# Broken access control.

Missing or wrong authorization checks, IDOR, loose permissions. Every Advisory and CVE whose weakness (CWE) is one of these, newest first.

## Records, newest first (an older page)

- [Improper access control in Oracle Corporation Oracle Purchasing](https://agentprime.io/advisories/CVE-2026-91511.md)
  `CVE-2026-91511` · CVE record: Oracle Corporation Oracle Purchasing · CVSS 7.1 High · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [Improper access control in Oracle Corporation PeopleSoft Enterprise PeopleTools](https://agentprime.io/advisories/CVE-2026-91505.md)
  `CVE-2026-91505` · CVE record: Oracle Corporation PeopleSoft Enterprise PeopleTools · CVSS 6.0 Medium · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [Improper access control in Oracle Corporation Oracle WebCenter Content](https://agentprime.io/advisories/CVE-2026-91504.md)
  `CVE-2026-91504` · CVE record: Oracle Corporation Oracle WebCenter Content · CVSS 7.5 High · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [Improper access control in Oracle Corporation Oracle Database Server](https://agentprime.io/advisories/CVE-2026-91503.md)
  `CVE-2026-91503` · CVE record: Oracle Corporation Oracle Database Server · CVSS 8.1 High · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [Improper access control in Oracle Corporation Oracle Identity Manager](https://agentprime.io/advisories/CVE-2026-91501.md)
  `CVE-2026-91501` · CVE record: Oracle Corporation Oracle Identity Manager · CVSS 5.5 Medium · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [Improper access control in Oracle Corporation PeopleSoft Enterprise PeopleTools](https://agentprime.io/advisories/CVE-2026-91497.md)
  `CVE-2026-91497` · CVE record: Oracle Corporation PeopleSoft Enterprise PeopleTools · CVSS 5.3 Medium · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [Improper access control in Oracle Corporation Workflow](https://agentprime.io/advisories/CVE-2026-91496.md)
  `CVE-2026-91496` · CVE record: Oracle Corporation Workflow · CVSS 7.5 High · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [Improper access control in Oracle Corporation Oracle Identity Manager Connector](https://agentprime.io/advisories/CVE-2026-91494.md)
  `CVE-2026-91494` · CVE record: Oracle Corporation Oracle Identity Manager Connector · CVSS 7.4 High · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [Improper access control in Oracle Corporation Oracle Identity Manager Connector](https://agentprime.io/advisories/CVE-2026-91492.md)
  `CVE-2026-91492` · CVE record: Oracle Corporation Oracle Identity Manager Connector · CVSS 8.7 High · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [Improper access control in Oracle Corporation Oracle Identity Manager Connector](https://agentprime.io/advisories/CVE-2026-91489.md)
  `CVE-2026-91489` · CVE record: Oracle Corporation Oracle Identity Manager Connector · CVSS 7.1 High · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [Improper access control in Oracle Corporation Oracle Identity Manager Connector](https://agentprime.io/advisories/CVE-2026-91488.md)
  `CVE-2026-91488` · CVE record: Oracle Corporation Oracle Identity Manager Connector · CVSS 7.1 High · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [Improper access control in Oracle Corporation Oracle Java SE](https://agentprime.io/advisories/CVE-2026-91487.md)
  `CVE-2026-91487` · CVE record: Oracle Corporation Oracle Java SE · CVSS 4.8 Medium · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [Improper access control in Oracle Corporation PeopleSoft Enterprise FIN General Ledger Brazil](https://agentprime.io/advisories/CVE-2026-91486.md)
  `CVE-2026-91486` · CVE record: Oracle Corporation PeopleSoft Enterprise FIN General Ledger Brazil · CVSS 4.4 Medium · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [Improper access control in Oracle Corporation PeopleSoft Enterprise FIN Cash Management](https://agentprime.io/advisories/CVE-2026-91485.md)
  `CVE-2026-91485` · CVE record: Oracle Corporation PeopleSoft Enterprise FIN Cash Management · CVSS 3.8 Low · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [Improper access control in Oracle Corporation Oracle Java SE](https://agentprime.io/advisories/CVE-2026-91484.md)
  `CVE-2026-91484` · CVE record: Oracle Corporation Oracle Java SE · CVSS 7.5 High · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [Improper access control in Oracle Corporation PeopleSoft Enterprise SCM Strategic Sourcing](https://agentprime.io/advisories/CVE-2026-91482.md)
  `CVE-2026-91482` · CVE record: Oracle Corporation PeopleSoft Enterprise SCM Strategic Sourcing · CVSS 6.5 Medium · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [Improper access control in Oracle Corporation PeopleSoft Enterprise SCM Purchasing](https://agentprime.io/advisories/CVE-2026-91481.md)
  `CVE-2026-91481` · CVE record: Oracle Corporation PeopleSoft Enterprise SCM Purchasing · CVSS 5.4 Medium · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [Improper access control in Oracle Corporation PeopleSoft Enterprise SCM Strategic Sourcing](https://agentprime.io/advisories/CVE-2026-91480.md)
  `CVE-2026-91480` · CVE record: Oracle Corporation PeopleSoft Enterprise SCM Strategic Sourcing · CVSS 6.5 Medium · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [Improper access control in Oracle Corporation PeopleSoft Enterprise SCM Strategic Sourcing](https://agentprime.io/advisories/CVE-2026-91478.md)
  `CVE-2026-91478` · CVE record: Oracle Corporation PeopleSoft Enterprise SCM Strategic Sourcing · CVSS 8.8 High · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [Improper access control in Oracle Corporation Oracle Outside In Technology](https://agentprime.io/advisories/CVE-2026-91475.md)
  `CVE-2026-91475` · CVE record: Oracle Corporation Oracle Outside In Technology · CVSS 6.6 Medium · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [Improper access control in Oracle Corporation PeopleSoft Enterprise FIN Common Objects Brazil](https://agentprime.io/advisories/CVE-2026-91474.md)
  `CVE-2026-91474` · CVE record: Oracle Corporation PeopleSoft Enterprise FIN Common Objects Brazil · CVSS 6.1 Medium · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [Improper access control in Oracle Corporation PeopleSoft Enterprise CC Common Application Objects](https://agentprime.io/advisories/CVE-2026-91471.md)
  `CVE-2026-91471` · CVE record: Oracle Corporation PeopleSoft Enterprise CC Common Application Objects · CVSS 3.7 Low · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [Improper access control in Oracle Corporation PeopleSoft Enterprise PeopleTools](https://agentprime.io/advisories/CVE-2026-91468.md)
  `CVE-2026-91468` · CVE record: Oracle Corporation PeopleSoft Enterprise PeopleTools · CVSS 6.5 Medium · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [Improper access control in Oracle Corporation PeopleSoft Enterprise FIN Common Objects Argentina](https://agentprime.io/advisories/CVE-2026-91466.md)
  `CVE-2026-91466` · CVE record: Oracle Corporation PeopleSoft Enterprise FIN Common Objects Argentina · CVSS 6.4 Medium · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [Improper access control in Oracle Corporation Oracle Java SE and others](https://agentprime.io/advisories/CVE-2026-91462.md)
  `CVE-2026-91462` · CVE record: Oracle Corporation Oracle Java SE and 2 more · CVSS 5.9 Medium · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [Improper access control in Oracle Corporation Oracle Java SE and others](https://agentprime.io/advisories/CVE-2026-91453.md)
  `CVE-2026-91453` · CVE record: Oracle Corporation Oracle Java SE and 2 more · CVSS 5.3 Medium · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [Improper access control in Oracle Corporation Oracle Java SE and others](https://agentprime.io/advisories/CVE-2026-91452.md)
  `CVE-2026-91452` · CVE record: Oracle Corporation Oracle Java SE and 2 more · CVSS 5.3 Medium · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [Improper access control in Oracle Corporation Oracle Java SE](https://agentprime.io/advisories/CVE-2026-91451.md)
  `CVE-2026-91451` · CVE record: Oracle Corporation Oracle Java SE · CVSS 5.3 Medium · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [Improper access control in Oracle Corporation Siebel CRM Deployment](https://agentprime.io/advisories/CVE-2026-91447.md)
  `CVE-2026-91447` · CVE record: Oracle Corporation Siebel CRM Deployment · CVSS 7.5 High · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [Improper access control in Oracle Corporation Siebel Apps - Customer Order Management](https://agentprime.io/advisories/CVE-2026-91441.md)
  `CVE-2026-91441` · CVE record: Oracle Corporation Siebel Apps - Customer Order Management · CVSS 6.5 Medium · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [Improper access control in Oracle Corporation Siebel CRM Deployment](https://agentprime.io/advisories/CVE-2026-91440.md)
  `CVE-2026-91440` · CVE record: Oracle Corporation Siebel CRM Deployment · CVSS 6.5 Medium · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [Improper access control in Oracle Corporation Siebel CRM Deployment](https://agentprime.io/advisories/CVE-2026-91438.md)
  `CVE-2026-91438` · CVE record: Oracle Corporation Siebel CRM Deployment · CVSS 7.1 High · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [Improper access control in Oracle Corporation Siebel CRM Deployment](https://agentprime.io/advisories/CVE-2026-91437.md)
  `CVE-2026-91437` · CVE record: Oracle Corporation Siebel CRM Deployment · CVSS 8.7 High · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [Improper access control in Oracle Corporation Siebel CRM Deployment](https://agentprime.io/advisories/CVE-2026-91436.md)
  `CVE-2026-91436` · CVE record: Oracle Corporation Siebel CRM Deployment · CVSS 3.9 Low · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [Improper access control in Oracle Corporation Siebel CRM End User](https://agentprime.io/advisories/CVE-2026-91432.md)
  `CVE-2026-91432` · CVE record: Oracle Corporation Siebel CRM End User · CVSS 6.5 Medium · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [Improper access control in Oracle Corporation Siebel CRM End User](https://agentprime.io/advisories/CVE-2026-91431.md)
  `CVE-2026-91431` · CVE record: Oracle Corporation Siebel CRM End User · CVSS 5.5 Medium · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [Improper access control in Oracle Corporation Siebel CRM Deployment](https://agentprime.io/advisories/CVE-2026-91429.md)
  `CVE-2026-91429` · CVE record: Oracle Corporation Siebel CRM Deployment · CVSS 6.5 Medium · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [Improper access control in Oracle Corporation Siebel CRM Deployment](https://agentprime.io/advisories/CVE-2026-91424.md)
  `CVE-2026-91424` · CVE record: Oracle Corporation Siebel CRM Deployment · CVSS 6.4 Medium · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [Improper access control in Oracle Corporation Siebel CRM Deployment](https://agentprime.io/advisories/CVE-2026-91423.md)
  `CVE-2026-91423` · CVE record: Oracle Corporation Siebel CRM Deployment · CVSS 6.0 Medium · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [Improper access control in Oracle Corporation Siebel CRM Deployment](https://agentprime.io/advisories/CVE-2026-91422.md)
  `CVE-2026-91422` · CVE record: Oracle Corporation Siebel CRM Deployment · CVSS 5.3 Medium · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [Improper access control in Oracle Corporation Siebel CRM Deployment](https://agentprime.io/advisories/CVE-2026-91420.md)
  `CVE-2026-91420` · CVE record: Oracle Corporation Siebel CRM Deployment · CVSS 6.5 Medium · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [Improper access control in Oracle Corporation Siebel CRM Deployment](https://agentprime.io/advisories/CVE-2026-91414.md)
  `CVE-2026-91414` · CVE record: Oracle Corporation Siebel CRM Deployment · CVSS 5.3 Medium · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [Improper access control in Oracle Corporation Siebel CRM Development](https://agentprime.io/advisories/CVE-2026-91413.md)
  `CVE-2026-91413` · CVE record: Oracle Corporation Siebel CRM Development · CVSS 6.0 Medium · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [Improper access control in Oracle Corporation Siebel CRM End User](https://agentprime.io/advisories/CVE-2026-91412.md)
  `CVE-2026-91412` · CVE record: Oracle Corporation Siebel CRM End User · CVSS 6.5 Medium · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [Improper access control in Oracle Corporation Primavera P6 Enterprise Project Portfolio Management](https://agentprime.io/advisories/CVE-2026-91399.md)
  `CVE-2026-91399` · CVE record: Oracle Corporation Primavera P6 Enterprise Project Portfolio Management · CVSS 4.3 Medium · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [Improper access control in Oracle Corporation Oracle Java SE and others](https://agentprime.io/advisories/CVE-2026-91398.md)
  `CVE-2026-91398` · CVE record: Oracle Corporation Oracle Java SE and 2 more · CVSS 6.8 Medium · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [Improper access control in Oracle Corporation Oracle Java SE and others](https://agentprime.io/advisories/CVE-2026-91397.md)
  `CVE-2026-91397` · CVE record: Oracle Corporation Oracle Java SE and 2 more · CVSS 3.6 Low · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [Improper access control in Oracle Corporation Oracle Java SE and others](https://agentprime.io/advisories/CVE-2026-91396.md)
  `CVE-2026-91396` · CVE record: Oracle Corporation Oracle Java SE and 2 more · CVSS 6.5 Medium · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [Improper access control in Oracle Corporation Oracle Java SE and others](https://agentprime.io/advisories/CVE-2026-91395.md)
  `CVE-2026-91395` · CVE record: Oracle Corporation Oracle Java SE and 2 more · CVSS 6.5 Medium · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [Improper access control in Oracle Corporation Siebel CRM End User](https://agentprime.io/advisories/CVE-2026-91390.md)
  `CVE-2026-91390` · CVE record: Oracle Corporation Siebel CRM End User · CVSS 5.4 Medium · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [Improper access control in Oracle Corporation Siebel CRM End User](https://agentprime.io/advisories/CVE-2026-91389.md)
  `CVE-2026-91389` · CVE record: Oracle Corporation Siebel CRM End User · CVSS 5.4 Medium · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [Improper access control in Oracle Corporation Siebel CRM End User](https://agentprime.io/advisories/CVE-2026-91388.md)
  `CVE-2026-91388` · CVE record: Oracle Corporation Siebel CRM End User · CVSS 4.7 Medium · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [Improper access control in Oracle Corporation Siebel CRM End User](https://agentprime.io/advisories/CVE-2026-91387.md)
  `CVE-2026-91387` · CVE record: Oracle Corporation Siebel CRM End User · CVSS 5.4 Medium · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [Improper access control in Oracle Corporation JD Edwards EnterpriseOne Orchestrator](https://agentprime.io/advisories/CVE-2026-91386.md)
  `CVE-2026-91386` · CVE record: Oracle Corporation JD Edwards EnterpriseOne Orchestrator · CVSS 6.8 Medium · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [Improper access control in Oracle Corporation JD Edwards EnterpriseOne Tools](https://agentprime.io/advisories/CVE-2026-91383.md)
  `CVE-2026-91383` · CVE record: Oracle Corporation JD Edwards EnterpriseOne Tools · CVSS 6.6 Medium · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [Improper access control in Oracle Corporation Oracle Java SE and others](https://agentprime.io/advisories/CVE-2026-91382.md)
  `CVE-2026-91382` · CVE record: Oracle Corporation Oracle Java SE and 2 more · CVSS 6.5 Medium · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [Improper access control in Oracle Corporation Oracle Java SE and others](https://agentprime.io/advisories/CVE-2026-91381.md)
  `CVE-2026-91381` · CVE record: Oracle Corporation Oracle Java SE and 1 more · CVSS 3.7 Low · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [Improper access control in Oracle Corporation Oracle Java SE and others](https://agentprime.io/advisories/CVE-2026-91380.md)
  `CVE-2026-91380` · CVE record: Oracle Corporation Oracle Java SE and 2 more · CVSS 4.0 Medium · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [Improper access control in Oracle Corporation Siebel CRM Integration](https://agentprime.io/advisories/CVE-2026-91378.md)
  `CVE-2026-91378` · CVE record: Oracle Corporation Siebel CRM Integration · CVSS 6.1 Medium · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [Improper access control in Oracle Corporation Primavera P6 Enterprise Project Portfolio Management](https://agentprime.io/advisories/CVE-2026-91376.md)
  `CVE-2026-91376` · CVE record: Oracle Corporation Primavera P6 Enterprise Project Portfolio Management · CVSS 6.5 Medium · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control

Newest: <https://agentprime.io/advisories/tag/access-control.md>
Older: <https://agentprime.io/advisories/tag/access-control.md?cursor=WyIyMDI2LTEwLTIwVDIxOjI1OjM3LjU2MTAwMFoiLCJDVkUtMjAyNi05MTM3NiJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=access-control&cursor=WyIyMDI2LTEwLTIwVDIxOjI2OjIwLjM0MDAwMFoiLCJDVkUtMjAyNi05MTUxMiJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/access-control/?cursor=WyIyMDI2LTEwLTIwVDIxOjI2OjIwLjM0MDAwMFoiLCJDVkUtMjAyNi05MTUxMiJd>. Everything for agents: <https://agentprime.io/llms.txt>.