Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-83123 | high | 7.1 | No | Vulnerability in the Oracle Report Manager product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are... | 2026-09-16 |
| CVE-2026-83111 | high | 7.1 | No | Vulnerability in the Oracle Partner Management product of Oracle E-Business Suite (component: Internal Operations). Supported versions that... | 2026-09-16 |
| CVE-2026-83110 | high | 7.5 | No | Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Audience). Supported versions that are affected are 12.... | 2026-09-16 |
| CVE-2026-83091 | high | 7.6 | No | Vulnerability in the Oracle Field Service product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are a... | 2026-09-16 |
| CVE-2026-83088 | high | 7.7 | No | Vulnerability in the RDBMS component of Oracle Database Server. Supported versions that are affected are 23.4.0-23.26.3. Easily exploitable... | 2026-09-16 |
| CVE-2026-83084 | high | 7.7 | No | Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Audience). Supported versions that are affected are 12.... | 2026-09-16 |
| CVE-2026-83083 | high | 8.5 | No | Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Audience). Supported versions that are affected are 12.... | 2026-09-16 |
| CVE-2026-83076 | medium | 6.8 | No | Vulnerability in the Oracle HR Intelligence product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are... | 2026-09-16 |
| CVE-2026-83070 | high | 7.7 | No | Vulnerability in the PeopleSoft Enterprise PRTL Interaction Hub product of Oracle PeopleSoft (component: Enterprise Portal). The supported v... | 2026-09-16 |
| CVE-2026-83068 | high | 7.7 | No | Vulnerability in the Oracle Enterprise Manager for Oracle Database product of Oracle Enterprise Manager (component: Core). The supported ver... | 2026-09-16 |
| CVE-2026-83067 | high | 8.1 | No | Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware (component: ADF Shared Components). Supported versions that are a... | 2026-09-16 |
| CVE-2026-73966 | high | 7.2 | No | Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing). Supported versions that are affected are 1... | 2026-09-16 |
| CVE-2026-70755 | medium | 6.5 | No | Vulnerability in the Oracle Web Applications Desktop Integrator product of Oracle E-Business Suite (component: File download). Supported ver... | 2026-09-16 |
| CVE-2026-62597 | medium | 6.5 | No | Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Event Management). Supported v... | 2026-09-16 |
| CVE-2026-86818 | medium | 4.8 | No | fast-uri is a dependency-free RFC 3986 URI parser for Node.js, used by Fastify and ajv, that added a mailto scheme parser in version 4.1.3.... | 2026-09-16 |
| CVE-2026-86472 | medium | 4.8 | No | fast-uri is a dependency-free RFC 3986 URI parser for Node.js, used by Fastify and ajv. In versions before 2.4.7, from 3.0.0 through 3.1.7,... | 2026-09-16 |
| CVE-2026-90711 | critical | 9.1 | No | proxy-addr is a Node.js module that determines a request's client address behind trusted reverse proxies, and it backs Express req.ip and re... | 2026-09-16 |
| CVE-2026-17495 | medium | 5.9 | No | moment is a JavaScript date library for parsing, validating, manipulating, and formatting dates. In versions 2.29.2 through 2.30.1, a specia... | 2026-09-16 |
| CVE-2026-88932 | medium | 5.3 | No | multer is a Node.js middleware for handling multipart/form-data uploads. In versions 2.2.0 through 2.3.0, when a request using disk storage... | 2026-09-16 |
| CVE-2026-87776 | high | 7.5 | No | compression is a Node.js and Express compression middleware. In versions before 1.8.2, when a client aborts the connection while a compresse... | 2026-09-16 |