# Broken access control.

Missing or wrong authorization checks, IDOR, loose permissions. Every Advisory and CVE whose weakness (CWE) is one of these, newest first.

## Records, newest first (an older page)

- [Improper access control in Oracle Corporation Oracle Business Intelligence Enterprise Edition](https://agentprime.io/advisories/CVE-2026-91241.md)
  `CVE-2026-91241` · CVE record: Oracle Corporation Oracle Business Intelligence Enterprise Edition · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [Improper access control in Oracle Corporation Oracle WebCenter Sites](https://agentprime.io/advisories/CVE-2026-91240.md)
  `CVE-2026-91240` · CVE record: Oracle Corporation Oracle WebCenter Sites · CVSS 5.9 Medium · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [Improper access control in Oracle Corporation Oracle SOA Suite](https://agentprime.io/advisories/CVE-2026-91237.md)
  `CVE-2026-91237` · CVE record: Oracle Corporation Oracle SOA Suite · CVSS 7.5 High · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [Improper access control in Oracle Corporation Oracle SOA Suite](https://agentprime.io/advisories/CVE-2026-91232.md)
  `CVE-2026-91232` · CVE record: Oracle Corporation Oracle SOA Suite · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [Improper access control in Oracle Corporation Oracle SOA Suite](https://agentprime.io/advisories/CVE-2026-91230.md)
  `CVE-2026-91230` · CVE record: Oracle Corporation Oracle SOA Suite · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [Improper access control in Oracle Corporation Oracle SOA Suite](https://agentprime.io/advisories/CVE-2026-91229.md)
  `CVE-2026-91229` · CVE record: Oracle Corporation Oracle SOA Suite · CVSS 7.5 High · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [Improper access control in Oracle Corporation Oracle SOA Suite](https://agentprime.io/advisories/CVE-2026-91228.md)
  `CVE-2026-91228` · CVE record: Oracle Corporation Oracle SOA Suite · CVSS 7.1 High · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [Improper access control in Oracle Corporation Oracle SOA Suite](https://agentprime.io/advisories/CVE-2026-91227.md)
  `CVE-2026-91227` · CVE record: Oracle Corporation Oracle SOA Suite · CVSS 7.5 High · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [Improper access control in Oracle Corporation Oracle SOA Suite](https://agentprime.io/advisories/CVE-2026-91226.md)
  `CVE-2026-91226` · CVE record: Oracle Corporation Oracle SOA Suite · CVSS 7.5 High · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [Improper access control in Oracle Corporation Oracle SOA Suite](https://agentprime.io/advisories/CVE-2026-91225.md)
  `CVE-2026-91225` · CVE record: Oracle Corporation Oracle SOA Suite · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [Improper access control in Oracle Corporation Oracle SOA Suite](https://agentprime.io/advisories/CVE-2026-91224.md)
  `CVE-2026-91224` · CVE record: Oracle Corporation Oracle SOA Suite · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [Improper access control in Oracle Corporation Oracle SOA Suite](https://agentprime.io/advisories/CVE-2026-91223.md)
  `CVE-2026-91223` · CVE record: Oracle Corporation Oracle SOA Suite · CVSS 8.8 High · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [Improper access control in Oracle Corporation Oracle SOA Suite](https://agentprime.io/advisories/CVE-2026-91221.md)
  `CVE-2026-91221` · CVE record: Oracle Corporation Oracle SOA Suite · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [Improper access control in Oracle Corporation Oracle SOA Suite](https://agentprime.io/advisories/CVE-2026-91218.md)
  `CVE-2026-91218` · CVE record: Oracle Corporation Oracle SOA Suite · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [Improper access control in Oracle Corporation Oracle SOA Suite](https://agentprime.io/advisories/CVE-2026-91216.md)
  `CVE-2026-91216` · CVE record: Oracle Corporation Oracle SOA Suite · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [Improper access control in Oracle Corporation Oracle SOA Suite](https://agentprime.io/advisories/CVE-2026-91215.md)
  `CVE-2026-91215` · CVE record: Oracle Corporation Oracle SOA Suite · CVSS 8.8 High · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [Improper access control in Oracle Corporation Oracle Identity Manager Connector](https://agentprime.io/advisories/CVE-2026-91212.md)
  `CVE-2026-91212` · CVE record: Oracle Corporation Oracle Identity Manager Connector · CVSS 8.6 High · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [Improper access control in Oracle Corporation Oracle Identity Manager Connector](https://agentprime.io/advisories/CVE-2026-91211.md)
  `CVE-2026-91211` · CVE record: Oracle Corporation Oracle Identity Manager Connector · CVSS 8.7 High · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [Improper access control in Oracle Corporation Oracle WebCenter Content](https://agentprime.io/advisories/CVE-2026-91210.md)
  `CVE-2026-91210` · CVE record: Oracle Corporation Oracle WebCenter Content · CVSS 6.5 Medium · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [Improper access control in Oracle Corporation Oracle Solaris](https://agentprime.io/advisories/CVE-2026-91209.md)
  `CVE-2026-91209` · CVE record: Oracle Corporation Oracle Solaris · CVSS 4.2 Medium · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [Improper authorization in Oracle Corporation Oracle Solaris](https://agentprime.io/advisories/CVE-2026-87422.md)
  `CVE-2026-87422` · CVE record: Oracle Corporation Oracle Solaris · CVSS 2.5 Low · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [Improper authorization in Oracle Corporation Oracle Solaris](https://agentprime.io/advisories/CVE-2026-87421.md)
  `CVE-2026-87421` · CVE record: Oracle Corporation Oracle Solaris · CVSS 7.1 High · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [Improper access control in Oracle Corporation Oracle Service Bus](https://agentprime.io/advisories/CVE-2026-87420.md)
  `CVE-2026-87420` · CVE record: Oracle Corporation Oracle Service Bus · CVSS 8.8 High · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [Improper access control in Oracle Corporation PeopleSoft Enterprise PeopleTools](https://agentprime.io/advisories/CVE-2026-87415.md)
  `CVE-2026-87415` · CVE record: Oracle Corporation PeopleSoft Enterprise PeopleTools · CVSS 5.3 Medium · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [Improper access control in Oracle Corporation Applications DBA](https://agentprime.io/advisories/CVE-2026-87403.md)
  `CVE-2026-87403` · CVE record: Oracle Corporation Applications DBA · CVSS 7.1 High · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [Improper access control in Oracle Corporation Applications DBA](https://agentprime.io/advisories/CVE-2026-87402.md)
  `CVE-2026-87402` · CVE record: Oracle Corporation Applications DBA · CVSS 7.3 High · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [Improper access control in Oracle Corporation Oracle WebCenter Content](https://agentprime.io/advisories/CVE-2026-87400.md)
  `CVE-2026-87400` · CVE record: Oracle Corporation Oracle WebCenter Content · CVSS 6.9 Medium · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [Improper access control in Oracle Corporation Oracle WebCenter Content](https://agentprime.io/advisories/CVE-2026-87399.md)
  `CVE-2026-87399` · CVE record: Oracle Corporation Oracle WebCenter Content · CVSS 6.3 Medium · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [Improper access control in Oracle Corporation Oracle Outside In Technology](https://agentprime.io/advisories/CVE-2026-87397.md)
  `CVE-2026-87397` · CVE record: Oracle Corporation Oracle Outside In Technology · CVSS 8.8 High · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [Improper access control in Oracle Corporation Oracle Outside In Technology](https://agentprime.io/advisories/CVE-2026-87396.md)
  `CVE-2026-87396` · CVE record: Oracle Corporation Oracle Outside In Technology · CVSS 6.5 Medium · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [Improper access control in Oracle Corporation Oracle Outside In Technology](https://agentprime.io/advisories/CVE-2026-87394.md)
  `CVE-2026-87394` · CVE record: Oracle Corporation Oracle Outside In Technology · CVSS 8.2 High · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [Improper access control in Oracle Corporation Oracle Outside In Technology](https://agentprime.io/advisories/CVE-2026-87393.md)
  `CVE-2026-87393` · CVE record: Oracle Corporation Oracle Outside In Technology · CVSS 6.5 Medium · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [Improper access control in Oracle Corporation WebCenter Content: Imaging](https://agentprime.io/advisories/CVE-2026-87392.md)
  `CVE-2026-87392` · CVE record: Oracle Corporation WebCenter Content: Imaging · CVSS 6.5 Medium · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [Improper access control in Oracle Corporation JD Edwards EnterpriseOne Configurator](https://agentprime.io/advisories/CVE-2026-87388.md)
  `CVE-2026-87388` · CVE record: Oracle Corporation JD Edwards EnterpriseOne Configurator · CVSS 5.3 Medium · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [Improper access control in Oracle Corporation WebCenter Content: Imaging](https://agentprime.io/advisories/CVE-2026-87377.md)
  `CVE-2026-87377` · CVE record: Oracle Corporation WebCenter Content: Imaging · CVSS 6.8 Medium · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [Improper access control in Oracle Corporation Oracle WebCenter Content](https://agentprime.io/advisories/CVE-2026-87373.md)
  `CVE-2026-87373` · CVE record: Oracle Corporation Oracle WebCenter Content · CVSS 6.5 Medium · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [Improper access control in Oracle Corporation Oracle Service Bus](https://agentprime.io/advisories/CVE-2026-87364.md)
  `CVE-2026-87364` · CVE record: Oracle Corporation Oracle Service Bus · CVSS 8.8 High · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [Improper access control in Oracle Corporation PeopleSoft Enterprise PeopleTools](https://agentprime.io/advisories/CVE-2026-87352.md)
  `CVE-2026-87352` · CVE record: Oracle Corporation PeopleSoft Enterprise PeopleTools · CVSS 4.4 Medium · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [Improper access control in Oracle Corporation Oracle GoldenGate](https://agentprime.io/advisories/CVE-2026-87351.md)
  `CVE-2026-87351` · CVE record: Oracle Corporation Oracle GoldenGate · CVSS 8.8 High · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [Improper access control in Oracle Corporation PeopleSoft Enterprise PeopleTools](https://agentprime.io/advisories/CVE-2026-87349.md)
  `CVE-2026-87349` · CVE record: Oracle Corporation PeopleSoft Enterprise PeopleTools · CVSS 6.5 Medium · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [Improper access control in Oracle Corporation JD Edwards EnterpriseOne Tools](https://agentprime.io/advisories/CVE-2026-87323.md)
  `CVE-2026-87323` · CVE record: Oracle Corporation JD Edwards EnterpriseOne Tools · CVSS 5.5 Medium · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [Improper access control in Oracle Corporation Oracle VM VirtualBox](https://agentprime.io/advisories/CVE-2026-87322.md)
  `CVE-2026-87322` · CVE record: Oracle Corporation Oracle VM VirtualBox · CVSS 8.4 High · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [Improper access control in Oracle Corporation JD Edwards EnterpriseOne Tools](https://agentprime.io/advisories/CVE-2026-87321.md)
  `CVE-2026-87321` · CVE record: Oracle Corporation JD Edwards EnterpriseOne Tools · CVSS 6.4 Medium · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [Improper access control in Oracle Corporation JD Edwards EnterpriseOne Tools](https://agentprime.io/advisories/CVE-2026-87320.md)
  `CVE-2026-87320` · CVE record: Oracle Corporation JD Edwards EnterpriseOne Tools · CVSS 6.7 Medium · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [Improper access control in Oracle Corporation JD Edwards EnterpriseOne Tools](https://agentprime.io/advisories/CVE-2026-87318.md)
  `CVE-2026-87318` · CVE record: Oracle Corporation JD Edwards EnterpriseOne Tools · CVSS 6.3 Medium · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [Improper access control in Oracle Corporation JD Edwards EnterpriseOne Tools](https://agentprime.io/advisories/CVE-2026-87317.md)
  `CVE-2026-87317` · CVE record: Oracle Corporation JD Edwards EnterpriseOne Tools · CVSS 4.8 Medium · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [Improper access control in Oracle Corporation JD Edwards EnterpriseOne Tools](https://agentprime.io/advisories/CVE-2026-87316.md)
  `CVE-2026-87316` · CVE record: Oracle Corporation JD Edwards EnterpriseOne Tools · CVSS 7.8 High · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [Improper access control in Oracle Corporation JD Edwards EnterpriseOne Tools](https://agentprime.io/advisories/CVE-2026-87315.md)
  `CVE-2026-87315` · CVE record: Oracle Corporation JD Edwards EnterpriseOne Tools · CVSS 7.5 High · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [Improper access control in Oracle Corporation JD Edwards EnterpriseOne Tools](https://agentprime.io/advisories/CVE-2026-87312.md)
  `CVE-2026-87312` · CVE record: Oracle Corporation JD Edwards EnterpriseOne Tools · CVSS 7.5 High · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [Improper access control in Oracle Corporation Oracle VM VirtualBox](https://agentprime.io/advisories/CVE-2026-87311.md)
  `CVE-2026-87311` · CVE record: Oracle Corporation Oracle VM VirtualBox · CVSS 5.6 Medium · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [Improper access control in Oracle Corporation JD Edwards EnterpriseOne Tools](https://agentprime.io/advisories/CVE-2026-87310.md)
  `CVE-2026-87310` · CVE record: Oracle Corporation JD Edwards EnterpriseOne Tools · CVSS 8.8 High · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [Improper access control in Oracle Corporation JD Edwards EnterpriseOne Tools](https://agentprime.io/advisories/CVE-2026-87309.md)
  `CVE-2026-87309` · CVE record: Oracle Corporation JD Edwards EnterpriseOne Tools · CVSS 8.1 High · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [Improper access control in Oracle Corporation JD Edwards EnterpriseOne Tools](https://agentprime.io/advisories/CVE-2026-87305.md)
  `CVE-2026-87305` · CVE record: Oracle Corporation JD Edwards EnterpriseOne Tools · CVSS 8.1 High · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [Improper access control in Oracle Corporation Oracle Outside In Technology](https://agentprime.io/advisories/CVE-2026-87304.md)
  `CVE-2026-87304` · CVE record: Oracle Corporation Oracle Outside In Technology · CVSS 8.6 High · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [Improper access control in Oracle Corporation Oracle VM VirtualBox](https://agentprime.io/advisories/CVE-2026-87303.md)
  `CVE-2026-87303` · CVE record: Oracle Corporation Oracle VM VirtualBox · CVSS 5.9 Medium · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [Improper access control in Oracle Corporation Oracle Weblogic Server Proxy Plug-in](https://agentprime.io/advisories/CVE-2026-87300.md)
  `CVE-2026-87300` · CVE record: Oracle Corporation Oracle Weblogic Server Proxy Plug-in · CVSS 8.7 High · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [Improper access control in Oracle Corporation Oracle Access Manager](https://agentprime.io/advisories/CVE-2026-87296.md)
  `CVE-2026-87296` · CVE record: Oracle Corporation Oracle Access Manager · CVSS 7.5 High · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [Improper access control in Oracle Corporation Oracle HRMS (India)](https://agentprime.io/advisories/CVE-2026-87295.md)
  `CVE-2026-87295` · CVE record: Oracle Corporation Oracle HRMS (India) · CVSS 6.5 Medium · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [Improper access control in Oracle Corporation Oracle Java SE and others](https://agentprime.io/advisories/CVE-2026-87294.md)
  `CVE-2026-87294` · CVE record: Oracle Corporation Oracle Java SE and 2 more · CVSS 6.5 Medium · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [Improper access control in Oracle Corporation Oracle Java SE](https://agentprime.io/advisories/CVE-2026-87293.md)
  `CVE-2026-87293` · CVE record: Oracle Corporation Oracle Java SE · CVSS 5.4 Medium · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control

Newest: <https://agentprime.io/advisories/tag/access-control.md>
Older: <https://agentprime.io/advisories/tag/access-control.md?cursor=WyIyMDI2LTEwLTIwVDIxOjIzOjUyLjU3MzAwMFoiLCJDVkUtMjAyNi04NzI5MyJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=access-control&cursor=WyIyMDI2LTEwLTIwVDIxOjI0OjUwLjY0NDAwMFoiLCJDVkUtMjAyNi05MTI0MiJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/access-control/?cursor=WyIyMDI2LTEwLTIwVDIxOjI0OjUwLjY0NDAwMFoiLCJDVkUtMjAyNi05MTI0MiJd>. Everything for agents: <https://agentprime.io/llms.txt>.