Advisories · Weakness

Broken access control.

Missing or wrong authorization checks, IDOR, loose permissions. Every Advisory and CVE whose weakness (CWE) is one of these, newest first.

CVE-2026-91511 CVE record

CVSS 7.1 High

Improper access control in Oracle Corporation Oracle Purchasing
- Oracle Corporation Oracle Purchasing
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-91505 CVE record

CVSS 6.0 Medium

Improper access control in Oracle Corporation PeopleSoft Enterprise PeopleTools
- Oracle Corporation PeopleSoft Enterprise PeopleTools
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-91504 CVE record

CVSS 7.5 High

Improper access control in Oracle Corporation Oracle WebCenter Content
- Oracle Corporation Oracle WebCenter Content
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-91503 CVE record

CVSS 8.1 High

Improper access control in Oracle Corporation Oracle Database Server
- Oracle Corporation Oracle Database Server
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-91501 CVE record

CVSS 5.5 Medium

Improper access control in Oracle Corporation Oracle Identity Manager
- Oracle Corporation Oracle Identity Manager
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-91497 CVE record

CVSS 5.3 Medium

Improper access control in Oracle Corporation PeopleSoft Enterprise PeopleTools
- Oracle Corporation PeopleSoft Enterprise PeopleTools
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-91496 CVE record

CVSS 7.5 High

Improper access control in Oracle Corporation Workflow
- Oracle Corporation Workflow
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-91494 CVE record

CVSS 7.4 High

Improper access control in Oracle Corporation Oracle Identity Manager Connector
- Oracle Corporation Oracle Identity Manager Connector
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-91492 CVE record

CVSS 8.7 High

Improper access control in Oracle Corporation Oracle Identity Manager Connector
- Oracle Corporation Oracle Identity Manager Connector
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-91489 CVE record

CVSS 7.1 High

Improper access control in Oracle Corporation Oracle Identity Manager Connector
- Oracle Corporation Oracle Identity Manager Connector
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-91488 CVE record

CVSS 7.1 High

Improper access control in Oracle Corporation Oracle Identity Manager Connector
- Oracle Corporation Oracle Identity Manager Connector
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-91487 CVE record

CVSS 4.8 Medium

Improper access control in Oracle Corporation Oracle Java SE
- Oracle Corporation Oracle Java SE
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-91486 CVE record

CVSS 4.4 Medium

Improper access control in Oracle Corporation PeopleSoft Enterprise FIN General Ledger Brazil
- Oracle Corporation PeopleSoft Enterprise FIN General Ledger Brazil
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-91485 CVE record

CVSS 3.8 Low

Improper access control in Oracle Corporation PeopleSoft Enterprise FIN Cash Management
- Oracle Corporation PeopleSoft Enterprise FIN Cash Management
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-91484 CVE record

CVSS 7.5 High

Improper access control in Oracle Corporation Oracle Java SE
- Oracle Corporation Oracle Java SE
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-91482 CVE record

CVSS 6.5 Medium

Improper access control in Oracle Corporation PeopleSoft Enterprise SCM Strategic Sourcing
- Oracle Corporation PeopleSoft Enterprise SCM Strategic Sourcing
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-91481 CVE record

CVSS 5.4 Medium

Improper access control in Oracle Corporation PeopleSoft Enterprise SCM Purchasing
- Oracle Corporation PeopleSoft Enterprise SCM Purchasing
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-91480 CVE record

CVSS 6.5 Medium

Improper access control in Oracle Corporation PeopleSoft Enterprise SCM Strategic Sourcing
- Oracle Corporation PeopleSoft Enterprise SCM Strategic Sourcing
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-91478 CVE record

CVSS 8.8 High

Improper access control in Oracle Corporation PeopleSoft Enterprise SCM Strategic Sourcing
- Oracle Corporation PeopleSoft Enterprise SCM Strategic Sourcing
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-91475 CVE record

CVSS 6.6 Medium

Improper access control in Oracle Corporation Oracle Outside In Technology
- Oracle Corporation Oracle Outside In Technology
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-91474 CVE record

CVSS 6.1 Medium

Improper access control in Oracle Corporation PeopleSoft Enterprise FIN Common Objects Brazil
- Oracle Corporation PeopleSoft Enterprise FIN Common Objects Brazil
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-91471 CVE record

CVSS 3.7 Low

Improper access control in Oracle Corporation PeopleSoft Enterprise CC Common Application Objects
- Oracle Corporation PeopleSoft Enterprise CC Common Application Objects
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-91468 CVE record

CVSS 6.5 Medium

Improper access control in Oracle Corporation PeopleSoft Enterprise PeopleTools
- Oracle Corporation PeopleSoft Enterprise PeopleTools
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-91466 CVE record

CVSS 6.4 Medium

Improper access control in Oracle Corporation PeopleSoft Enterprise FIN Common Objects Argentina
- Oracle Corporation PeopleSoft Enterprise FIN Common Objects Argentina
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-91462 CVE record

CVSS 5.9 Medium

Improper access control in Oracle Corporation Oracle Java SE and others
- Oracle Corporation Oracle Java SE
- Oracle Corporation Oracle GraalVM for JDK
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-91453 CVE record

CVSS 5.3 Medium

Improper access control in Oracle Corporation Oracle Java SE and others
- Oracle Corporation Oracle Java SE
- Oracle Corporation Oracle GraalVM for JDK
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-91452 CVE record

CVSS 5.3 Medium

Improper access control in Oracle Corporation Oracle Java SE and others
- Oracle Corporation Oracle Java SE
- Oracle Corporation Oracle GraalVM for JDK
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-91451 CVE record

CVSS 5.3 Medium

Improper access control in Oracle Corporation Oracle Java SE
- Oracle Corporation Oracle Java SE
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-91447 CVE record

CVSS 7.5 High

Improper access control in Oracle Corporation Siebel CRM Deployment
- Oracle Corporation Siebel CRM Deployment
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-91441 CVE record

CVSS 6.5 Medium

Improper access control in Oracle Corporation Siebel Apps - Customer Order Management
- Oracle Corporation Siebel Apps - Customer Order Management
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-91440 CVE record

CVSS 6.5 Medium

Improper access control in Oracle Corporation Siebel CRM Deployment
- Oracle Corporation Siebel CRM Deployment
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-91438 CVE record

CVSS 7.1 High

Improper access control in Oracle Corporation Siebel CRM Deployment
- Oracle Corporation Siebel CRM Deployment
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-91437 CVE record

CVSS 8.7 High

Improper access control in Oracle Corporation Siebel CRM Deployment
- Oracle Corporation Siebel CRM Deployment
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-91436 CVE record

CVSS 3.9 Low

Improper access control in Oracle Corporation Siebel CRM Deployment
- Oracle Corporation Siebel CRM Deployment
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-91432 CVE record

CVSS 6.5 Medium

Improper access control in Oracle Corporation Siebel CRM End User
- Oracle Corporation Siebel CRM End User
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-91431 CVE record

CVSS 5.5 Medium

Improper access control in Oracle Corporation Siebel CRM End User
- Oracle Corporation Siebel CRM End User
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-91429 CVE record

CVSS 6.5 Medium

Improper access control in Oracle Corporation Siebel CRM Deployment
- Oracle Corporation Siebel CRM Deployment
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-91424 CVE record

CVSS 6.4 Medium

Improper access control in Oracle Corporation Siebel CRM Deployment
- Oracle Corporation Siebel CRM Deployment
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-91423 CVE record

CVSS 6.0 Medium

Improper access control in Oracle Corporation Siebel CRM Deployment
- Oracle Corporation Siebel CRM Deployment
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-91422 CVE record

CVSS 5.3 Medium

Improper access control in Oracle Corporation Siebel CRM Deployment
- Oracle Corporation Siebel CRM Deployment
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-91420 CVE record

CVSS 6.5 Medium

Improper access control in Oracle Corporation Siebel CRM Deployment
- Oracle Corporation Siebel CRM Deployment
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-91414 CVE record

CVSS 5.3 Medium

Improper access control in Oracle Corporation Siebel CRM Deployment
- Oracle Corporation Siebel CRM Deployment
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-91413 CVE record

CVSS 6.0 Medium

Improper access control in Oracle Corporation Siebel CRM Development
- Oracle Corporation Siebel CRM Development
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-91412 CVE record

CVSS 6.5 Medium

Improper access control in Oracle Corporation Siebel CRM End User
- Oracle Corporation Siebel CRM End User
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-91399 CVE record

CVSS 4.3 Medium

Improper access control in Oracle Corporation Primavera P6 Enterprise Project Portfolio Management
- Oracle Corporation Primavera P6 Enterprise Project Portfolio Management
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-91398 CVE record

CVSS 6.8 Medium

Improper access control in Oracle Corporation Oracle Java SE and others
- Oracle Corporation Oracle Java SE
- Oracle Corporation Oracle GraalVM for JDK
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-91397 CVE record

CVSS 3.6 Low

Improper access control in Oracle Corporation Oracle Java SE and others
- Oracle Corporation Oracle Java SE
- Oracle Corporation Oracle GraalVM for JDK
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-91396 CVE record

CVSS 6.5 Medium

Improper access control in Oracle Corporation Oracle Java SE and others
- Oracle Corporation Oracle Java SE
- Oracle Corporation Oracle GraalVM for JDK
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-91395 CVE record

CVSS 6.5 Medium

Improper access control in Oracle Corporation Oracle Java SE and others
- Oracle Corporation Oracle Java SE
- Oracle Corporation Oracle GraalVM for JDK
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-91390 CVE record

CVSS 5.4 Medium

Improper access control in Oracle Corporation Siebel CRM End User
- Oracle Corporation Siebel CRM End User
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-91389 CVE record

CVSS 5.4 Medium

Improper access control in Oracle Corporation Siebel CRM End User
- Oracle Corporation Siebel CRM End User
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-91388 CVE record

CVSS 4.7 Medium

Improper access control in Oracle Corporation Siebel CRM End User
- Oracle Corporation Siebel CRM End User
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-91387 CVE record

CVSS 5.4 Medium

Improper access control in Oracle Corporation Siebel CRM End User
- Oracle Corporation Siebel CRM End User
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-91386 CVE record

CVSS 6.8 Medium

Improper access control in Oracle Corporation JD Edwards EnterpriseOne Orchestrator
- Oracle Corporation JD Edwards EnterpriseOne Orchestrator
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-91383 CVE record

CVSS 6.6 Medium

Improper access control in Oracle Corporation JD Edwards EnterpriseOne Tools
- Oracle Corporation JD Edwards EnterpriseOne Tools
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-91382 CVE record

CVSS 6.5 Medium

Improper access control in Oracle Corporation Oracle Java SE and others
- Oracle Corporation Oracle Java SE
- Oracle Corporation Oracle GraalVM for JDK
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-91381 CVE record

CVSS 3.7 Low

Improper access control in Oracle Corporation Oracle Java SE and others
- Oracle Corporation Oracle Java SE
- Oracle Corporation Oracle GraalVM Enterprise Edition
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-91380 CVE record

CVSS 4.0 Medium

Improper access control in Oracle Corporation Oracle Java SE and others
- Oracle Corporation Oracle Java SE
- Oracle Corporation Oracle GraalVM for JDK
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-91378 CVE record

CVSS 6.1 Medium

Improper access control in Oracle Corporation Siebel CRM Integration
- Oracle Corporation Siebel CRM Integration
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-91376 CVE record

CVSS 6.5 Medium

Improper access control in Oracle Corporation Primavera P6 Enterprise Project Portfolio Management
- Oracle Corporation Primavera P6 Enterprise Project Portfolio Management
- Broken access control
Not analysed yet 20 Oct 2026