Advisories · Weakness

Broken access control.

Missing or wrong authorization checks, IDOR, loose permissions. Every Advisory and CVE whose weakness (CWE) is one of these, newest first.

CVE-2026-101732 CVE record

CVSS 4.9 Medium

Improper access control in Oracle Corporation MySQL Server and others
- Oracle Corporation MySQL Server
- Oracle Corporation MySQL Cluster
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101731 CVE record

CVSS 4.9 Medium

Improper access control in Oracle Corporation MySQL Server and others
- Oracle Corporation MySQL Server
- Oracle Corporation MySQL Cluster
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101730 CVE record

CVSS 4.9 Medium

Improper access control in Oracle Corporation MySQL Server and others
- Oracle Corporation MySQL Server
- Oracle Corporation MySQL Cluster
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101729 CVE record

CVSS 4.9 Medium

Improper access control in Oracle Corporation MySQL Server and others
- Oracle Corporation MySQL Server
- Oracle Corporation MySQL Cluster
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101728 CVE record

CVSS 6.5 Medium

Improper access control in Oracle Corporation MySQL Server and others
- Oracle Corporation MySQL Server
- Oracle Corporation MySQL Cluster
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101727 CVE record

CVSS 4.9 Medium

Improper access control in Oracle Corporation MySQL Server and others
- Oracle Corporation MySQL Server
- Oracle Corporation MySQL Cluster
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101726 CVE record

CVSS 6.5 Medium

Improper access control in Oracle Corporation MySQL Server and others
- Oracle Corporation MySQL Server
- Oracle Corporation MySQL Cluster
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101725 CVE record

CVSS 6.5 Medium

Improper access control in Oracle Corporation MySQL Server and others
- Oracle Corporation MySQL Server
- Oracle Corporation MySQL Cluster
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101724 CVE record

CVSS 4.9 Medium

Improper access control in Oracle Corporation MySQL Server and others
- Oracle Corporation MySQL Server
- Oracle Corporation MySQL Cluster
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101723 CVE record

CVSS 6.7 Medium

Improper access control in Oracle Corporation Oracle Agile PLM MCAD Connector
- Oracle Corporation Oracle Agile PLM MCAD Connector
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101722 CVE record

CVSS 4.3 Medium

Improper access control in Oracle Corporation MySQL Server and others
- Oracle Corporation MySQL Server
- Oracle Corporation MySQL Cluster
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101721 CVE record

CVSS 4.9 Medium

Improper access control in Oracle Corporation MySQL Server and others
- Oracle Corporation MySQL Server
- Oracle Corporation MySQL Cluster
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101720 CVE record

CVSS 5.3 Medium

Improper access control in Oracle Corporation MySQL Server and others
- Oracle Corporation MySQL Server
- Oracle Corporation MySQL Cluster
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101719 CVE record

CVSS 7.5 High

Improper access control in Oracle Corporation Oracle Agile PLM
- Oracle Corporation Oracle Agile PLM
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101718 CVE record

CVSS 6.5 Medium

Improper access control in Oracle Corporation Oracle Agile PLM
- Oracle Corporation Oracle Agile PLM
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101717 CVE record

CVSS 6.4 Medium

Improper access control in Oracle Corporation Oracle Agile PLM
- Oracle Corporation Oracle Agile PLM
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101716 CVE record

CVSS 5.3 Medium

Improper access control in Oracle Corporation Oracle Agile PLM
- Oracle Corporation Oracle Agile PLM
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101715 CVE record

CVSS 6.5 Medium

Improper access control in Oracle Corporation Oracle Agile PLM
- Oracle Corporation Oracle Agile PLM
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101714 CVE record

CVSS 6.1 Medium

Improper access control in Oracle Corporation Oracle Agile PLM
- Oracle Corporation Oracle Agile PLM
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101713 CVE record

CVSS 5.4 Medium

Improper access control in Oracle Corporation Oracle Agile PLM
- Oracle Corporation Oracle Agile PLM
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101712 CVE record

CVSS 7.5 High

Improper access control in Oracle Corporation Oracle Payroll
- Oracle Corporation Oracle Payroll
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101711 CVE record

CVSS 6.6 Medium

Improper access control in Oracle Corporation Oracle Payroll
- Oracle Corporation Oracle Payroll
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101710 CVE record

CVSS 6.8 Medium

Improper access control in Oracle Corporation Oracle Payroll
- Oracle Corporation Oracle Payroll
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101709 CVE record

CVSS 5.4 Medium

Improper access control in Oracle Corporation Oracle Payroll
- Oracle Corporation Oracle Payroll
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101708 CVE record

CVSS 7.5 High

Improper access control in Oracle Corporation Oracle Payroll
- Oracle Corporation Oracle Payroll
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101707 CVE record

CVSS 7.4 High

Improper access control in Oracle Corporation Oracle Concurrent Processing
- Oracle Corporation Oracle Concurrent Processing
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101706 CVE record

CVSS 6.5 Medium

Improper access control in Oracle Corporation Oracle One-to-One Fulfillment
- Oracle Corporation Oracle One-to-One Fulfillment
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101705 CVE record

CVSS 7.7 High

Improper access control in Oracle Corporation Oracle Common Applications
- Oracle Corporation Oracle Common Applications
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101704 CVE record

CVSS 8.2 High

Improper access control in Oracle Corporation Oracle Concurrent Processing
- Oracle Corporation Oracle Concurrent Processing
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101703 CVE record

CVSS 7.5 High

Improper access control in Oracle Corporation Pasta
- Oracle Corporation Pasta
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101701 CVE record

CVSS 6.0 Medium

Improper access control in Oracle Corporation Oracle Concurrent Processing
- Oracle Corporation Oracle Concurrent Processing
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101700 CVE record

CVSS 8.1 High

Improper access control in Oracle Corporation Oracle Application Object Library
- Oracle Corporation Oracle Application Object Library
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101699 CVE record

CVSS 7.5 High

Improper access control in Oracle Corporation Oracle One-to-One Fulfillment
- Oracle Corporation Oracle One-to-One Fulfillment
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101698 CVE record

CVSS 7.5 High

Improper access control in Oracle Corporation Oracle One-to-One Fulfillment
- Oracle Corporation Oracle One-to-One Fulfillment
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101697 CVE record

CVSS 6.1 Medium

Improper access control in Oracle Corporation Oracle One-to-One Fulfillment
- Oracle Corporation Oracle One-to-One Fulfillment
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101696 CVE record

CVSS 6.8 Medium

Improper access control in Oracle Corporation Oracle Application Object Library
- Oracle Corporation Oracle Application Object Library
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101695 CVE record

CVSS 6.8 Medium

Improper access control in Oracle Corporation Oracle One-to-One Fulfillment
- Oracle Corporation Oracle One-to-One Fulfillment
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101694 CVE record

CVSS 7.2 High

Improper access control in Oracle Corporation Oracle Mobile Field Service
- Oracle Corporation Oracle Mobile Field Service
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101692 CVE record

CVSS 8.8 High

Improper access control in Oracle Corporation Oracle Mobile Field Service
- Oracle Corporation Oracle Mobile Field Service
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101690 CVE record

CVSS 8.2 High

Improper access control in Oracle Corporation Oracle E-Business Suite Integrated SOA Gateway
- Oracle Corporation Oracle E-Business Suite Integrated SOA Gateway
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101689 CVE record

CVSS 7.7 High

Improper access control in Oracle Corporation Oracle E-Business Suite Integrated SOA Gateway
- Oracle Corporation Oracle E-Business Suite Integrated SOA Gateway
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101688 CVE record

CVSS 8.6 High

Improper access control in Oracle Corporation Oracle E-Business Suite Integrated SOA Gateway
- Oracle Corporation Oracle E-Business Suite Integrated SOA Gateway
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101687 CVE record

CVSS 7.5 High

Improper access control in Oracle Corporation Oracle E-Business Suite Integrated SOA Gateway
- Oracle Corporation Oracle E-Business Suite Integrated SOA Gateway
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101686 CVE record

CVSS 8.8 High

Improper access control in Oracle Corporation Oracle E-Business Suite Integrated SOA Gateway
- Oracle Corporation Oracle E-Business Suite Integrated SOA Gateway
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101685 CVE record

CVSS 8.8 High

Improper access control in Oracle Corporation Oracle E-Business Suite Integrated SOA Gateway
- Oracle Corporation Oracle E-Business Suite Integrated SOA Gateway
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101684 CVE record

CVSS 8.3 High

Improper access control in Oracle Corporation Oracle E-Business Suite Integrated SOA Gateway
- Oracle Corporation Oracle E-Business Suite Integrated SOA Gateway
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101683 CVE record

CVSS 7.0 High

Improper access control in Oracle Corporation Applications DBA
- Oracle Corporation Applications DBA
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101682 CVE record

CVSS 7.8 High

Improper access control in Oracle Corporation Applications DBA
- Oracle Corporation Applications DBA
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101681 CVE record

CVSS 7.0 High

Improper access control in Oracle Corporation Applications DBA
- Oracle Corporation Applications DBA
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101680 CVE record

CVSS 7.4 High

Improper access control in Oracle Corporation Oracle Communications Billing and Revenue Management
- Oracle Corporation Oracle Communications Billing and Revenue Management
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101679 CVE record

CVSS 7.5 High

Improper access control in Oracle Corporation MySQL Server and others
- Oracle Corporation MySQL Server
- Oracle Corporation MySQL Cluster
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101678 CVE record

CVSS 4.3 Medium

Improper access control in Oracle Corporation MySQL Connectors
- Oracle Corporation MySQL Connectors
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101677 CVE record

CVSS 4.3 Medium

Improper access control in Oracle Corporation MySQL Connectors
- Oracle Corporation MySQL Connectors
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101676 CVE record

CVSS 7.8 High

Improper access control in Oracle Corporation Oracle Concurrent Processing
- Oracle Corporation Oracle Concurrent Processing
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101675 CVE record

CVSS 6.7 Medium

Improper access control in Oracle Corporation Oracle Mobile Field Service
- Oracle Corporation Oracle Mobile Field Service
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101674 CVE record

CVSS 6.7 Medium

Improper access control in Oracle Corporation Oracle Mobile Field Service
- Oracle Corporation Oracle Mobile Field Service
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101673 CVE record

CVSS 6.5 Medium

Improper access control in Oracle Corporation Oracle US Federal Human Resources
- Oracle Corporation Oracle US Federal Human Resources
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101672 CVE record

CVSS 8.1 High

Improper access control in Oracle Corporation Oracle Call Center Technology
- Oracle Corporation Oracle Call Center Technology
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101671 CVE record

CVSS 6.1 Medium

Improper access control in Oracle Corporation Oracle Email Center
- Oracle Corporation Oracle Email Center
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101670 CVE record

CVSS 6.5 Medium

Improper access control in Oracle Corporation Oracle Email Center
- Oracle Corporation Oracle Email Center
- Broken access control
Not analysed yet 20 Oct 2026