Advisories · Weakness

Broken access control.

Missing or wrong authorization checks, IDOR, loose permissions. Every Advisory and CVE whose weakness (CWE) is one of these, newest first.

CVE-2026-101669 CVE record

CVSS 6.8 Medium

Improper access control in Oracle Corporation Oracle Public Sector Human Resources
- Oracle Corporation Oracle Public Sector Human Resources
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101668 CVE record

CVSS 6.1 Medium

Improper access control in Oracle Corporation Oracle Customer Care
- Oracle Corporation Oracle Customer Care
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101667 CVE record

CVSS 5.4 Medium

Improper access control in Oracle Corporation Oracle Trade Management
- Oracle Corporation Oracle Trade Management
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101666 CVE record

CVSS 5.4 Medium

Improper access control in Oracle Corporation Oracle Trade Management
- Oracle Corporation Oracle Trade Management
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101665 CVE record

CVSS 8.1 High

Improper access control in Oracle Corporation Oracle Mobile Field Service
- Oracle Corporation Oracle Mobile Field Service
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101664 CVE record

CVSS 8.8 High

Improper access control in Oracle Corporation Oracle Mobile Field Service
- Oracle Corporation Oracle Mobile Field Service
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101662 CVE record

CVSS 7.1 High

Improper access control in Oracle Corporation Oracle Mobile Field Service
- Oracle Corporation Oracle Mobile Field Service
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101661 CVE record

CVSS 7.4 High

Improper access control in Oracle Corporation Oracle Mobile Field Service
- Oracle Corporation Oracle Mobile Field Service
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101660 CVE record

CVSS 7.5 High

Improper access control in Oracle Corporation Oracle Mobile Field Service
- Oracle Corporation Oracle Mobile Field Service
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101658 CVE record

CVSS 7.4 High

Improper access control in Oracle Corporation Oracle Mobile Field Service
- Oracle Corporation Oracle Mobile Field Service
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101656 CVE record

CVSS 8.8 High

Improper access control in Oracle Corporation Oracle Mobile Field Service
- Oracle Corporation Oracle Mobile Field Service
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101655 CVE record

CVSS 8.8 High

Improper access control in Oracle Corporation Oracle Mobile Field Service
- Oracle Corporation Oracle Mobile Field Service
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101654 CVE record

CVSS 8.8 High

Improper access control in Oracle Corporation Oracle Mobile Field Service
- Oracle Corporation Oracle Mobile Field Service
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101653 CVE record

CVSS 8.8 High

Improper access control in Oracle Corporation Oracle Mobile Field Service
- Oracle Corporation Oracle Mobile Field Service
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101651 CVE record

CVSS 6.5 Medium

Improper access control in Oracle Corporation Oracle Partner Management
- Oracle Corporation Oracle Partner Management
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101650 CVE record

CVSS 7.1 High

Improper access control in Oracle Corporation Oracle Partner Management
- Oracle Corporation Oracle Partner Management
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101649 CVE record

CVSS 7.1 High

Improper access control in Oracle Corporation Oracle Partner Management
- Oracle Corporation Oracle Partner Management
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101648 CVE record

CVSS 8.4 High

Improper access control in Oracle Corporation Oracle Partner Management
- Oracle Corporation Oracle Partner Management
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101647 CVE record

CVSS 7.5 High

Improper access control in Oracle Corporation Oracle iSetup
- Oracle Corporation Oracle iSetup
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101646 CVE record

CVSS 7.2 High

Improper access control in Oracle Corporation Oracle iSetup
- Oracle Corporation Oracle iSetup
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101645 CVE record

CVSS 7.5 High

Improper access control in Oracle Corporation Oracle iSetup
- Oracle Corporation Oracle iSetup
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101644 CVE record

CVSS 6.6 Medium

Improper access control in Oracle Corporation Oracle Mobile Field Service
- Oracle Corporation Oracle Mobile Field Service
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101643 CVE record

CVSS 7.1 High

Improper access control in Oracle Corporation Oracle Sales Online
- Oracle Corporation Oracle Sales Online
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101642 CVE record

CVSS 7.1 High

Improper access control in Oracle Corporation Oracle Report Manager
- Oracle Corporation Oracle Report Manager
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101641 CVE record

CVSS 7.6 High

Improper access control in Oracle Corporation Oracle Report Manager
- Oracle Corporation Oracle Report Manager
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101640 CVE record

CVSS 8.2 High

Improper access control in Oracle Corporation Oracle Marketing
- Oracle Corporation Oracle Marketing
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101639 CVE record

CVSS 5.4 Medium

Improper access control in Oracle Corporation Oracle Marketing
- Oracle Corporation Oracle Marketing
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101638 CVE record

CVSS 7.3 High

Improper access control in Oracle Corporation Applications DBA
- Oracle Corporation Applications DBA
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101637 CVE record

CVSS 5.5 Medium

Improper access control in Oracle Corporation MySQL Server and others
- Oracle Corporation MySQL Server
- Oracle Corporation MySQL Cluster
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101636 CVE record

CVSS 7.4 High

Improper access control in Oracle Corporation Oracle Mobile Field Service
- Oracle Corporation Oracle Mobile Field Service
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101635 CVE record

CVSS 8.8 High

Improper access control in Oracle Corporation Oracle Mobile Field Service
- Oracle Corporation Oracle Mobile Field Service
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101634 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Improper access control in Oracle Corporation Oracle Mobile Field Service
- Oracle Corporation Oracle Mobile Field Service
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101633 CVE record

CVSS 4.3 Medium

Improper access control in Oracle Corporation MySQL Router
- Oracle Corporation MySQL Router
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101632 CVE record

CVSS 4.3 Medium

Improper access control in Oracle Corporation MySQL Router
- Oracle Corporation MySQL Router
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101631 CVE record

CVSS 6.8 Medium

Improper access control in Oracle Corporation MySQL Router
- Oracle Corporation MySQL Router
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101630 CVE record

CVSS 5.4 Medium

Improper access control in Oracle Corporation Oracle Advanced Outbound Telephony
- Oracle Corporation Oracle Advanced Outbound Telephony
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101629 CVE record

CVSS 4.9 Medium

Improper access control in Oracle Corporation MySQL Server and others
- Oracle Corporation MySQL Server
- Oracle Corporation MySQL Cluster
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101628 CVE record

CVSS 6.5 Medium

Improper access control in Oracle Corporation MySQL Cluster
- Oracle Corporation MySQL Cluster
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101627 CVE record

CVSS 4.4 Medium

Improper access control in Oracle Corporation MySQL Server and others
- Oracle Corporation MySQL Server
- Oracle Corporation MySQL Cluster
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101626 CVE record

CVSS 5.9 Medium

Improper access control in Oracle Corporation MySQL Connectors
- Oracle Corporation MySQL Connectors
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101625 CVE record

CVSS 4.3 Medium

Improper access control in Oracle Corporation MySQL Connectors
- Oracle Corporation MySQL Connectors
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101624 CVE record

CVSS 4.9 Medium

Improper access control in Oracle Corporation MySQL Server and others
- Oracle Corporation MySQL Server
- Oracle Corporation MySQL Cluster
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101623 CVE record

CVSS 4.9 Medium

Improper access control in Oracle Corporation MySQL Server and others
- Oracle Corporation MySQL Server
- Oracle Corporation MySQL Cluster
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101622 CVE record

CVSS 4.9 Medium

Improper access control in Oracle Corporation MySQL Server and others
- Oracle Corporation MySQL Server
- Oracle Corporation MySQL Cluster
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101621 CVE record

CVSS 4.9 Medium

Improper access control in Oracle Corporation MySQL Server and others
- Oracle Corporation MySQL Server
- Oracle Corporation MySQL Cluster
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101620 CVE record

CVSS 6.5 Medium

Improper access control in Oracle Corporation MySQL Server and others
- Oracle Corporation MySQL Server
- Oracle Corporation MySQL Cluster
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101619 CVE record

CVSS 4.9 Medium

Improper access control in Oracle Corporation MySQL Server and others
- Oracle Corporation MySQL Server
- Oracle Corporation MySQL Cluster
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101618 CVE record

CVSS 4.9 Medium

Improper access control in Oracle Corporation MySQL Server and others
- Oracle Corporation MySQL Server
- Oracle Corporation MySQL Cluster
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101604 CVE record

CVSS 7.5 High

Improper access control in Oracle Corporation Oracle Communications Unified Inventory Management
- Oracle Corporation Oracle Communications Unified Inventory Management
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101603 CVE record

CVSS 7.5 High

Improper access control in Oracle Corporation Oracle Communications Unified Inventory Management
- Oracle Corporation Oracle Communications Unified Inventory Management
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101602 CVE record

CVSS 8.0 High

Improper access control in Oracle Corporation Oracle Agile Product Lifecycle Management for Process
- Oracle Corporation Oracle Agile Product Lifecycle Management for Process
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101601 CVE record

CVSS 5.5 Medium

Improper access control in Oracle Corporation Oracle GoldenGate
- Oracle Corporation Oracle GoldenGate
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101600 CVE record

CVSS 3.6 Low

Improper access control in Oracle Corporation Oracle TimesTen In-Memory Database
- Oracle Corporation Oracle TimesTen In-Memory Database
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101599 CVE record

CVSS 7.5 High

Improper access control in Oracle Corporation Oracle VM VirtualBox
- Oracle Corporation Oracle VM VirtualBox
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101598 CVE record

CVSS 7.8 High

Improper access control in Oracle Corporation Oracle VM VirtualBox
- Oracle Corporation Oracle VM VirtualBox
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101596 CVE record

CVSS 8.8 High

Improper access control in Oracle Corporation Oracle Agile Product Lifecycle Management for Process
- Oracle Corporation Oracle Agile Product Lifecycle Management for Process
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101594 CVE record

CVSS 8.8 High

Improper access control in Oracle Corporation Oracle Agile Product Lifecycle Management for Process
- Oracle Corporation Oracle Agile Product Lifecycle Management for Process
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101592 CVE record

CVSS 5.4 Medium

Improper access control in Oracle Corporation Oracle Agile Product Lifecycle Management for Process
- Oracle Corporation Oracle Agile Product Lifecycle Management for Process
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101589 CVE record

CVSS 5.3 Medium

Improper access control in Oracle Corporation Oracle Utilities Network Management System
- Oracle Corporation Oracle Utilities Network Management System
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101581 CVE record

CVSS 6.5 Medium

Improper access control in Oracle Corporation Helidon
- Oracle Corporation Helidon
- Broken access control
Not analysed yet 20 Oct 2026