Advisories · Weakness

Broken access control.

Missing or wrong authorization checks, IDOR, loose permissions. Every Advisory and CVE whose weakness (CWE) is one of these, newest first.

CVE-2026-91241 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Improper access control in Oracle Corporation Oracle Business Intelligence Enterprise Edition
- Oracle Corporation Oracle Business Intelligence Enterprise Edition
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-91240 CVE record

CVSS 5.9 Medium

Improper access control in Oracle Corporation Oracle WebCenter Sites
- Oracle Corporation Oracle WebCenter Sites
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-91237 CVE record

CVSS 7.5 High

Improper access control in Oracle Corporation Oracle SOA Suite
- Oracle Corporation Oracle SOA Suite
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-91232 CVE record

CVSS 9.9 CriticalCritical · CVSS 9+

Improper access control in Oracle Corporation Oracle SOA Suite
- Oracle Corporation Oracle SOA Suite
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-91230 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

Improper access control in Oracle Corporation Oracle SOA Suite
- Oracle Corporation Oracle SOA Suite
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-91229 CVE record

CVSS 7.5 High

Improper access control in Oracle Corporation Oracle SOA Suite
- Oracle Corporation Oracle SOA Suite
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-91228 CVE record

CVSS 7.1 High

Improper access control in Oracle Corporation Oracle SOA Suite
- Oracle Corporation Oracle SOA Suite
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-91227 CVE record

CVSS 7.5 High

Improper access control in Oracle Corporation Oracle SOA Suite
- Oracle Corporation Oracle SOA Suite
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-91226 CVE record

CVSS 7.5 High

Improper access control in Oracle Corporation Oracle SOA Suite
- Oracle Corporation Oracle SOA Suite
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-91225 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Improper access control in Oracle Corporation Oracle SOA Suite
- Oracle Corporation Oracle SOA Suite
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-91224 CVE record

CVSS 9.9 CriticalCritical · CVSS 9+

Improper access control in Oracle Corporation Oracle SOA Suite
- Oracle Corporation Oracle SOA Suite
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-91223 CVE record

CVSS 8.8 High

Improper access control in Oracle Corporation Oracle SOA Suite
- Oracle Corporation Oracle SOA Suite
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-91221 CVE record

CVSS 10.0 CriticalCritical · CVSS 9+

Improper access control in Oracle Corporation Oracle SOA Suite
- Oracle Corporation Oracle SOA Suite
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-91218 CVE record

CVSS 9.6 CriticalCritical · CVSS 9+

Improper access control in Oracle Corporation Oracle SOA Suite
- Oracle Corporation Oracle SOA Suite
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-91216 CVE record

CVSS 10.0 CriticalCritical · CVSS 9+

Improper access control in Oracle Corporation Oracle SOA Suite
- Oracle Corporation Oracle SOA Suite
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-91215 CVE record

CVSS 8.8 High

Improper access control in Oracle Corporation Oracle SOA Suite
- Oracle Corporation Oracle SOA Suite
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-91212 CVE record

CVSS 8.6 High

Improper access control in Oracle Corporation Oracle Identity Manager Connector
- Oracle Corporation Oracle Identity Manager Connector
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-91211 CVE record

CVSS 8.7 High

Improper access control in Oracle Corporation Oracle Identity Manager Connector
- Oracle Corporation Oracle Identity Manager Connector
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-91210 CVE record

CVSS 6.5 Medium

Improper access control in Oracle Corporation Oracle WebCenter Content
- Oracle Corporation Oracle WebCenter Content
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-91209 CVE record

CVSS 4.2 Medium

Improper access control in Oracle Corporation Oracle Solaris
- Oracle Corporation Oracle Solaris
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-87422 CVE record

CVSS 2.5 Low

Improper authorization in Oracle Corporation Oracle Solaris
- Oracle Corporation Oracle Solaris
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-87421 CVE record

CVSS 7.1 High

Improper authorization in Oracle Corporation Oracle Solaris
- Oracle Corporation Oracle Solaris
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-87420 CVE record

CVSS 8.8 High

Improper access control in Oracle Corporation Oracle Service Bus
- Oracle Corporation Oracle Service Bus
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-87415 CVE record

CVSS 5.3 Medium

Improper access control in Oracle Corporation PeopleSoft Enterprise PeopleTools
- Oracle Corporation PeopleSoft Enterprise PeopleTools
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-87403 CVE record

CVSS 7.1 High

Improper access control in Oracle Corporation Applications DBA
- Oracle Corporation Applications DBA
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-87402 CVE record

CVSS 7.3 High

Improper access control in Oracle Corporation Applications DBA
- Oracle Corporation Applications DBA
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-87400 CVE record

CVSS 6.9 Medium

Improper access control in Oracle Corporation Oracle WebCenter Content
- Oracle Corporation Oracle WebCenter Content
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-87399 CVE record

CVSS 6.3 Medium

Improper access control in Oracle Corporation Oracle WebCenter Content
- Oracle Corporation Oracle WebCenter Content
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-87397 CVE record

CVSS 8.8 High

Improper access control in Oracle Corporation Oracle Outside In Technology
- Oracle Corporation Oracle Outside In Technology
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-87396 CVE record

CVSS 6.5 Medium

Improper access control in Oracle Corporation Oracle Outside In Technology
- Oracle Corporation Oracle Outside In Technology
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-87394 CVE record

CVSS 8.2 High

Improper access control in Oracle Corporation Oracle Outside In Technology
- Oracle Corporation Oracle Outside In Technology
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-87393 CVE record

CVSS 6.5 Medium

Improper access control in Oracle Corporation Oracle Outside In Technology
- Oracle Corporation Oracle Outside In Technology
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-87392 CVE record

CVSS 6.5 Medium

Improper access control in Oracle Corporation WebCenter Content: Imaging
- Oracle Corporation WebCenter Content: Imaging
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-87388 CVE record

CVSS 5.3 Medium

Improper access control in Oracle Corporation JD Edwards EnterpriseOne Configurator
- Oracle Corporation JD Edwards EnterpriseOne Configurator
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-87377 CVE record

CVSS 6.8 Medium

Improper access control in Oracle Corporation WebCenter Content: Imaging
- Oracle Corporation WebCenter Content: Imaging
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-87373 CVE record

CVSS 6.5 Medium

Improper access control in Oracle Corporation Oracle WebCenter Content
- Oracle Corporation Oracle WebCenter Content
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-87364 CVE record

CVSS 8.8 High

Improper access control in Oracle Corporation Oracle Service Bus
- Oracle Corporation Oracle Service Bus
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-87352 CVE record

CVSS 4.4 Medium

Improper access control in Oracle Corporation PeopleSoft Enterprise PeopleTools
- Oracle Corporation PeopleSoft Enterprise PeopleTools
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-87351 CVE record

CVSS 8.8 High

Improper access control in Oracle Corporation Oracle GoldenGate
- Oracle Corporation Oracle GoldenGate
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-87349 CVE record

CVSS 6.5 Medium

Improper access control in Oracle Corporation PeopleSoft Enterprise PeopleTools
- Oracle Corporation PeopleSoft Enterprise PeopleTools
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-87323 CVE record

CVSS 5.5 Medium

Improper access control in Oracle Corporation JD Edwards EnterpriseOne Tools
- Oracle Corporation JD Edwards EnterpriseOne Tools
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-87322 CVE record

CVSS 8.4 High

Improper access control in Oracle Corporation Oracle VM VirtualBox
- Oracle Corporation Oracle VM VirtualBox
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-87321 CVE record

CVSS 6.4 Medium

Improper access control in Oracle Corporation JD Edwards EnterpriseOne Tools
- Oracle Corporation JD Edwards EnterpriseOne Tools
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-87320 CVE record

CVSS 6.7 Medium

Improper access control in Oracle Corporation JD Edwards EnterpriseOne Tools
- Oracle Corporation JD Edwards EnterpriseOne Tools
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-87318 CVE record

CVSS 6.3 Medium

Improper access control in Oracle Corporation JD Edwards EnterpriseOne Tools
- Oracle Corporation JD Edwards EnterpriseOne Tools
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-87317 CVE record

CVSS 4.8 Medium

Improper access control in Oracle Corporation JD Edwards EnterpriseOne Tools
- Oracle Corporation JD Edwards EnterpriseOne Tools
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-87316 CVE record

CVSS 7.8 High

Improper access control in Oracle Corporation JD Edwards EnterpriseOne Tools
- Oracle Corporation JD Edwards EnterpriseOne Tools
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-87315 CVE record

CVSS 7.5 High

Improper access control in Oracle Corporation JD Edwards EnterpriseOne Tools
- Oracle Corporation JD Edwards EnterpriseOne Tools
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-87312 CVE record

CVSS 7.5 High

Improper access control in Oracle Corporation JD Edwards EnterpriseOne Tools
- Oracle Corporation JD Edwards EnterpriseOne Tools
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-87311 CVE record

CVSS 5.6 Medium

Improper access control in Oracle Corporation Oracle VM VirtualBox
- Oracle Corporation Oracle VM VirtualBox
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-87310 CVE record

CVSS 8.8 High

Improper access control in Oracle Corporation JD Edwards EnterpriseOne Tools
- Oracle Corporation JD Edwards EnterpriseOne Tools
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-87309 CVE record

CVSS 8.1 High

Improper access control in Oracle Corporation JD Edwards EnterpriseOne Tools
- Oracle Corporation JD Edwards EnterpriseOne Tools
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-87305 CVE record

CVSS 8.1 High

Improper access control in Oracle Corporation JD Edwards EnterpriseOne Tools
- Oracle Corporation JD Edwards EnterpriseOne Tools
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-87304 CVE record

CVSS 8.6 High

Improper access control in Oracle Corporation Oracle Outside In Technology
- Oracle Corporation Oracle Outside In Technology
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-87303 CVE record

CVSS 5.9 Medium

Improper access control in Oracle Corporation Oracle VM VirtualBox
- Oracle Corporation Oracle VM VirtualBox
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-87300 CVE record

CVSS 8.7 High

Improper access control in Oracle Corporation Oracle Weblogic Server Proxy Plug-in
- Oracle Corporation Oracle Weblogic Server Proxy Plug-in
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-87296 CVE record

CVSS 7.5 High

Improper access control in Oracle Corporation Oracle Access Manager
- Oracle Corporation Oracle Access Manager
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-87295 CVE record

CVSS 6.5 Medium

Improper access control in Oracle Corporation Oracle HRMS (India)
- Oracle Corporation Oracle HRMS (India)
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-87294 CVE record

CVSS 6.5 Medium

Improper access control in Oracle Corporation Oracle Java SE and others
- Oracle Corporation Oracle Java SE
- Oracle Corporation Oracle GraalVM for JDK
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-87293 CVE record

CVSS 5.4 Medium

Improper access control in Oracle Corporation Oracle Java SE
- Oracle Corporation Oracle Java SE
- Broken access control
Not analysed yet 20 Oct 2026