Advisories · Weakness

Broken access control.

Missing or wrong authorization checks, IDOR, loose permissions. Every Advisory and CVE whose weakness (CWE) is one of these, newest first.

CVE-2026-91375 CVE record

CVSS 4.7 Medium

Incorrect authorization in Oracle Corporation Oracle Java SE
- Oracle Corporation Oracle Java SE
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-91374 CVE record

CVSS 4.8 Medium

Improper access control in Oracle Corporation Oracle Java SE and others
- Oracle Corporation Oracle Java SE
- Oracle Corporation Oracle GraalVM for JDK
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-91369 CVE record

CVSS 5.3 Medium

Improper access control in Oracle Corporation Siebel CRM Cloud Applications
- Oracle Corporation Siebel CRM Cloud Applications
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-91368 CVE record

CVSS 4.1 Medium

Improper access control in Oracle Corporation Siebel CRM Cloud Applications
- Oracle Corporation Siebel CRM Cloud Applications
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-91367 CVE record

CVSS 6.5 Medium

Improper access control in Oracle Corporation Siebel CRM Cloud Applications
- Oracle Corporation Siebel CRM Cloud Applications
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-91366 CVE record

CVSS 4.7 Medium

Improper access control in Oracle Corporation Siebel CRM Cloud Applications
- Oracle Corporation Siebel CRM Cloud Applications
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-91364 CVE record

CVSS 6.8 Medium

Improper access control in Oracle Corporation Siebel CRM Cloud Applications
- Oracle Corporation Siebel CRM Cloud Applications
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-91361 CVE record

CVSS 5.3 Medium

Improper access control in Oracle Corporation Siebel CRM Cloud Applications
- Oracle Corporation Siebel CRM Cloud Applications
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-91356 CVE record

CVSS 4.2 Medium

Improper access control in Oracle Corporation PeopleSoft Enterprise HCM Global Payroll Switzerland
- Oracle Corporation PeopleSoft Enterprise HCM Global Payroll Switzerland
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-91354 CVE record

CVSS 9.9 CriticalCritical · CVSS 9+

Improper access control in Oracle Corporation Oracle Outside In Technology
- Oracle Corporation Oracle Outside In Technology
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-91351 CVE record

CVSS 6.1 Medium

Improper access control in Oracle Corporation Oracle Outside In Technology
- Oracle Corporation Oracle Outside In Technology
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-91347 CVE record

CVSS 8.5 High

Improper access control in Oracle Corporation iSupport
- Oracle Corporation iSupport
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-91343 CVE record

CVSS 8.6 High

Improper access control in Oracle Corporation Oracle Outside In Technology
- Oracle Corporation Oracle Outside In Technology
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-91342 CVE record

CVSS 8.2 High

Improper access control in Oracle Corporation Oracle Outside In Technology
- Oracle Corporation Oracle Outside In Technology
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-91341 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Improper access control in Oracle Corporation Oracle Outside In Technology
- Oracle Corporation Oracle Outside In Technology
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-91340 CVE record

CVSS 8.8 High

Improper access control in Oracle Corporation Oracle Outside In Technology
- Oracle Corporation Oracle Outside In Technology
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-91338 CVE record

CVSS 7.1 High

Improper access control in Oracle Corporation iSupport
- Oracle Corporation iSupport
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-91337 CVE record

CVSS 7.4 High

Improper access control in Oracle Corporation iProcurement
- Oracle Corporation iProcurement
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-91336 CVE record

CVSS 6.5 Medium

Improper access control in Oracle Corporation Oracle Solaris
- Oracle Corporation Oracle Solaris
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-91332 CVE record

CVSS 5.3 Medium

Improper access control in Oracle Corporation Oracle Java SE
- Oracle Corporation Oracle Java SE
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-91331 CVE record

CVSS 3.8 Low

Improper access control in Oracle Corporation PeopleSoft Enterprise CC Common Application Objects
- Oracle Corporation PeopleSoft Enterprise CC Common Application Objects
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-91329 CVE record

CVSS 6.5 Medium

Improper access control in Oracle Corporation JD Edwards EnterpriseOne Tools
- Oracle Corporation JD Edwards EnterpriseOne Tools
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-91327 CVE record

CVSS 7.5 High

Improper access control in Oracle Corporation JD Edwards EnterpriseOne Tools
- Oracle Corporation JD Edwards EnterpriseOne Tools
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-91326 CVE record

CVSS 8.8 High

Improper access control in Oracle Corporation JD Edwards EnterpriseOne Tools
- Oracle Corporation JD Edwards EnterpriseOne Tools
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-91321 CVE record

CVSS 7.5 High

Improper access control in Oracle Corporation iProcurement
- Oracle Corporation iProcurement
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-91320 CVE record

CVSS 5.7 Medium

Improper access control in Oracle Corporation Oracle JDeveloper
- Oracle Corporation Oracle JDeveloper
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-91319 CVE record

CVSS 5.9 Medium

Improper access control in Oracle Corporation Oracle JDeveloper
- Oracle Corporation Oracle JDeveloper
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-91316 CVE record

CVSS 7.2 High

Improper access control in Oracle Corporation iProcurement
- Oracle Corporation iProcurement
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-91315 CVE record

CVSS 7.8 High

Improper access control in Oracle Corporation JD Edwards EnterpriseOne Tools
- Oracle Corporation JD Edwards EnterpriseOne Tools
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-91314 CVE record

CVSS 7.8 High

Improper access control in Oracle Corporation JD Edwards EnterpriseOne Tools
- Oracle Corporation JD Edwards EnterpriseOne Tools
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-91312 CVE record

CVSS 6.5 Medium

Improper access control in Oracle Corporation JD Edwards EnterpriseOne Tools
- Oracle Corporation JD Edwards EnterpriseOne Tools
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-91304 CVE record

CVSS 7.8 High

Improper access control in Oracle Corporation JD Edwards EnterpriseOne Tools
- Oracle Corporation JD Edwards EnterpriseOne Tools
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-91303 CVE record

CVSS 8.8 High

Improper access control in Oracle Corporation JD Edwards EnterpriseOne Tools
- Oracle Corporation JD Edwards EnterpriseOne Tools
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-91301 CVE record

CVSS 3.6 Low

Improper access control in Oracle Corporation JD Edwards EnterpriseOne Tools
- Oracle Corporation JD Edwards EnterpriseOne Tools
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-91299 CVE record

CVSS 10.0 CriticalCritical · CVSS 9+

Improper access control in Oracle Corporation JD Edwards EnterpriseOne Orchestrator
- Oracle Corporation JD Edwards EnterpriseOne Orchestrator
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-91298 CVE record

CVSS 5.4 Medium

Improper access control in Oracle Corporation JD Edwards EnterpriseOne Tools
- Oracle Corporation JD Edwards EnterpriseOne Tools
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-91297 CVE record

CVSS 6.1 Medium

Improper access control in Oracle Corporation JD Edwards EnterpriseOne Tools
- Oracle Corporation JD Edwards EnterpriseOne Tools
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-91291 CVE record

CVSS 3.6 Low

Improper access control in Oracle Corporation JD Edwards EnterpriseOne Tools
- Oracle Corporation JD Edwards EnterpriseOne Tools
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-91288 CVE record

CVSS 7.4 High

Improper access control in Oracle Corporation JD Edwards EnterpriseOne Tools
- Oracle Corporation JD Edwards EnterpriseOne Tools
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-91287 CVE record

CVSS 8.1 High

Improper access control in Oracle Corporation JD Edwards EnterpriseOne Tools
- Oracle Corporation JD Edwards EnterpriseOne Tools
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-91286 CVE record

CVSS 8.2 High

Improper access control in Oracle Corporation JD Edwards EnterpriseOne Tools
- Oracle Corporation JD Edwards EnterpriseOne Tools
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-91285 CVE record

CVSS 6.5 Medium

Improper access control in Oracle Corporation JD Edwards EnterpriseOne Orchestrator
- Oracle Corporation JD Edwards EnterpriseOne Orchestrator
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-91281 CVE record

CVSS 6.1 Medium

Improper access control in Oracle Corporation JD Edwards EnterpriseOne Tools
- Oracle Corporation JD Edwards EnterpriseOne Tools
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-91280 CVE record

CVSS 6.1 Medium

Improper access control in Oracle Corporation JD Edwards EnterpriseOne Tools
- Oracle Corporation JD Edwards EnterpriseOne Tools
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-91279 CVE record

CVSS 6.1 Medium

Improper access control in Oracle Corporation JD Edwards EnterpriseOne Tools
- Oracle Corporation JD Edwards EnterpriseOne Tools
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-91276 CVE record

CVSS 5.3 Medium

Improper access control in Oracle Corporation JD Edwards EnterpriseOne Orchestrator
- Oracle Corporation JD Edwards EnterpriseOne Orchestrator
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-91275 CVE record

CVSS 6.6 Medium

Improper access control in Oracle Corporation JD Edwards EnterpriseOne Tools
- Oracle Corporation JD Edwards EnterpriseOne Tools
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-91273 CVE record

CVSS 8.6 High

Improper access control in Oracle Corporation JD Edwards EnterpriseOne Tools
- Oracle Corporation JD Edwards EnterpriseOne Tools
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-91272 CVE record

CVSS 7.4 High

Improper access control in Oracle Corporation JD Edwards EnterpriseOne Tools
- Oracle Corporation JD Edwards EnterpriseOne Tools
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-91271 CVE record

CVSS 8.1 High

Improper access control in Oracle Corporation JD Edwards EnterpriseOne Tools
- Oracle Corporation JD Edwards EnterpriseOne Tools
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-91269 CVE record

CVSS 8.1 High

Improper access control in Oracle Corporation JD Edwards EnterpriseOne Tools
- Oracle Corporation JD Edwards EnterpriseOne Tools
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-91268 CVE record

CVSS 8.8 High

Improper access control in Oracle Corporation JD Edwards EnterpriseOne Tools
- Oracle Corporation JD Edwards EnterpriseOne Tools
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-91266 CVE record

CVSS 8.4 High

Improper access control in Oracle Corporation JD Edwards EnterpriseOne Tools
- Oracle Corporation JD Edwards EnterpriseOne Tools
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-91264 CVE record

CVSS 3.7 Low

Improper access control in Oracle Corporation PeopleSoft Enterprise SCM Manufacturing
- Oracle Corporation PeopleSoft Enterprise SCM Manufacturing
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-91263 CVE record

CVSS 4.9 Medium

Incorrect authorization in Oracle Corporation PeopleSoft Enterprise PeopleTools
- Oracle Corporation PeopleSoft Enterprise PeopleTools
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-91262 CVE record

CVSS 5.4 Medium

Improper access control in Oracle Corporation Oracle WebCenter Content
- Oracle Corporation Oracle WebCenter Content
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-91251 CVE record

CVSS 9.9 CriticalCritical · CVSS 9+

Improper access control in Oracle Corporation Oracle SOA Suite
- Oracle Corporation Oracle SOA Suite
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-91245 CVE record

CVSS 6.5 Medium

Improper authorization in Oracle Corporation Oracle WebCenter Portal
- Oracle Corporation Oracle WebCenter Portal
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-91243 CVE record

CVSS 9.6 CriticalCritical · CVSS 9+

Improper access control in Oracle Corporation Oracle Business Process Management Suite
- Oracle Corporation Oracle Business Process Management Suite
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-91242 CVE record

CVSS 7.4 High

Improper access control in Oracle Corporation Oracle Solaris
- Oracle Corporation Oracle Solaris
- Broken access control
Not analysed yet 20 Oct 2026