Patchfirst: Oracle vulnerabilitieshttps://patchfirst.co/vendor/oracle/New and newly exploited Oracle CVEs, with CISA KEV, EPSS and ATT&CK context. Newest 50 by publication or KEV listing.en-gb360Sat, 31 Oct 2026 05:11:25 GMTCVE-2026-91403: Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java…https://patchfirst.co/cve/CVE-2026-91403/CVE-2026-91403Wed, 21 Oct 2026 00:00:00 GMTOracle Corporation · Oracle Java SE. Not in CISA KEV. EPSS 0.4% (higher than 31.4% of CVEs). CVSS 9.1 CRITICAL. Public exploit code exists. Priority 19.7 of 100.public-exploitCVE-2026-101767: Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Core)https://patchfirst.co/cve/CVE-2026-101767/CVE-2026-101767Tue, 20 Oct 2026 00:00:00 GMTOracle Corporation · Oracle Application Object Library. Not in CISA KEV. EPSS 0.6% (higher than 49.4% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. Priority 68.9 of 100.public-exploitCVE-2026-101521: Vulnerability in Oracle APEX (component: General)https://patchfirst.co/cve/CVE-2026-101521/CVE-2026-101521Tue, 20 Oct 2026 00:00:00 GMTOracle Corporation · Oracle APEX. Not in CISA KEV. EPSS 0.6% (higher than 47.5% of CVEs). CVSS 9.8 CRITICAL. Priority 18.3 of 100.CVE-2026-101809: Vulnerability in the Workflow product of Oracle E-Business Suite (component: Workflow Notification Mailer)https://patchfirst.co/cve/CVE-2026-101809/CVE-2026-101809Tue, 20 Oct 2026 00:00:00 GMTOracle Corporation · Workflow. Not in CISA KEV. EPSS 0.5% (higher than 45.3% of CVEs). CVSS 10.0 CRITICAL. Priority 18.0 of 100.CVE-2026-101499: Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites)https://patchfirst.co/cve/CVE-2026-101499/CVE-2026-101499Tue, 20 Oct 2026 00:00:00 GMTOracle Corporation · Oracle WebCenter Sites. Not in CISA KEV. EPSS 0.5% (higher than 45.3% of CVEs). CVSS 9.8 CRITICAL. Priority 17.8 of 100.CVE-2026-101484: Vulnerability in Oracle Secure Backup (component: Backup and Restore)https://patchfirst.co/cve/CVE-2026-101484/CVE-2026-101484Tue, 20 Oct 2026 00:00:00 GMTOracle Corporation · Oracle Secure Backup. Not in CISA KEV. EPSS 0.5% (higher than 45.2% of CVEs). CVSS 9.8 CRITICAL. Priority 17.8 of 100.CVE-2026-101634: Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Internal Operations)https://patchfirst.co/cve/CVE-2026-101634/CVE-2026-101634Tue, 20 Oct 2026 00:00:00 GMTOracle Corporation · Oracle Mobile Field Service. Not in CISA KEV. EPSS 0.6% (higher than 46.7% of CVEs). CVSS 9.1 CRITICAL. Priority 17.6 of 100.CVE-2026-101763: Vulnerability in the Oracle Communications BRM - Elastic Charging Engine product of Oracle Communications (component…https://patchfirst.co/cve/CVE-2026-101763/CVE-2026-101763Tue, 20 Oct 2026 00:00:00 GMTOracle Corporation · Oracle Communications BRM - Elastic Charging Engine. Not in CISA KEV. EPSS 0.5% (higher than 42.9% of CVEs). CVSS 9.8 CRITICAL. Priority 17.4 of 100.CVE-2026-91323: Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core)https://patchfirst.co/cve/CVE-2026-91323/CVE-2026-91323Tue, 20 Oct 2026 00:00:00 GMTOracle Corporation · Oracle WebLogic Server. Not in CISA KEV. EPSS 0.5% (higher than 42.6% of CVEs). CVSS 9.8 CRITICAL. Priority 17.3 of 100.CVE-2026-83399: Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core)https://patchfirst.co/cve/CVE-2026-83399/CVE-2026-83399Tue, 20 Oct 2026 00:00:00 GMTOracle Corporation · Oracle WebLogic Server. Not in CISA KEV. EPSS 0.5% (higher than 42.6% of CVEs). CVSS 9.8 CRITICAL. Priority 17.3 of 100.CVE-2026-91231: Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Adapters)https://patchfirst.co/cve/CVE-2026-91231/CVE-2026-91231Tue, 20 Oct 2026 00:00:00 GMTOracle Corporation · Oracle SOA Suite. Not in CISA KEV. EPSS 0.5% (higher than 41.6% of CVEs). CVSS 10.0 CRITICAL. Priority 17.2 of 100.CVE-2026-91221: Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer)https://patchfirst.co/cve/CVE-2026-91221/CVE-2026-91221Tue, 20 Oct 2026 00:00:00 GMTOracle Corporation · Oracle SOA Suite. Not in CISA KEV. EPSS 0.5% (higher than 41.6% of CVEs). CVSS 10.0 CRITICAL. Priority 17.2 of 100.CVE-2026-91216: Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer)https://patchfirst.co/cve/CVE-2026-91216/CVE-2026-91216Tue, 20 Oct 2026 00:00:00 GMTOracle Corporation · Oracle SOA Suite. Not in CISA KEV. EPSS 0.5% (higher than 41.6% of CVEs). CVSS 10.0 CRITICAL. Priority 17.2 of 100.CVE-2026-101529: Vulnerability in the Oracle Enterprise Manager for Oracle Database product of Oracle Enterprise Manager (component…https://patchfirst.co/cve/CVE-2026-101529/CVE-2026-101529Tue, 20 Oct 2026 00:00:00 GMTOracle Corporation · Oracle Enterprise Manager for Oracle Database. Not in CISA KEV. EPSS 0.5% (higher than 41.4% of CVEs). CVSS 9.9 CRITICAL. Priority 17.1 of 100.CVE-2026-101528: Vulnerability in the Oracle Enterprise Manager for Oracle Database product of Oracle Enterprise Manager (component…https://patchfirst.co/cve/CVE-2026-101528/CVE-2026-101528Tue, 20 Oct 2026 00:00:00 GMTOracle Corporation · Oracle Enterprise Manager for Oracle Database. Not in CISA KEV. EPSS 0.5% (higher than 41.4% of CVEs). CVSS 9.9 CRITICAL. Priority 17.1 of 100.CVE-2026-101503: Vulnerability in Oracle Trusted Answer Search (component: PLSQL package)https://patchfirst.co/cve/CVE-2026-101503/CVE-2026-101503Tue, 20 Oct 2026 00:00:00 GMTOracle Corporation · Oracle Trusted Answer Search. Not in CISA KEV. EPSS 0.5% (higher than 41.4% of CVEs). CVSS 9.9 CRITICAL. Priority 17.1 of 100.CVE-2026-91665: Vulnerability in Oracle Essbase (component: Security)https://patchfirst.co/cve/CVE-2026-91665/CVE-2026-91665Tue, 20 Oct 2026 00:00:00 GMTOracle Corporation · Oracle Essbase. Not in CISA KEV. EPSS 0.5% (higher than 40.6% of CVEs). CVSS 9.8 CRITICAL. Priority 16.9 of 100.CVE-2026-91299: Vulnerability in the JD Edwards EnterpriseOne Orchestrator product of Oracle JD Edwards (component: E1 IOT…https://patchfirst.co/cve/CVE-2026-91299/CVE-2026-91299Tue, 20 Oct 2026 00:00:00 GMTOracle Corporation · JD Edwards EnterpriseOne Orchestrator. Not in CISA KEV. EPSS 0.5% (higher than 40% of CVEs). CVSS 10.0 CRITICAL. Priority 16.9 of 100.CVE-2026-87251: Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine)https://patchfirst.co/cve/CVE-2026-87251/CVE-2026-87251Tue, 20 Oct 2026 00:00:00 GMTOracle Corporation · Oracle Access Manager. Not in CISA KEV. EPSS 0.5% (higher than 40.1% of CVEs). CVSS 9.8 CRITICAL. Priority 16.8 of 100.CVE-2026-91495: Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server)https://patchfirst.co/cve/CVE-2026-91495/CVE-2026-91495Tue, 20 Oct 2026 00:00:00 GMTOracle Corporation · Oracle WebCenter Content. Not in CISA KEV. EPSS 0.4% (higher than 39.2% of CVEs). CVSS 9.8 CRITICAL. Priority 16.6 of 100.CVE-2026-91236: Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer)https://patchfirst.co/cve/CVE-2026-91236/CVE-2026-91236Tue, 20 Oct 2026 00:00:00 GMTOracle Corporation · Oracle SOA Suite. Not in CISA KEV. EPSS 0.4% (higher than 39.1% of CVEs). CVSS 9.8 CRITICAL. Priority 16.6 of 100.CVE-2026-91235: Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer)https://patchfirst.co/cve/CVE-2026-91235/CVE-2026-91235Tue, 20 Oct 2026 00:00:00 GMTOracle Corporation · Oracle SOA Suite. Not in CISA KEV. EPSS 0.4% (higher than 39.1% of CVEs). CVSS 9.8 CRITICAL. Priority 16.6 of 100.CVE-2026-91234: Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer)https://patchfirst.co/cve/CVE-2026-91234/CVE-2026-91234Tue, 20 Oct 2026 00:00:00 GMTOracle Corporation · Oracle SOA Suite. Not in CISA KEV. EPSS 0.4% (higher than 39.1% of CVEs). CVSS 9.8 CRITICAL. Priority 16.6 of 100.CVE-2026-91233: Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Enterprise Scheduling System)https://patchfirst.co/cve/CVE-2026-91233/CVE-2026-91233Tue, 20 Oct 2026 00:00:00 GMTOracle Corporation · Oracle SOA Suite. Not in CISA KEV. EPSS 0.4% (higher than 39.1% of CVEs). CVSS 9.8 CRITICAL. Priority 16.6 of 100.CVE-2026-91220: Vulnerability in the Oracle Business Process Management Suite product of Oracle Fusion Middleware (component: Human…https://patchfirst.co/cve/CVE-2026-91220/CVE-2026-91220Tue, 20 Oct 2026 00:00:00 GMTOracle Corporation · Oracle Business Process Management Suite. Not in CISA KEV. EPSS 0.4% (higher than 39.2% of CVEs). CVSS 9.8 CRITICAL. Priority 16.6 of 100.CVE-2026-91214: Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer)https://patchfirst.co/cve/CVE-2026-91214/CVE-2026-91214Tue, 20 Oct 2026 00:00:00 GMTOracle Corporation · Oracle SOA Suite. Not in CISA KEV. EPSS 0.4% (higher than 39.1% of CVEs). CVSS 9.8 CRITICAL. Priority 16.6 of 100.CVE-2026-87337: Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine)https://patchfirst.co/cve/CVE-2026-87337/CVE-2026-87337Tue, 20 Oct 2026 00:00:00 GMTOracle Corporation · Oracle Access Manager. Not in CISA KEV. EPSS 0.4% (higher than 38.2% of CVEs). CVSS 10.0 CRITICAL. Priority 16.6 of 100.CVE-2026-83397: Vulnerability in the Oracle Data Integrator product of Oracle Fusion Middleware (component: Console / Repository…https://patchfirst.co/cve/CVE-2026-83397/CVE-2026-83397Tue, 20 Oct 2026 00:00:00 GMTOracle Corporation · Oracle Data Integrator. Not in CISA KEV. EPSS 0.4% (higher than 39.1% of CVEs). CVSS 9.8 CRITICAL. Priority 16.6 of 100.CVE-2026-83396: Vulnerability in the Oracle Data Integrator product of Oracle Fusion Middleware (component: Console / Repository…https://patchfirst.co/cve/CVE-2026-83396/CVE-2026-83396Tue, 20 Oct 2026 00:00:00 GMTOracle Corporation · Oracle Data Integrator. Not in CISA KEV. EPSS 0.4% (higher than 39.1% of CVEs). CVSS 9.8 CRITICAL. Priority 16.6 of 100.CVE-2026-60432: Vulnerability in the Oracle Solaris product of Oracle Systems (component: Image Packaging System)https://patchfirst.co/cve/CVE-2026-60432/CVE-2026-60432Tue, 20 Oct 2026 00:00:00 GMTOracle Corporation · Oracle Solaris. Not in CISA KEV. EPSS 0.4% (higher than 39.1% of CVEs). CVSS 9.8 CRITICAL. Priority 16.6 of 100.CVE-2026-101446: Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager)https://patchfirst.co/cve/CVE-2026-101446/CVE-2026-101446Tue, 20 Oct 2026 00:00:00 GMTOracle Corporation · Siebel CRM Cloud Applications. Not in CISA KEV. EPSS 0.4% (higher than 38.9% of CVEs). CVSS 9.9 CRITICAL. Priority 16.6 of 100.CVE-2026-101537: Vulnerability in the Oracle Solaris product of Oracle Systems (component: Utility)https://patchfirst.co/cve/CVE-2026-101537/CVE-2026-101537Tue, 20 Oct 2026 00:00:00 GMTOracle Corporation · Oracle Solaris. Not in CISA KEV. EPSS 0.4% (higher than 36.3% of CVEs). CVSS 9.8 CRITICAL. Priority 16.0 of 100.CVE-2026-101501: Vulnerability in Oracle Trusted Answer Search (component: PLSQL package)https://patchfirst.co/cve/CVE-2026-101501/CVE-2026-101501Tue, 20 Oct 2026 00:00:00 GMTOracle Corporation · Oracle Trusted Answer Search. Not in CISA KEV. EPSS 0.4% (higher than 35.3% of CVEs). CVSS 9.9 CRITICAL. Priority 15.9 of 100.CVE-2026-91638: Vulnerability in Oracle Essbase (component: Security)https://patchfirst.co/cve/CVE-2026-91638/CVE-2026-91638Tue, 20 Oct 2026 00:00:00 GMTOracle Corporation · Oracle Essbase. Not in CISA KEV. EPSS 0.4% (higher than 34.2% of CVEs). CVSS 9.9 CRITICAL. Priority 15.7 of 100.CVE-2026-91305: Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security)https://patchfirst.co/cve/CVE-2026-91305/CVE-2026-91305Tue, 20 Oct 2026 00:00:00 GMTOracle Corporation · JD Edwards EnterpriseOne Tools. Not in CISA KEV. EPSS 0.4% (higher than 36.3% of CVEs). CVSS 9.1 CRITICAL. Priority 15.5 of 100.CVE-2026-91265: Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure…https://patchfirst.co/cve/CVE-2026-91265/CVE-2026-91265Tue, 20 Oct 2026 00:00:00 GMTOracle Corporation · JD Edwards EnterpriseOne Tools. Not in CISA KEV. EPSS 0.4% (higher than 36.3% of CVEs). CVSS 9.1 CRITICAL. Priority 15.5 of 100.CVE-2026-91222: Vulnerability in the Oracle Business Process Management Suite product of Oracle Fusion Middleware (component: Human…https://patchfirst.co/cve/CVE-2026-91222/CVE-2026-91222Tue, 20 Oct 2026 00:00:00 GMTOracle Corporation · Oracle Business Process Management Suite. Not in CISA KEV. EPSS 0.4% (higher than 33.1% of CVEs). CVSS 9.9 CRITICAL. Priority 15.5 of 100.CVE-2026-87302: Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core)https://patchfirst.co/cve/CVE-2026-87302/CVE-2026-87302Tue, 20 Oct 2026 00:00:00 GMTOracle Corporation · Oracle WebLogic Server. Not in CISA KEV. EPSS 0.4% (higher than 35.9% of CVEs). CVSS 9.1 CRITICAL. Priority 15.5 of 100.CVE-2026-101765: Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications (component…https://patchfirst.co/cve/CVE-2026-101765/CVE-2026-101765Tue, 20 Oct 2026 00:00:00 GMTOracle Corporation · Oracle Communications Billing and Revenue Management. Not in CISA KEV. EPSS 0.4% (higher than 36.3% of CVEs). CVSS 9.1 CRITICAL. Priority 15.5 of 100.CVE-2026-101590: Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-microprofile-security)https://patchfirst.co/cve/CVE-2026-101590/CVE-2026-101590Tue, 20 Oct 2026 00:00:00 GMTOracle Corporation · Helidon. Not in CISA KEV. EPSS 0.4% (higher than 36.3% of CVEs). CVSS 9.1 CRITICAL. Priority 15.5 of 100.CVE-2026-91251: Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Adapters)https://patchfirst.co/cve/CVE-2026-91251/CVE-2026-91251Tue, 20 Oct 2026 00:00:00 GMTOracle Corporation · Oracle SOA Suite. Not in CISA KEV. EPSS 0.4% (higher than 33% of CVEs). CVSS 9.9 CRITICAL. Priority 15.4 of 100.CVE-2026-91250: Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Adapters)https://patchfirst.co/cve/CVE-2026-91250/CVE-2026-91250Tue, 20 Oct 2026 00:00:00 GMTOracle Corporation · Oracle SOA Suite. Not in CISA KEV. EPSS 0.4% (higher than 33% of CVEs). CVSS 9.9 CRITICAL. Priority 15.4 of 100.CVE-2026-91232: Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer)https://patchfirst.co/cve/CVE-2026-91232/CVE-2026-91232Tue, 20 Oct 2026 00:00:00 GMTOracle Corporation · Oracle SOA Suite. Not in CISA KEV. EPSS 0.4% (higher than 33% of CVEs). CVSS 9.9 CRITICAL. Priority 15.4 of 100.CVE-2026-91341: Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Clean…https://patchfirst.co/cve/CVE-2026-91341/CVE-2026-91341Tue, 20 Oct 2026 00:00:00 GMTOracle Corporation · Oracle Outside In Technology. Not in CISA KEV. EPSS 0.4% (higher than 35% of CVEs). CVSS 9.1 CRITICAL. Priority 15.3 of 100.CVE-2026-91225: Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Adapters)https://patchfirst.co/cve/CVE-2026-91225/CVE-2026-91225Tue, 20 Oct 2026 00:00:00 GMTOracle Corporation · Oracle SOA Suite. Not in CISA KEV. EPSS 0.4% (higher than 35% of CVEs). CVSS 9.1 CRITICAL. Priority 15.3 of 100.CVE-2026-101808: Vulnerability in the Oracle Product Workbench product of Oracle E-Business Suite (component: WebUI)https://patchfirst.co/cve/CVE-2026-101808/CVE-2026-101808Tue, 20 Oct 2026 00:00:00 GMTOracle Corporation · Oracle Product Workbench. Not in CISA KEV. EPSS 0.4% (higher than 34.7% of CVEs). CVSS 9.1 CRITICAL. Priority 15.2 of 100.CVE-2026-91490: Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: LDAP Gateway)https://patchfirst.co/cve/CVE-2026-91490/CVE-2026-91490Tue, 20 Oct 2026 00:00:00 GMTOracle Corporation · Oracle Identity Manager Connector. Not in CISA KEV. EPSS 0.4% (higher than 33.8% of CVEs). CVSS 9.1 CRITICAL. Priority 15.1 of 100.CVE-2026-87347: Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware (component: OSSL Module)https://patchfirst.co/cve/CVE-2026-87347/CVE-2026-87347Tue, 20 Oct 2026 00:00:00 GMTOracle Corporation · Oracle HTTP Server. Not in CISA KEV. EPSS 0.4% (higher than 31.5% of CVEs). CVSS 9.6 CRITICAL. Priority 14.9 of 100.CVE-2026-101420: Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: SQR)https://patchfirst.co/cve/CVE-2026-101420/CVE-2026-101420Tue, 20 Oct 2026 00:00:00 GMTOracle Corporation · PeopleSoft Enterprise PeopleTools. Not in CISA KEV. EPSS 0.4% (higher than 31.5% of CVEs). CVSS 9.6 CRITICAL. Priority 14.9 of 100.CVE-2026-91491: Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: LDAP Gateway)https://patchfirst.co/cve/CVE-2026-91491/CVE-2026-91491Tue, 20 Oct 2026 00:00:00 GMTOracle Corporation · Oracle Identity Manager Connector. Not in CISA KEV. EPSS 0.4% (higher than 29.2% of CVEs). CVSS 9.8 CRITICAL. Priority 14.6 of 100.