Advisories · Technology

Oracle Corporation Oracle REST Data Services.

Every CVE that names Oracle Corporation Oracle REST Data Services among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-91610 CVE record

CVSS 8.8 High

Improper access control in Oracle Corporation Oracle REST Data Services
- Oracle Corporation Oracle REST Data Services
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-91609 CVE record

CVSS 6.5 Medium

Information disclosure in Oracle Corporation Oracle REST Data Services
- Oracle Corporation Oracle REST Data Services
- Information disclosure
Not analysed yet 20 Oct 2026
CVE-2026-101494 CVE record

CVSS 7.7 High

Vulnerability in Oracle REST Data Services (component: Core).
- Oracle Corporation Oracle REST Data Services
Not analysed yet 20 Oct 2026
CVE-2026-101493 CVE record

CVSS 5.4 Medium

Vulnerability in Oracle REST Data Services (component: Core).
- Oracle Corporation Oracle REST Data Services
Not analysed yet 20 Oct 2026
CVE-2026-101386 CVE record

CVSS 4.2 Medium

Improper access control in Oracle Corporation Oracle REST Data Services
- Oracle Corporation Oracle REST Data Services
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101385 CVE record

CVSS 4.9 Medium

Improper access control in Oracle Corporation Oracle REST Data Services
- Oracle Corporation Oracle REST Data Services
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101384 CVE record

CVSS 5.0 Medium

Information disclosure in Oracle Corporation Oracle REST Data Services
- Oracle Corporation Oracle REST Data Services
- Information disclosure
Not analysed yet 20 Oct 2026
CVE-2026-101383 CVE record

CVSS 5.4 Medium

Improper access control in Oracle Corporation Oracle REST Data Services
- Oracle Corporation Oracle REST Data Services
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101382 CVE record

CVSS 4.2 Medium

Improper access control in Oracle Corporation Oracle REST Data Services
- Oracle Corporation Oracle REST Data Services
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101381 CVE record

CVSS 5.4 Medium

Improper access control in Oracle Corporation Oracle REST Data Services
- Oracle Corporation Oracle REST Data Services
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101380 CVE record

CVSS 5.4 Medium

Improper access control in Oracle Corporation Oracle REST Data Services
- Oracle Corporation Oracle REST Data Services
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101379 CVE record

CVSS 5.3 Medium

Improper access control in Oracle Corporation Oracle REST Data Services
- Oracle Corporation Oracle REST Data Services
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101378 CVE record

CVSS 4.3 Medium

Improper access control in Oracle Corporation Oracle REST Data Services
- Oracle Corporation Oracle REST Data Services
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101377 CVE record

CVSS 2.7 Low

Improper access control in Oracle Corporation Oracle REST Data Services
- Oracle Corporation Oracle REST Data Services
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101376 CVE record

CVSS 4.7 Medium

Improper access control in Oracle Corporation Oracle REST Data Services
- Oracle Corporation Oracle REST Data Services
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101375 CVE record

CVSS 6.3 Medium

Improper access control in Oracle Corporation Oracle REST Data Services
- Oracle Corporation Oracle REST Data Services
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101374 CVE record

CVSS 5.9 Medium

Improper access control in Oracle Corporation Oracle REST Data Services
- Oracle Corporation Oracle REST Data Services
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101373 CVE record

CVSS 2.4 Low

Improper access control in Oracle Corporation Oracle REST Data Services
- Oracle Corporation Oracle REST Data Services
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101372 CVE record

CVSS 3.7 Low

Vulnerability in Oracle REST Data Services (component: Core).
- Oracle Corporation Oracle REST Data Services
Not analysed yet 20 Oct 2026
CVE-2026-101371 CVE record

CVSS 3.1 Low

Vulnerability in Oracle REST Data Services (component: Core).
- Oracle Corporation Oracle REST Data Services
Not analysed yet 20 Oct 2026
CVE-2026-101370 CVE record

CVSS 3.1 Low

Vulnerability in Oracle REST Data Services (component: Core).
- Oracle Corporation Oracle REST Data Services
Not analysed yet 20 Oct 2026
CVE-2026-101369 CVE record

CVSS 6.1 Medium

Vulnerability in Oracle REST Data Services (component: Backend-as-a-Service).
- Oracle Corporation Oracle REST Data Services
Not analysed yet 20 Oct 2026
CVE-2026-101368 CVE record

CVSS 5.4 Medium

Vulnerability in Oracle REST Data Services (component: Backend-as-a-Service).
- Oracle Corporation Oracle REST Data Services
Not analysed yet 20 Oct 2026
CVE-2026-101367 CVE record

CVSS 5.4 Medium

Vulnerability in Oracle REST Data Services (component: ADP).
- Oracle Corporation Oracle REST Data Services
Not analysed yet 20 Oct 2026
CVE-2026-101366 CVE record

CVSS 4.3 Medium

Vulnerability in Oracle REST Data Services (component: ADP).
- Oracle Corporation Oracle REST Data Services
Not analysed yet 20 Oct 2026
CVE-2026-101365 CVE record

CVSS 4.7 Medium

Uncontrolled resource consumption in Oracle Corporation Oracle REST Data Services
- Oracle Corporation Oracle REST Data Services
- Denial of service
Not analysed yet 20 Oct 2026
CVE-2026-101364 CVE record

CVSS 5.4 Medium

Improper access control in Oracle Corporation Oracle REST Data Services
- Oracle Corporation Oracle REST Data Services
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101363 CVE record

CVSS 5.3 Medium

Improper access control in Oracle Corporation Oracle REST Data Services
- Oracle Corporation Oracle REST Data Services
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101362 CVE record

CVSS 6.9 Medium

Improper access control in Oracle Corporation Oracle REST Data Services
- Oracle Corporation Oracle REST Data Services
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101361 CVE record

CVSS 4.2 Medium

Improper access control in Oracle Corporation Oracle REST Data Services
- Oracle Corporation Oracle REST Data Services
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101360 CVE record

CVSS 5.4 Medium

Improper access control in Oracle Corporation Oracle REST Data Services
- Oracle Corporation Oracle REST Data Services
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101359 CVE record

CVSS 5.3 Medium

Improper access control in Oracle Corporation Oracle REST Data Services
- Oracle Corporation Oracle REST Data Services
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-46843 CVE record

CVSS 5.3 Medium

Uncontrolled resource consumption in Oracle Corporation Oracle REST Data Services
- Oracle Corporation Oracle REST Data Services
- Denial of service
Not analysed yet 28 May 2026
CVE-2026-46842 CVE record

CVSS 5.3 Medium

Improper access control in Oracle Corporation Oracle REST Data Services
- Oracle Corporation Oracle REST Data Services
- Broken access control
Not analysed yet 28 May 2026
CVE-2026-46841 CVE record

CVSS 5.3 Medium

Information disclosure in Oracle Corporation Oracle REST Data Services
- Oracle Corporation Oracle REST Data Services
- Information disclosure
Not analysed yet 28 May 2026
CVE-2026-46840 CVE record

CVSS 10.0 CriticalCritical · CVSS 9+

Improper access control in Oracle Corporation Oracle REST Data Services
- Oracle Corporation Oracle REST Data Services
- Broken access control
- Authentication bypass
Not analysed yet 28 May 2026
CVE-2026-46839 CVE record

CVSS 9.9 CriticalCritical · CVSS 9+

Improper access control in Oracle Corporation Oracle REST Data Services
- Oracle Corporation Oracle REST Data Services
- Broken access control
Not analysed yet 28 May 2026
CVE-2026-46830 CVE record

CVSS 5.3 Medium

Information disclosure in Oracle Corporation Oracle REST Data Services
- Oracle Corporation Oracle REST Data Services
- Information disclosure
Not analysed yet 28 May 2026
CVE-2026-46829 CVE record

CVSS 7.5 High

Uncontrolled resource consumption in Oracle Corporation Oracle REST Data Services
- Oracle Corporation Oracle REST Data Services
- Denial of service
Not analysed yet 28 May 2026
CVE-2026-46775 CVE record

CVSS 9.9 CriticalCritical · CVSS 9+

Improper access control in Oracle Corporation Oracle REST Data Services
- Oracle Corporation Oracle REST Data Services
- Broken access control
Not analysed yet 28 May 2026
CVE-2026-35277 CVE record

CVSS 8.1 High

Improper access control in Oracle Corporation Oracle REST Data Services
- Oracle Corporation Oracle REST Data Services
- Broken access control
Not analysed yet 28 May 2026
CVE-2026-35266 CVE record

CVSS 7.9 High

Cross-site request forgery in Oracle Corporation Oracle REST Data Services
- Oracle Corporation Oracle REST Data Services
- Cross-site request forgery (CSRF)
Not analysed yet 28 May 2026
CVE-2025-30756 CVE record

CVSS 6.1 Medium

Cross-site request forgery in Oracle Corporation Oracle REST Data Services
- Oracle Corporation Oracle REST Data Services
- Cross-site request forgery (CSRF)
Not analysed yet 15 Jul 2025