THE LATEST / SECURITY & VULNERABILITIES
Threat News
Recent vulnerabilities and security advisories, straight from the source.
Every cached source, newest first. All entries link to the original publisher.
For severity filtering, choose All CVEs above. Scores are available for NVD entries when supplied by an assessor. A severity filter excludes unscored entries; choose “Unscored / not supplied” to see them. Severity describes technical impact, not exploitation or risk.
16,358 stories · Past 30 days · Newest first
Subscribe to this view · RSSSource updates · Some delayed
- NVDUpdates delayed · Checked
- CISA · Known ExploitedUp to date · Checked
- CISA · IndustrialUpdates delayed · Checked
- CERT-EUUp to date · Checked
Sources refresh hourly; NVD every two hours. Available stories remain readable while a source recovers.
- NVD
CVE-2026-101664 — Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Internal Operations). Suppor…
High · CVSS 3.1 8.8 · Assessor: [email protected]
Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Mobile Field Service. Successful attacks of this vulnerability can result in takeover of Oracle Mobile Field Service. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/…
CVE-2026-101664Read original ↗ (opens in a new tab) - NVD
CVE-2026-101662 — Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Admin UI). Supported version…
High · CVSS 3.1 7.1 · Assessor: [email protected]
Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Admin UI). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Mobile Field Service. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Mobile Field Service accessible data as well as unauthorized read access to a…
CVE-2026-101662Read original ↗ (opens in a new tab) - NVD
CVE-2026-101661 — Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Admin UI). Supported version…
High · CVSS 3.1 7.4 · Assessor: [email protected]
Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Admin UI). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Mobile Field Service. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Mobile Field Service accessible data as well as unauthorized access to crit…
CVE-2026-101661Read original ↗ (opens in a new tab) - NVD
CVE-2026-101660 — Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Admin UI). Supported version…
High · CVSS 3.1 7.5 · Assessor: [email protected]
Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Admin UI). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Mobile Field Service. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Mobile Field Service accessible data. CVSS 3.1 Base Score 7.5 (Confidentiality impacts). CVSS…
CVE-2026-101660Read original ↗ (opens in a new tab) - NVD
CVE-2026-101658 — Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Admin UI). Supported version…
High · CVSS 3.1 7.4 · Assessor: [email protected]
Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Admin UI). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Mobile Field Service. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Mobile Field Service accessible data as well as unauthorized access to crit…
CVE-2026-101658Read original ↗ (opens in a new tab) - NVD
CVE-2026-101656 — Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Internal Operations). Suppor…
High · CVSS 3.1 8.8 · Assessor: [email protected]
Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTPS to compromise Oracle Mobile Field Service. Successful attacks of this vulnerability can result in takeover of Oracle Mobile Field Service. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L…
CVE-2026-101656Read original ↗ (opens in a new tab) - NVD
CVE-2026-101655 — Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Internal Operations). Suppor…
High · CVSS 3.1 8.8 · Assessor: [email protected]
Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Mobile Field Service. Successful attacks of this vulnerability can result in takeover of Oracle Mobile Field Service. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/…
CVE-2026-101655Read original ↗ (opens in a new tab) - NVD
CVE-2026-101654 — Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Internal Operations). Suppor…
High · CVSS 3.1 8.8 · Assessor: [email protected]
Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTPS to compromise Oracle Mobile Field Service. Successful attacks of this vulnerability can result in takeover of Oracle Mobile Field Service. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L…
CVE-2026-101654Read original ↗ (opens in a new tab) - NVD
CVE-2026-101653 — Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Internal Operations). Suppor…
High · CVSS 3.1 8.8 · Assessor: [email protected]
Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTPS to compromise Oracle Mobile Field Service. Successful attacks of this vulnerability can result in takeover of Oracle Mobile Field Service. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L…
CVE-2026-101653Read original ↗ (opens in a new tab) - NVD
CVE-2026-101651 — Vulnerability in the Oracle Partner Management product of Oracle E-Business Suite (component: Internal Operations). Supporte…
Medium · CVSS 3.1 6.5 · Assessor: [email protected]
Vulnerability in the Oracle Partner Management product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Partner Management. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Partner Management accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality impacts).…
CVE-2026-101651Read original ↗ (opens in a new tab) - NVD
CVE-2026-101650 — Vulnerability in the Oracle Partner Management product of Oracle E-Business Suite (component: Internal Operations). Supporte…
High · CVSS 3.1 7.1 · Assessor: [email protected]
Vulnerability in the Oracle Partner Management product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Partner Management. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Partner Management accessible data and unauthorized ability to cause a…
CVE-2026-101650Read original ↗ (opens in a new tab) - NVD
CVE-2026-101649 — Vulnerability in the Oracle Partner Management product of Oracle E-Business Suite (component: Internal Operations). Supporte…
High · CVSS 3.1 7.1 · Assessor: [email protected]
Vulnerability in the Oracle Partner Management product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTPS to compromise Oracle Partner Management. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Partner Management accessible data and unauthorized ability to cause a…
CVE-2026-101649Read original ↗ (opens in a new tab) - NVD
CVE-2026-101648 — Vulnerability in the Oracle Partner Management product of Oracle E-Business Suite (component: Internal Operations). Supporte…
High · CVSS 3.1 8.4 · Assessor: [email protected]
Vulnerability in the Oracle Partner Management product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Partner Management. While the vulnerability is in Oracle Partner Management, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized creation, deleti…
CVE-2026-101648Read original ↗ (opens in a new tab) - NVD
CVE-2026-101647 — Vulnerability in the Oracle iSetup product of Oracle E-Business Suite (component: General Ledger Update Transform, Reports).…
High · CVSS 3.1 7.5 · Assessor: [email protected]
Vulnerability in the Oracle iSetup product of Oracle E-Business Suite (component: General Ledger Update Transform, Reports). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle iSetup. Successful attacks of this vulnerability can result in takeover of Oracle iSetup. CVSS 3.1 Base Score 7.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I…
CVE-2026-101647Read original ↗ (opens in a new tab) - NVD
CVE-2026-101646 — Vulnerability in the Oracle iSetup product of Oracle E-Business Suite (component: General Ledger Update Transform, Reports).…
High · CVSS 3.1 7.2 · Assessor: [email protected]
Vulnerability in the Oracle iSetup product of Oracle E-Business Suite (component: General Ledger Update Transform, Reports). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle iSetup. Successful attacks of this vulnerability can result in takeover of Oracle iSetup. CVSS 3.1 Base Score 7.2 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:…
CVE-2026-101646Read original ↗ (opens in a new tab) - NVD
CVE-2026-101645 — Vulnerability in the Oracle iSetup product of Oracle E-Business Suite (component: General Ledger Update Transform, Reports).…
High · CVSS 3.1 7.5 · Assessor: [email protected]
Vulnerability in the Oracle iSetup product of Oracle E-Business Suite (component: General Ledger Update Transform, Reports). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle iSetup. Successful attacks of this vulnerability can result in takeover of Oracle iSetup. CVSS 3.1 Base Score 7.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I…
CVE-2026-101645Read original ↗ (opens in a new tab) - NVD
CVE-2026-101644 — Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Internal Operations). Suppor…
Medium · CVSS 3.1 6.6 · Assessor: [email protected]
Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Mobile Field Service. Successful attacks of this vulnerability can result in takeover of Oracle Mobile Field Service. CVSS 3.1 Base Score 6.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC…
CVE-2026-101644Read original ↗ (opens in a new tab) - NVD
CVE-2026-101643 — Vulnerability in the Oracle Sales Online product of Oracle E-Business Suite (component: Internal Operations). Supported vers…
High · CVSS 3.1 7.1 · Assessor: [email protected]
Vulnerability in the Oracle Sales Online product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Sales Online. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Sales Online accessible data as well as unauthorized read access to a subset of Ora…
CVE-2026-101643Read original ↗ (opens in a new tab) - NVD
CVE-2026-101642 — Vulnerability in the Oracle Report Manager product of Oracle E-Business Suite (component: Internal Operations). Supported ve…
High · CVSS 3.1 7.1 · Assessor: [email protected]
Vulnerability in the Oracle Report Manager product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTPS to compromise Oracle Report Manager. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Report Manager accessible data and unauthorized ability to cause a partial denial of service (…
CVE-2026-101642Read original ↗ (opens in a new tab) - NVD
CVE-2026-101641 — Vulnerability in the Oracle Report Manager product of Oracle E-Business Suite (component: Internal Operations). Supported ve…
High · CVSS 3.1 7.6 · Assessor: [email protected]
Vulnerability in the Oracle Report Manager product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTPS to compromise Oracle Report Manager. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Report Manager accessible data as well as unauthorized update, insert or delete access to some…
CVE-2026-101641Read original ↗ (opens in a new tab) - NVD
CVE-2026-101640 — Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Audience). Supported versions that are…
High · CVSS 3.1 8.2 · Assessor: [email protected]
Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Audience). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Marketing. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Marketing accessible data as well as unauthorized update, insert or delete access to some of Oracle Marketing acces…
CVE-2026-101640Read original ↗ (opens in a new tab) - NVD
CVE-2026-101639 — Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Audience). Supported versions that are…
Medium · CVSS 3.1 5.4 · Assessor: [email protected]
Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Audience). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Marketing. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Marketing, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerabil…
CVE-2026-101639Read original ↗ (opens in a new tab) - NVD
CVE-2026-101638 — Vulnerability in the Applications DBA product of Oracle E-Business Suite (component: AD Utilities). Supported versions that…
High · CVSS 3.1 7.3 · Assessor: [email protected]
Vulnerability in the Applications DBA product of Oracle E-Business Suite (component: AD Utilities). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Applications DBA executes to compromise Applications DBA. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of Applications DBA. CVSS 3.1 Base Score 7.3 (Confide…
CVE-2026-101638Read original ↗ (opens in a new tab) - NVD
CVE-2026-101637 — Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: InnoDB). Supported versions that are af…
Medium · CVSS 3.1 5.5 · Assessor: [email protected]
Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: InnoDB). Supported versions that are affected are MySQL Server: 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 9.7.0-9.7.3 and 26.7.0-26.7.1. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server, MySQL Cluster. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQ…
CVE-2026-101637Read original ↗ (opens in a new tab) - NVD
CVE-2026-101636 — Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Admin UI). Supported version…
High · CVSS 3.1 7.4 · Assessor: [email protected]
Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Admin UI). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Mobile Field Service. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Mobile Field Service accessible data as well as unauthorized access to crit…
CVE-2026-101636Read original ↗ (opens in a new tab)
Summaries are excerpts from the publishers. The default Advisories view includes CISA KEV, CISA Industrial and CERT-EU. When several scores exist, PATCHBAY shows the newest valid CVSS version, then prefers a primary assessment, NVD, and a stable assessor ordering. Open the original for all assessments. CISA Known Exploited dates indicate catalog additions. This product uses data from the NVD API but is not endorsed or certified by the NVD.