Advisories · Weakness

Broken access control.

Missing or wrong authorization checks, IDOR, loose permissions. Every Advisory and CVE whose weakness (CWE) is one of these, newest first.

CVE-2026-101573 CVE record

CVSS 6.8 Medium

Improper access control in Oracle Corporation Helidon
- Oracle Corporation Helidon
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101571 CVE record

CVSS 5.6 Medium

Improper access control in Oracle Corporation Helidon
- Oracle Corporation Helidon
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101569 CVE record

CVSS 6.5 Medium

Improper access control in Oracle Corporation Helidon
- Oracle Corporation Helidon
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101567 CVE record

CVSS 8.8 High

Improper access control in Oracle Corporation Oracle Cost Management
- Oracle Corporation Oracle Cost Management
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101566 CVE record

CVSS 7.8 High

Improper access control in Oracle Corporation Oracle Application Object Library
- Oracle Corporation Oracle Application Object Library
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101560 CVE record

CVSS 7.1 High

Improper access control in Oracle Corporation Oracle Commerce Platform
- Oracle Corporation Oracle Commerce Platform
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101559 CVE record

CVSS 6.5 Medium

Incorrect authorization in Oracle Corporation Oracle Purchasing
- Oracle Corporation Oracle Purchasing
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101557 CVE record

CVSS 8.8 High

Improper access control in Oracle Corporation Oracle Purchasing
- Oracle Corporation Oracle Purchasing
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101556 CVE record

CVSS 7.5 High

Improper access control in Oracle Corporation Oracle Payroll
- Oracle Corporation Oracle Payroll
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101555 CVE record

CVSS 7.5 High

Improper access control in Oracle Corporation Oracle Payroll
- Oracle Corporation Oracle Payroll
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101554 CVE record

CVSS 7.5 High

Improper access control in Oracle Corporation Oracle Payroll
- Oracle Corporation Oracle Payroll
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101553 CVE record

CVSS 6.5 Medium

Incorrect authorization in Oracle Corporation Oracle Payroll
- Oracle Corporation Oracle Payroll
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101552 CVE record

CVSS 7.5 High

Improper access control in Oracle Corporation Oracle Application Object Library
- Oracle Corporation Oracle Application Object Library
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101546 CVE record

CVSS 7.5 High

Improper access control in Oracle Corporation Oracle Materials Requirement Planning
- Oracle Corporation Oracle Materials Requirement Planning
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101543 CVE record

CVSS 7.5 High

Improper access control in Oracle Corporation Oracle Capacity
- Oracle Corporation Oracle Capacity
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101542 CVE record

CVSS 8.8 High

Improper access control in Oracle Corporation Oracle Capacity
- Oracle Corporation Oracle Capacity
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101539 CVE record

CVSS 6.5 Medium

Incorrect authorization in Oracle Corporation Oracle Payroll
- Oracle Corporation Oracle Payroll
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101538 CVE record

CVSS 6.5 Medium

Incorrect authorization in Oracle Corporation Oracle Order Management
- Oracle Corporation Oracle Order Management
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101536 CVE record

CVSS 7.5 High

Improper access control in Oracle Corporation Oracle Cost Management
- Oracle Corporation Oracle Cost Management
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101535 CVE record

CVSS 7.5 High

Improper access control in Oracle Corporation Oracle Sales Foundation
- Oracle Corporation Oracle Sales Foundation
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101534 CVE record

CVSS 8.5 High

Improper access control in Oracle Corporation Oracle EDI Gateway
- Oracle Corporation Oracle EDI Gateway
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101533 CVE record

CVSS 6.6 Medium

Improper access control in Oracle Corporation Oracle EDI Gateway
- Oracle Corporation Oracle EDI Gateway
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101532 CVE record

CVSS 7.2 High

Missing authentication in Oracle Corporation Oracle EDI Gateway
- Oracle Corporation Oracle EDI Gateway
- Privilege escalation
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101529 CVE record

CVSS 9.9 CriticalCritical · CVSS 9+

Improper access control in Oracle Corporation Oracle Enterprise Manager for Oracle Database
- Oracle Corporation Oracle Enterprise Manager for Oracle Database
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101528 CVE record

CVSS 9.9 CriticalCritical · CVSS 9+

Improper access control in Oracle Corporation Oracle Enterprise Manager for Oracle Database
- Oracle Corporation Oracle Enterprise Manager for Oracle Database
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101526 CVE record

CVSS 8.8 High

Improper access control in Oracle Corporation Oracle Enterprise Manager for Siebel
- Oracle Corporation Oracle Enterprise Manager for Siebel
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101525 CVE record

CVSS 8.8 High

Improper access control in Oracle Corporation Oracle Enterprise Manager for Siebel
- Oracle Corporation Oracle Enterprise Manager for Siebel
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101522 CVE record

CVSS 5.5 Medium

Improper access control in Oracle Corporation Oracle TimesTen In-Memory Database
- Oracle Corporation Oracle TimesTen In-Memory Database
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101519 CVE record

CVSS 7.2 High

Missing authentication in Oracle Corporation Oracle EDI Gateway
- Oracle Corporation Oracle EDI Gateway
- Privilege escalation
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101518 CVE record

CVSS 8.8 High

Improper access control in Oracle Corporation Oracle Enterprise Manager Base Platform
- Oracle Corporation Oracle Enterprise Manager Base Platform
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101517 CVE record

CVSS 5.5 Medium

Improper access control in Oracle Corporation Oracle Utilities Network Management System
- Oracle Corporation Oracle Utilities Network Management System
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101516 CVE record

CVSS 6.5 Medium

Improper access control in Oracle Corporation Oracle Java SE and others
- Oracle Corporation Oracle Java SE
- Oracle Corporation Oracle GraalVM for JDK
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101515 CVE record

CVSS 5.9 Medium

Information disclosure in Oracle Corporation Oracle WebLogic Server
- Oracle Corporation Oracle WebLogic Server
- Information disclosure
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101512 CVE record

CVSS 6.5 Medium

Improper access control in Oracle Corporation Oracle Database Server
- Oracle Corporation Oracle Database Server
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101505 CVE record

CVSS 8.7 High

Improper access control in Oracle Corporation Oracle Trusted Answer Search
- Oracle Corporation Oracle Trusted Answer Search
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101503 CVE record

CVSS 9.9 CriticalCritical · CVSS 9+

Improper access control in Oracle Corporation Oracle Trusted Answer Search
- Oracle Corporation Oracle Trusted Answer Search
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101500 CVE record

CVSS 6.5 Medium

Improper access control in Oracle Corporation Oracle Global Lifecycle Management OPatchAuto
- Oracle Corporation Oracle Global Lifecycle Management OPatchAuto
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101493 CVE record

CVSS 5.4 Medium

Improper access control in Oracle Corporation Oracle REST Data Services
- Oracle Corporation Oracle REST Data Services
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101492 CVE record

CVSS 4.7 Medium

Improper access control in Oracle Corporation Siebel CRM Integration
- Oracle Corporation Siebel CRM Integration
- Broken access control
- Cross-site request forgery (CSRF)
Not analysed yet 20 Oct 2026
CVE-2026-101491 CVE record

CVSS 5.0 Medium

Incorrect authorization in Oracle Corporation PeopleSoft Enterprise PeopleTools
- Oracle Corporation PeopleSoft Enterprise PeopleTools
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101489 CVE record

CVSS 4.3 Medium

Incorrect authorization in Oracle Corporation PeopleSoft Enterprise PeopleTools
- Oracle Corporation PeopleSoft Enterprise PeopleTools
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101487 CVE record

CVSS 5.4 Medium

Incorrect authorization in Oracle Corporation PeopleSoft Enterprise PeopleTools
- Oracle Corporation PeopleSoft Enterprise PeopleTools
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101486 CVE record

CVSS 5.4 Medium

Incorrect authorization in Oracle Corporation PeopleSoft Enterprise PeopleTools
- Oracle Corporation PeopleSoft Enterprise PeopleTools
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101485 CVE record

CVSS 6.5 Medium

Improper access control in Oracle Corporation Oracle Autonomous Health Framework
- Oracle Corporation Oracle Autonomous Health Framework
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101482 CVE record

CVSS 7.8 High

Improper access control in Oracle Corporation Oracle Secure Backup
- Oracle Corporation Oracle Secure Backup
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101481 CVE record

CVSS 8.8 High

Improper access control in Oracle Corporation Oracle Secure Backup
- Oracle Corporation Oracle Secure Backup
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101476 CVE record

CVSS 4.3 Medium

Missing authorization in Oracle Corporation Siebel Apps - Marketing
- Oracle Corporation Siebel Apps - Marketing
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101473 CVE record

CVSS 8.1 High

Missing authentication in Oracle Corporation Oracle Agile Product Lifecycle Management for Process
- Oracle Corporation Oracle Agile Product Lifecycle Management for Process
- Broken access control
- Authentication bypass
Not analysed yet 20 Oct 2026
CVE-2026-101472 CVE record

CVSS 5.5 Medium

Incorrect default permissions in Oracle Corporation Oracle Product Lifecycle Analytics
- Oracle Corporation Oracle Product Lifecycle Analytics
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101470 CVE record

CVSS 6.0 Medium

Improper access control in Oracle Corporation Oracle Product Lifecycle Analytics
- Oracle Corporation Oracle Product Lifecycle Analytics
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101467 CVE record

CVSS 7.4 High

Improper access control in Oracle Corporation Siebel CRM End User
- Oracle Corporation Siebel CRM End User
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101465 CVE record

CVSS 6.3 Medium

Improper access control in Oracle Corporation Siebel CRM Deployment
- Oracle Corporation Siebel CRM Deployment
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101464 CVE record

CVSS 7.1 High

Improper access control in Oracle Corporation Siebel CRM Deployment
- Oracle Corporation Siebel CRM Deployment
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101463 CVE record

CVSS 7.5 High

Improper access control in Oracle Corporation Siebel CRM End User
- Oracle Corporation Siebel CRM End User
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101462 CVE record

CVSS 5.5 Medium

Improper access control in Oracle Corporation Siebel CRM Deployment
- Oracle Corporation Siebel CRM Deployment
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101460 CVE record

CVSS 7.5 High

Improper access control in Oracle Corporation Siebel CRM Deployment
- Oracle Corporation Siebel CRM Deployment
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101458 CVE record

CVSS 8.2 High

Improper access control in Oracle Corporation Siebel CRM Deployment
- Oracle Corporation Siebel CRM Deployment
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101457 CVE record

CVSS 8.8 High

Improper access control in Oracle Corporation Siebel Apps - Life Sciences
- Oracle Corporation Siebel Apps - Life Sciences
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101456 CVE record

CVSS 6.0 Medium

Improper access control in Oracle Corporation Siebel CRM Development
- Oracle Corporation Siebel CRM Development
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101455 CVE record

CVSS 6.3 Medium

Improper access control in Oracle Corporation Siebel CRM Development
- Oracle Corporation Siebel CRM Development
- Broken access control
Not analysed yet 20 Oct 2026