE-2026-101699Read original ↗ (opens in a new tab) - NVD
CVE-2026-101698 — Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite (component: Java Server Issues). Suppo…
High · CVSS 3.1 7.5 · Assessor: [email protected]
Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite (component: Java Server Issues). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle One-to-One Fulfillment. Successful attacks of this vulnerability can result in takeover of Oracle One-to-One Fulfillment. CVSS 3.1 Base Score 7.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:…
CVE-2026-101698Read original ↗ (opens in a new tab) - NVD
CVE-2026-101697 — Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite (component: Admin Console UI). Support…
Medium · CVSS 3.1 6.1 · Assessor: [email protected]
Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite (component: Admin Console UI). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle One-to-One Fulfillment. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle One-to-One Fulfillment, attacks may significantly impact additional products (scop…
CVE-2026-101697Read original ↗ (opens in a new tab) - NVD
CVE-2026-101696 — Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Core). Supported versi…
Medium · CVSS 3.1 6.8 · Assessor: [email protected]
Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Core). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Application Object Library. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical da…
CVE-2026-101696Read original ↗ (opens in a new tab) - NVD
CVE-2026-101695 — Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite (component: Documents). Supported vers…
Medium · CVSS 3.1 6.8 · Assessor: [email protected]
Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite (component: Documents). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle One-to-One Fulfillment. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle One-to-One Fulfillment accessible data and unauthorized ability to caus…
CVE-2026-101695Read original ↗ (opens in a new tab) - NVD
CVE-2026-101694 — Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Admin UI). Supported version…
High · CVSS 3.1 7.2 · Assessor: [email protected]
Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Admin UI). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTPS to compromise Oracle Mobile Field Service. Successful attacks of this vulnerability can result in takeover of Oracle Mobile Field Service. CVSS 3.1 Base Score 7.2 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N…
CVE-2026-101694Read original ↗ (opens in a new tab) - NVD
CVE-2026-101692 — Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Admin UI). Supported version…
High · CVSS 3.1 8.8 · Assessor: [email protected]
Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Admin UI). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Mobile Field Service. Successful attacks of this vulnerability can result in takeover of Oracle Mobile Field Service. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S…
CVE-2026-101692Read original ↗ (opens in a new tab) - NVD
CVE-2026-101690 — Vulnerability in the Oracle E-Business Suite Integrated SOA Gateway product of Oracle E-Business Suite (component: SOA Provi…
High · CVSS 3.1 8.2 · Assessor: [email protected]
Vulnerability in the Oracle E-Business Suite Integrated SOA Gateway product of Oracle E-Business Suite (component: SOA Provider). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle E-Business Suite Integrated SOA Gateway. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle E-Business Suite Integrated SOA Gateway accessible…
CVE-2026-101690Read original ↗ (opens in a new tab)
Summaries are excerpts from the publishers. The default Advisories view includes CISA KEV, CISA Industrial and CERT-EU. When several scores exist, PATCHBAY shows the newest valid CVSS version, then prefers a primary assessment, NVD, and a stable assessor ordering. Open the original for all assessments. CISA Known Exploited dates indicate catalog additions. This product uses data from the NVD API but is not endorsed or certified by the NVD.