Advisories · Weakness

Broken access control.

Missing or wrong authorization checks, IDOR, loose permissions. Every Advisory and CVE whose weakness (CWE) is one of these, newest first.

CVE-2026-83427 CVE record

CVSS 6.6 Medium

Improper access control in Oracle Corporation PeopleSoft Enterprise PeopleTools
- Oracle Corporation PeopleSoft Enterprise PeopleTools
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-83407 CVE record

CVSS 8.6 High

Improper access control in Oracle Corporation Oracle Access Manager
- Oracle Corporation Oracle Access Manager
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-83406 CVE record

CVSS 6.7 Medium

Improper access control in Oracle Corporation Oracle Communications Billing and Revenue Management
- Oracle Corporation Oracle Communications Billing and Revenue Management
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-83403 CVE record

CVSS 8.8 High

Improper access control in Oracle Corporation Oracle Identity Manager
- Oracle Corporation Oracle Identity Manager
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-83402 CVE record

CVSS 8.8 High

Improper access control in Oracle Corporation Oracle Identity Manager
- Oracle Corporation Oracle Identity Manager
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-83401 CVE record

CVSS 6.1 Medium

Improper access control in Oracle Corporation Oracle Identity Manager
- Oracle Corporation Oracle Identity Manager
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-83395 CVE record

CVSS 6.5 Medium

Improper access control in Oracle Corporation Oracle Java SE and others
- Oracle Corporation Oracle Java SE
- Oracle Corporation Oracle GraalVM for JDK
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-83393 CVE record

CVSS 8.5 High

Improper access control in Oracle Corporation Oracle Product Hub
- Oracle Corporation Oracle Product Hub
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-83379 CVE record

CVSS 8.7 High

Improper access control in Oracle Corporation Oracle Weblogic Server Proxy Plug-in
- Oracle Corporation Oracle Weblogic Server Proxy Plug-in
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-83378 CVE record

CVSS 4.8 Medium

Improper access control in Oracle Corporation Oracle Java SE
- Oracle Corporation Oracle Java SE
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-83366 CVE record

CVSS 7.4 High

Improper access control in Oracle Corporation Oracle Shipping Execution
- Oracle Corporation Oracle Shipping Execution
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-83363 CVE record

CVSS 8.8 High

Improper access control in Oracle Corporation Oracle Contract Lifecycle Management for Public Sector
- Oracle Corporation Oracle Contract Lifecycle Management for Public Sector
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-83361 CVE record

CVSS 8.1 High

Improper access control in Oracle Corporation Oracle Contract Lifecycle Management for Public Sector
- Oracle Corporation Oracle Contract Lifecycle Management for Public Sector
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-60885 CVE record

CVSS 6.8 Medium

Improper access control in Oracle Corporation PeopleSoft Enterprise PeopleTools
- Oracle Corporation PeopleSoft Enterprise PeopleTools
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-60874 CVE record

CVSS 4.2 Medium

Improper access control in Oracle Corporation PeopleSoft Enterprise PeopleTools
- Oracle Corporation PeopleSoft Enterprise PeopleTools
- Broken access control
- Denial of service
Not analysed yet 20 Oct 2026
CVE-2026-101854 CVE record

CVSS 8.8 High

Improper access control in Oracle Corporation Oracle Product Hub
- Oracle Corporation Oracle Product Hub
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101853 CVE record

CVSS 8.8 High

Improper access control in Oracle Corporation Oracle Product Hub
- Oracle Corporation Oracle Product Hub
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101852 CVE record

CVSS 8.8 High

Improper access control in Oracle Corporation Oracle Product Hub
- Oracle Corporation Oracle Product Hub
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101842 CVE record

CVSS 8.8 High

Improper access control in Oracle Corporation Strategic Network Optimization
- Oracle Corporation Strategic Network Optimization
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101841 CVE record

CVSS 8.2 High

Improper access control in Oracle Corporation Global Order Promising
- Oracle Corporation Global Order Promising
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101840 CVE record

CVSS 7.2 High

Improper access control in Oracle Corporation Oracle Contract Lifecycle Management for Public Sector
- Oracle Corporation Oracle Contract Lifecycle Management for Public Sector
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101837 CVE record

CVSS 7.7 High

Improper access control in Oracle Corporation Oracle Shipping Execution
- Oracle Corporation Oracle Shipping Execution
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101836 CVE record

CVSS 6.5 Medium

Improper access control in Oracle Corporation iSupplier Portal
- Oracle Corporation iSupplier Portal
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101835 CVE record

CVSS 7.5 High

Improper access control in Oracle Corporation Oracle Shipping Execution
- Oracle Corporation Oracle Shipping Execution
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101834 CVE record

CVSS 8.1 High

Improper access control in Oracle Corporation Oracle Shipping Execution
- Oracle Corporation Oracle Shipping Execution
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101833 CVE record

CVSS 7.6 High

Improper access control in Oracle Corporation Oracle Shipping Execution
- Oracle Corporation Oracle Shipping Execution
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101832 CVE record

CVSS 6.5 Medium

Improper access control in Oracle Corporation Oracle Order Management
- Oracle Corporation Oracle Order Management
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101831 CVE record

CVSS 8.1 High

Improper access control in Oracle Corporation Oracle Quality
- Oracle Corporation Oracle Quality
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101830 CVE record

CVSS 7.7 High

Improper access control in Oracle Corporation Oracle Project Contracts
- Oracle Corporation Oracle Project Contracts
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101829 CVE record

CVSS 7.4 High

Improper access control in Oracle Corporation Oracle Mobile Application Server
- Oracle Corporation Oracle Mobile Application Server
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101828 CVE record

CVSS 6.5 Medium

Improper access control in Oracle Corporation Oracle Mobile Application Server
- Oracle Corporation Oracle Mobile Application Server
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101827 CVE record

CVSS 7.1 High

Improper access control in Oracle Corporation Oracle HCM Common Architecture
- Oracle Corporation Oracle HCM Common Architecture
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101826 CVE record

CVSS 7.5 High

Improper access control in Oracle Corporation Oracle HCM Common Architecture
- Oracle Corporation Oracle HCM Common Architecture
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101825 CVE record

CVSS 7.5 High

Improper access control in Oracle Corporation Oracle HCM Common Architecture
- Oracle Corporation Oracle HCM Common Architecture
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101824 CVE record

CVSS 8.7 High

Improper access control in Oracle Corporation Document Management and Collaboration
- Oracle Corporation Document Management and Collaboration
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101823 CVE record

CVSS 7.5 High

Improper access control in Oracle Corporation Oracle Bills of Material
- Oracle Corporation Oracle Bills of Material
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101822 CVE record

CVSS 7.2 High

Improper access control in Oracle Corporation Oracle Bills of Material
- Oracle Corporation Oracle Bills of Material
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101821 CVE record

CVSS 5.4 Medium

Improper access control in Oracle Corporation Oracle Compensation Workbench
- Oracle Corporation Oracle Compensation Workbench
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101820 CVE record

CVSS 7.5 High

Improper access control in Oracle Corporation Oracle General Ledger
- Oracle Corporation Oracle General Ledger
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101819 CVE record

CVSS 6.5 Medium

Improper access control in Oracle Corporation Oracle General Ledger
- Oracle Corporation Oracle General Ledger
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101818 CVE record

CVSS 7.7 High

Improper access control in Oracle Corporation Oracle Product Hub
- Oracle Corporation Oracle Product Hub
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101816 CVE record

CVSS 7.2 High

Improper access control in Oracle Corporation Oracle Product Hub
- Oracle Corporation Oracle Product Hub
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101815 CVE record

CVSS 7.6 High

Improper access control in Oracle Corporation Assets
- Oracle Corporation Assets
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101814 CVE record

CVSS 5.3 Medium

Improper access control in Oracle Corporation Oracle Engineering
- Oracle Corporation Oracle Engineering
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101813 CVE record

CVSS 8.8 High

Improper access control in Oracle Corporation Oracle Engineering
- Oracle Corporation Oracle Engineering
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101812 CVE record

CVSS 6.8 Medium

Improper access control in Oracle Corporation Oracle Complex Maintenance, Repair and Overhaul
- Oracle Corporation Oracle Complex Maintenance, Repair and Overhaul
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101810 CVE record

CVSS 7.5 High

Improper access control in Oracle Corporation MySQL Router
- Oracle Corporation MySQL Router
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101809 CVE record

CVSS 10.0 CriticalCritical · CVSS 9+

Improper access control in Oracle Corporation Workflow
- Oracle Corporation Workflow
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101807 CVE record

CVSS 4.8 Medium

Improper access control in Oracle Corporation Oracle Communications Billing and Revenue Management
- Oracle Corporation Oracle Communications Billing and Revenue Management
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101806 CVE record

CVSS 6.8 Medium

Improper access control in Oracle Corporation MySQL Connectors
- Oracle Corporation MySQL Connectors
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101805 CVE record

CVSS 3.3 Low

Improper access control in Oracle Corporation Oracle Applications Manager
- Oracle Corporation Oracle Applications Manager
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101804 CVE record

CVSS 2.5 Low

Improper access control in Oracle Corporation MySQL Connectors
- Oracle Corporation MySQL Connectors
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101803 CVE record

CVSS 6.5 Medium

Improper access control in Oracle Corporation MySQL Server and others
- Oracle Corporation MySQL Server
- Oracle Corporation MySQL Cluster
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101802 CVE record

CVSS 6.5 Medium

Improper access control in Oracle Corporation MySQL Server and others
- Oracle Corporation MySQL Server
- Oracle Corporation MySQL Cluster
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101801 CVE record

CVSS 4.9 Medium

Improper access control in Oracle Corporation MySQL Server and others
- Oracle Corporation MySQL Server
- Oracle Corporation MySQL Cluster
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101800 CVE record

CVSS 6.8 Medium

Improper access control in Oracle Corporation MySQL Server and others
- Oracle Corporation MySQL Server
- Oracle Corporation MySQL Cluster
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101799 CVE record

CVSS 6.5 Medium

Improper access control in Oracle Corporation MySQL Server and others
- Oracle Corporation MySQL Server
- Oracle Corporation MySQL Cluster
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101798 CVE record

CVSS 4.9 Medium

Improper access control in Oracle Corporation MySQL Server and others
- Oracle Corporation MySQL Server
- Oracle Corporation MySQL Cluster
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101797 CVE record

CVSS 7.5 High

Improper access control in Oracle Corporation MySQL Server and others
- Oracle Corporation MySQL Server
- Oracle Corporation MySQL Cluster
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101796 CVE record

CVSS 7.5 High

Improper access control in Oracle Corporation MySQL Server and others
- Oracle Corporation MySQL Server
- Oracle Corporation MySQL Cluster
- Broken access control
Not analysed yet 20 Oct 2026