# Broken access control.

Missing or wrong authorization checks, IDOR, loose permissions. Every Advisory and CVE whose weakness (CWE) is one of these, newest first.

## Records, newest first (an older page)

- [Improper access control in Oracle Corporation PeopleSoft Enterprise PeopleTools](https://agentprime.io/advisories/CVE-2026-83427.md)
  `CVE-2026-83427` · CVE record: Oracle Corporation PeopleSoft Enterprise PeopleTools · CVSS 6.6 Medium · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [Improper access control in Oracle Corporation Oracle Access Manager](https://agentprime.io/advisories/CVE-2026-83407.md)
  `CVE-2026-83407` · CVE record: Oracle Corporation Oracle Access Manager · CVSS 8.6 High · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [Improper access control in Oracle Corporation Oracle Communications Billing and Revenue Management](https://agentprime.io/advisories/CVE-2026-83406.md)
  `CVE-2026-83406` · CVE record: Oracle Corporation Oracle Communications Billing and Revenue Management · CVSS 6.7 Medium · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [Improper access control in Oracle Corporation Oracle Identity Manager](https://agentprime.io/advisories/CVE-2026-83403.md)
  `CVE-2026-83403` · CVE record: Oracle Corporation Oracle Identity Manager · CVSS 8.8 High · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [Improper access control in Oracle Corporation Oracle Identity Manager](https://agentprime.io/advisories/CVE-2026-83402.md)
  `CVE-2026-83402` · CVE record: Oracle Corporation Oracle Identity Manager · CVSS 8.8 High · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [Improper access control in Oracle Corporation Oracle Identity Manager](https://agentprime.io/advisories/CVE-2026-83401.md)
  `CVE-2026-83401` · CVE record: Oracle Corporation Oracle Identity Manager · CVSS 6.1 Medium · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [Improper access control in Oracle Corporation Oracle Java SE and others](https://agentprime.io/advisories/CVE-2026-83395.md)
  `CVE-2026-83395` · CVE record: Oracle Corporation Oracle Java SE and 2 more · CVSS 6.5 Medium · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [Improper access control in Oracle Corporation Oracle Product Hub](https://agentprime.io/advisories/CVE-2026-83393.md)
  `CVE-2026-83393` · CVE record: Oracle Corporation Oracle Product Hub · CVSS 8.5 High · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [Improper access control in Oracle Corporation Oracle Weblogic Server Proxy Plug-in](https://agentprime.io/advisories/CVE-2026-83379.md)
  `CVE-2026-83379` · CVE record: Oracle Corporation Oracle Weblogic Server Proxy Plug-in · CVSS 8.7 High · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [Improper access control in Oracle Corporation Oracle Java SE](https://agentprime.io/advisories/CVE-2026-83378.md)
  `CVE-2026-83378` · CVE record: Oracle Corporation Oracle Java SE · CVSS 4.8 Medium · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [Improper access control in Oracle Corporation Oracle Shipping Execution](https://agentprime.io/advisories/CVE-2026-83366.md)
  `CVE-2026-83366` · CVE record: Oracle Corporation Oracle Shipping Execution · CVSS 7.4 High · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [Improper access control in Oracle Corporation Oracle Contract Lifecycle Management for Public Sector](https://agentprime.io/advisories/CVE-2026-83363.md)
  `CVE-2026-83363` · CVE record: Oracle Corporation Oracle Contract Lifecycle Management for Public Sector · CVSS 8.8 High · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [Improper access control in Oracle Corporation Oracle Contract Lifecycle Management for Public Sector](https://agentprime.io/advisories/CVE-2026-83361.md)
  `CVE-2026-83361` · CVE record: Oracle Corporation Oracle Contract Lifecycle Management for Public Sector · CVSS 8.1 High · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [Improper access control in Oracle Corporation PeopleSoft Enterprise PeopleTools](https://agentprime.io/advisories/CVE-2026-60885.md)
  `CVE-2026-60885` · CVE record: Oracle Corporation PeopleSoft Enterprise PeopleTools · CVSS 6.8 Medium · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [Improper access control in Oracle Corporation PeopleSoft Enterprise PeopleTools](https://agentprime.io/advisories/CVE-2026-60874.md)
  `CVE-2026-60874` · CVE record: Oracle Corporation PeopleSoft Enterprise PeopleTools · CVSS 4.2 Medium · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control, Denial of service
- [Improper access control in Oracle Corporation Oracle Product Hub](https://agentprime.io/advisories/CVE-2026-101854.md)
  `CVE-2026-101854` · CVE record: Oracle Corporation Oracle Product Hub · CVSS 8.8 High · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [Improper access control in Oracle Corporation Oracle Product Hub](https://agentprime.io/advisories/CVE-2026-101853.md)
  `CVE-2026-101853` · CVE record: Oracle Corporation Oracle Product Hub · CVSS 8.8 High · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [Improper access control in Oracle Corporation Oracle Product Hub](https://agentprime.io/advisories/CVE-2026-101852.md)
  `CVE-2026-101852` · CVE record: Oracle Corporation Oracle Product Hub · CVSS 8.8 High · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [Improper access control in Oracle Corporation Strategic Network Optimization](https://agentprime.io/advisories/CVE-2026-101842.md)
  `CVE-2026-101842` · CVE record: Oracle Corporation Strategic Network Optimization · CVSS 8.8 High · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [Improper access control in Oracle Corporation Global Order Promising](https://agentprime.io/advisories/CVE-2026-101841.md)
  `CVE-2026-101841` · CVE record: Oracle Corporation Global Order Promising · CVSS 8.2 High · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [Improper access control in Oracle Corporation Oracle Contract Lifecycle Management for Public Sector](https://agentprime.io/advisories/CVE-2026-101840.md)
  `CVE-2026-101840` · CVE record: Oracle Corporation Oracle Contract Lifecycle Management for Public Sector · CVSS 7.2 High · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [Improper access control in Oracle Corporation Oracle Shipping Execution](https://agentprime.io/advisories/CVE-2026-101837.md)
  `CVE-2026-101837` · CVE record: Oracle Corporation Oracle Shipping Execution · CVSS 7.7 High · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [Improper access control in Oracle Corporation iSupplier Portal](https://agentprime.io/advisories/CVE-2026-101836.md)
  `CVE-2026-101836` · CVE record: Oracle Corporation iSupplier Portal · CVSS 6.5 Medium · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [Improper access control in Oracle Corporation Oracle Shipping Execution](https://agentprime.io/advisories/CVE-2026-101835.md)
  `CVE-2026-101835` · CVE record: Oracle Corporation Oracle Shipping Execution · CVSS 7.5 High · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [Improper access control in Oracle Corporation Oracle Shipping Execution](https://agentprime.io/advisories/CVE-2026-101834.md)
  `CVE-2026-101834` · CVE record: Oracle Corporation Oracle Shipping Execution · CVSS 8.1 High · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [Improper access control in Oracle Corporation Oracle Shipping Execution](https://agentprime.io/advisories/CVE-2026-101833.md)
  `CVE-2026-101833` · CVE record: Oracle Corporation Oracle Shipping Execution · CVSS 7.6 High · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [Improper access control in Oracle Corporation Oracle Order Management](https://agentprime.io/advisories/CVE-2026-101832.md)
  `CVE-2026-101832` · CVE record: Oracle Corporation Oracle Order Management · CVSS 6.5 Medium · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [Improper access control in Oracle Corporation Oracle Quality](https://agentprime.io/advisories/CVE-2026-101831.md)
  `CVE-2026-101831` · CVE record: Oracle Corporation Oracle Quality · CVSS 8.1 High · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [Improper access control in Oracle Corporation Oracle Project Contracts](https://agentprime.io/advisories/CVE-2026-101830.md)
  `CVE-2026-101830` · CVE record: Oracle Corporation Oracle Project Contracts · CVSS 7.7 High · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [Improper access control in Oracle Corporation Oracle Mobile Application Server](https://agentprime.io/advisories/CVE-2026-101829.md)
  `CVE-2026-101829` · CVE record: Oracle Corporation Oracle Mobile Application Server · CVSS 7.4 High · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [Improper access control in Oracle Corporation Oracle Mobile Application Server](https://agentprime.io/advisories/CVE-2026-101828.md)
  `CVE-2026-101828` · CVE record: Oracle Corporation Oracle Mobile Application Server · CVSS 6.5 Medium · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [Improper access control in Oracle Corporation Oracle HCM Common Architecture](https://agentprime.io/advisories/CVE-2026-101827.md)
  `CVE-2026-101827` · CVE record: Oracle Corporation Oracle HCM Common Architecture · CVSS 7.1 High · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [Improper access control in Oracle Corporation Oracle HCM Common Architecture](https://agentprime.io/advisories/CVE-2026-101826.md)
  `CVE-2026-101826` · CVE record: Oracle Corporation Oracle HCM Common Architecture · CVSS 7.5 High · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [Improper access control in Oracle Corporation Oracle HCM Common Architecture](https://agentprime.io/advisories/CVE-2026-101825.md)
  `CVE-2026-101825` · CVE record: Oracle Corporation Oracle HCM Common Architecture · CVSS 7.5 High · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [Improper access control in Oracle Corporation Document Management and Collaboration](https://agentprime.io/advisories/CVE-2026-101824.md)
  `CVE-2026-101824` · CVE record: Oracle Corporation Document Management and Collaboration · CVSS 8.7 High · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [Improper access control in Oracle Corporation Oracle Bills of Material](https://agentprime.io/advisories/CVE-2026-101823.md)
  `CVE-2026-101823` · CVE record: Oracle Corporation Oracle Bills of Material · CVSS 7.5 High · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [Improper access control in Oracle Corporation Oracle Bills of Material](https://agentprime.io/advisories/CVE-2026-101822.md)
  `CVE-2026-101822` · CVE record: Oracle Corporation Oracle Bills of Material · CVSS 7.2 High · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [Improper access control in Oracle Corporation Oracle Compensation Workbench](https://agentprime.io/advisories/CVE-2026-101821.md)
  `CVE-2026-101821` · CVE record: Oracle Corporation Oracle Compensation Workbench · CVSS 5.4 Medium · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [Improper access control in Oracle Corporation Oracle General Ledger](https://agentprime.io/advisories/CVE-2026-101820.md)
  `CVE-2026-101820` · CVE record: Oracle Corporation Oracle General Ledger · CVSS 7.5 High · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [Improper access control in Oracle Corporation Oracle General Ledger](https://agentprime.io/advisories/CVE-2026-101819.md)
  `CVE-2026-101819` · CVE record: Oracle Corporation Oracle General Ledger · CVSS 6.5 Medium · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [Improper access control in Oracle Corporation Oracle Product Hub](https://agentprime.io/advisories/CVE-2026-101818.md)
  `CVE-2026-101818` · CVE record: Oracle Corporation Oracle Product Hub · CVSS 7.7 High · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [Improper access control in Oracle Corporation Oracle Product Hub](https://agentprime.io/advisories/CVE-2026-101816.md)
  `CVE-2026-101816` · CVE record: Oracle Corporation Oracle Product Hub · CVSS 7.2 High · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [Improper access control in Oracle Corporation Assets](https://agentprime.io/advisories/CVE-2026-101815.md)
  `CVE-2026-101815` · CVE record: Oracle Corporation Assets · CVSS 7.6 High · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [Improper access control in Oracle Corporation Oracle Engineering](https://agentprime.io/advisories/CVE-2026-101814.md)
  `CVE-2026-101814` · CVE record: Oracle Corporation Oracle Engineering · CVSS 5.3 Medium · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [Improper access control in Oracle Corporation Oracle Engineering](https://agentprime.io/advisories/CVE-2026-101813.md)
  `CVE-2026-101813` · CVE record: Oracle Corporation Oracle Engineering · CVSS 8.8 High · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [Improper access control in Oracle Corporation Oracle Complex Maintenance, Repair and Overhaul](https://agentprime.io/advisories/CVE-2026-101812.md)
  `CVE-2026-101812` · CVE record: Oracle Corporation Oracle Complex Maintenance, Repair and Overhaul · CVSS 6.8 Medium · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [Improper access control in Oracle Corporation MySQL Router](https://agentprime.io/advisories/CVE-2026-101810.md)
  `CVE-2026-101810` · CVE record: Oracle Corporation MySQL Router · CVSS 7.5 High · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [Improper access control in Oracle Corporation Workflow](https://agentprime.io/advisories/CVE-2026-101809.md)
  `CVE-2026-101809` · CVE record: Oracle Corporation Workflow · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [Improper access control in Oracle Corporation Oracle Communications Billing and Revenue Management](https://agentprime.io/advisories/CVE-2026-101807.md)
  `CVE-2026-101807` · CVE record: Oracle Corporation Oracle Communications Billing and Revenue Management · CVSS 4.8 Medium · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [Improper access control in Oracle Corporation MySQL Connectors](https://agentprime.io/advisories/CVE-2026-101806.md)
  `CVE-2026-101806` · CVE record: Oracle Corporation MySQL Connectors · CVSS 6.8 Medium · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [Improper access control in Oracle Corporation Oracle Applications Manager](https://agentprime.io/advisories/CVE-2026-101805.md)
  `CVE-2026-101805` · CVE record: Oracle Corporation Oracle Applications Manager · CVSS 3.3 Low · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [Improper access control in Oracle Corporation MySQL Connectors](https://agentprime.io/advisories/CVE-2026-101804.md)
  `CVE-2026-101804` · CVE record: Oracle Corporation MySQL Connectors · CVSS 2.5 Low · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [Improper access control in Oracle Corporation MySQL Server and others](https://agentprime.io/advisories/CVE-2026-101803.md)
  `CVE-2026-101803` · CVE record: Oracle Corporation MySQL Server and 1 more · CVSS 6.5 Medium · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [Improper access control in Oracle Corporation MySQL Server and others](https://agentprime.io/advisories/CVE-2026-101802.md)
  `CVE-2026-101802` · CVE record: Oracle Corporation MySQL Server and 1 more · CVSS 6.5 Medium · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [Improper access control in Oracle Corporation MySQL Server and others](https://agentprime.io/advisories/CVE-2026-101801.md)
  `CVE-2026-101801` · CVE record: Oracle Corporation MySQL Server and 1 more · CVSS 4.9 Medium · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [Improper access control in Oracle Corporation MySQL Server and others](https://agentprime.io/advisories/CVE-2026-101800.md)
  `CVE-2026-101800` · CVE record: Oracle Corporation MySQL Server and 1 more · CVSS 6.8 Medium · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [Improper access control in Oracle Corporation MySQL Server and others](https://agentprime.io/advisories/CVE-2026-101799.md)
  `CVE-2026-101799` · CVE record: Oracle Corporation MySQL Server and 1 more · CVSS 6.5 Medium · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [Improper access control in Oracle Corporation MySQL Server and others](https://agentprime.io/advisories/CVE-2026-101798.md)
  `CVE-2026-101798` · CVE record: Oracle Corporation MySQL Server and 1 more · CVSS 4.9 Medium · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [Improper access control in Oracle Corporation MySQL Server and others](https://agentprime.io/advisories/CVE-2026-101797.md)
  `CVE-2026-101797` · CVE record: Oracle Corporation MySQL Server and 1 more · CVSS 7.5 High · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [Improper access control in Oracle Corporation MySQL Server and others](https://agentprime.io/advisories/CVE-2026-101796.md)
  `CVE-2026-101796` · CVE record: Oracle Corporation MySQL Server and 1 more · CVSS 7.5 High · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control

Newest: <https://agentprime.io/advisories/tag/access-control.md>
Older: <https://agentprime.io/advisories/tag/access-control.md?cursor=WyIyMDI2LTEwLTIwVDIxOjIyOjU5LjQxMjAwMFoiLCJDVkUtMjAyNi0xMDE3OTYiXQ>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=access-control&cursor=WyIyMDI2LTEwLTIwVDIxOjIzOjUyLjU3MzAwMFoiLCJDVkUtMjAyNi04NzI5MyJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/access-control/?cursor=WyIyMDI2LTEwLTIwVDIxOjIzOjUyLjU3MzAwMFoiLCJDVkUtMjAyNi04NzI5MyJd>. Everything for agents: <https://agentprime.io/llms.txt>.