Advisories · Technology

Oracle Corporation Oracle SOA Suite.

Every CVE that names Oracle Corporation Oracle SOA Suite among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-91536 CVE record

CVSS 5.0 Medium

Improper access control in Oracle Corporation Oracle SOA Suite
- Oracle Corporation Oracle SOA Suite
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-91251 CVE record

CVSS 9.9 CriticalCritical · CVSS 9+

Improper access control in Oracle Corporation Oracle SOA Suite
- Oracle Corporation Oracle SOA Suite
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-91250 CVE record

CVSS 9.9 CriticalCritical · CVSS 9+

Improper privilege management in Oracle Corporation Oracle SOA Suite
- Oracle Corporation Oracle SOA Suite
- Privilege escalation
Not analysed yet 20 Oct 2026
CVE-2026-91239 CVE record

CVSS 8.8 High

Missing authentication in Oracle Corporation Oracle SOA Suite
- Oracle Corporation Oracle SOA Suite
- Authentication bypass
Not analysed yet 20 Oct 2026
CVE-2026-91238 CVE record

CVSS 7.1 High

Uncontrolled resource consumption in Oracle Corporation Oracle SOA Suite
- Oracle Corporation Oracle SOA Suite
- Denial of service
Not analysed yet 20 Oct 2026
CVE-2026-91237 CVE record

CVSS 7.5 High

Improper access control in Oracle Corporation Oracle SOA Suite
- Oracle Corporation Oracle SOA Suite
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-91236 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Missing authentication in Oracle Corporation Oracle SOA Suite
- Oracle Corporation Oracle SOA Suite
- Authentication bypass
Not analysed yet 20 Oct 2026
CVE-2026-91235 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Missing authentication in Oracle Corporation Oracle SOA Suite
- Oracle Corporation Oracle SOA Suite
- Authentication bypass
Not analysed yet 20 Oct 2026
CVE-2026-91234 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Missing authentication in Oracle Corporation Oracle SOA Suite
- Oracle Corporation Oracle SOA Suite
- Authentication bypass
Not analysed yet 20 Oct 2026
CVE-2026-91233 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Missing authentication in Oracle Corporation Oracle SOA Suite
- Oracle Corporation Oracle SOA Suite
- Authentication bypass
Not analysed yet 20 Oct 2026
CVE-2026-91232 CVE record

CVSS 9.9 CriticalCritical · CVSS 9+

Improper access control in Oracle Corporation Oracle SOA Suite
- Oracle Corporation Oracle SOA Suite
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-91231 CVE record

CVSS 10.0 CriticalCritical · CVSS 9+

Missing authentication in Oracle Corporation Oracle SOA Suite
- Oracle Corporation Oracle SOA Suite
- Authentication bypass
Not analysed yet 20 Oct 2026
CVE-2026-91230 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

Improper access control in Oracle Corporation Oracle SOA Suite
- Oracle Corporation Oracle SOA Suite
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-91229 CVE record

CVSS 7.5 High

Improper access control in Oracle Corporation Oracle SOA Suite
- Oracle Corporation Oracle SOA Suite
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-91228 CVE record

CVSS 7.1 High

Improper access control in Oracle Corporation Oracle SOA Suite
- Oracle Corporation Oracle SOA Suite
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-91227 CVE record

CVSS 7.5 High

Improper access control in Oracle Corporation Oracle SOA Suite
- Oracle Corporation Oracle SOA Suite
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-91226 CVE record

CVSS 7.5 High

Improper access control in Oracle Corporation Oracle SOA Suite
- Oracle Corporation Oracle SOA Suite
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-91225 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Improper access control in Oracle Corporation Oracle SOA Suite
- Oracle Corporation Oracle SOA Suite
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-91224 CVE record

CVSS 9.9 CriticalCritical · CVSS 9+

Improper access control in Oracle Corporation Oracle SOA Suite
- Oracle Corporation Oracle SOA Suite
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-91223 CVE record

CVSS 8.8 High

Improper access control in Oracle Corporation Oracle SOA Suite
- Oracle Corporation Oracle SOA Suite
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-91221 CVE record

CVSS 10.0 CriticalCritical · CVSS 9+

Improper access control in Oracle Corporation Oracle SOA Suite
- Oracle Corporation Oracle SOA Suite
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-91219 CVE record

CVSS 8.6 High

Information disclosure in Oracle Corporation Oracle SOA Suite
- Oracle Corporation Oracle SOA Suite
- Information disclosure
Not analysed yet 20 Oct 2026
CVE-2026-91218 CVE record

CVSS 9.6 CriticalCritical · CVSS 9+

Improper access control in Oracle Corporation Oracle SOA Suite
- Oracle Corporation Oracle SOA Suite
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-91217 CVE record

CVSS 8.6 High

Information disclosure in Oracle Corporation Oracle SOA Suite
- Oracle Corporation Oracle SOA Suite
- Information disclosure
Not analysed yet 20 Oct 2026
CVE-2026-91216 CVE record

CVSS 10.0 CriticalCritical · CVSS 9+

Improper access control in Oracle Corporation Oracle SOA Suite
- Oracle Corporation Oracle SOA Suite
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-91215 CVE record

CVSS 8.8 High

Improper access control in Oracle Corporation Oracle SOA Suite
- Oracle Corporation Oracle SOA Suite
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-91214 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Missing authentication in Oracle Corporation Oracle SOA Suite
- Oracle Corporation Oracle SOA Suite
- Authentication bypass
Not analysed yet 20 Oct 2026
CVE-2026-61002 CVE record

CVSS 8.8 High

Improper access control in Oracle Corporation Oracle SOA Suite
- Oracle Corporation Oracle SOA Suite
- Broken access control
Not analysed yet 18 Aug 2026
CVE-2026-60548 CVE record

CVSS 7.7 High

Information disclosure in Oracle Corporation Oracle SOA Suite
- Oracle Corporation Oracle SOA Suite
- Information disclosure
Not analysed yet 21 Jul 2026
CVE-2026-60546 CVE record

CVSS 7.2 High

Improper privilege management in Oracle Corporation Oracle SOA Suite
- Oracle Corporation Oracle SOA Suite
- Privilege escalation
Not analysed yet 21 Jul 2026
CVE-2026-60544 CVE record

CVSS 8.2 High

Missing authentication in Oracle Corporation Oracle SOA Suite
- Oracle Corporation Oracle SOA Suite
- Authentication bypass
Not analysed yet 21 Jul 2026
CVE-2026-60543 CVE record

CVSS 8.1 High

Missing authentication in Oracle Corporation Oracle SOA Suite
- Oracle Corporation Oracle SOA Suite
- Authentication bypass
Not analysed yet 21 Jul 2026
CVE-2026-60541 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Improper access control in Oracle Corporation Oracle SOA Suite
- Oracle Corporation Oracle SOA Suite
- Broken access control
Not analysed yet 21 Jul 2026
CVE-2026-60540 CVE record

CVSS 9.6 CriticalCritical · CVSS 9+

Improper access control in Oracle Corporation Oracle SOA Suite
- Oracle Corporation Oracle SOA Suite
- Broken access control
Not analysed yet 21 Jul 2026
CVE-2026-60539 CVE record

CVSS 8.8 High

Missing authentication in Oracle Corporation Oracle SOA Suite
- Oracle Corporation Oracle SOA Suite
- Authentication bypass
Not analysed yet 21 Jul 2026
CVE-2026-60538 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Missing authentication in Oracle Corporation Oracle SOA Suite
- Oracle Corporation Oracle SOA Suite
- Authentication bypass
Not analysed yet 21 Jul 2026