High-severity confidentiality exposure in Oracle Outside In Technology 8.5.8, a document-parsing library embedded in third-party applications, lets unauthenticated remote attackers read critical data through HTTP requests. The CVSS 3.1 score is 8.6 (AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N), reflecting low attack complexity, no user interaction, scope change, and high confidentiality impact with no integrity or availability effect. Exploitation realistically requires that the library's Outside In Core parsing path be reachable and fed attacker-supplied documents by the embedding product; no public exploit code or CISA KEV entry is identified at time of analysis.
Unauthenticated network attackers can compromise the Authentication Engine component of Oracle Access Manager 12.2.1.4.0 and 14.1.2.0.0 over HTTP, gaining high-confidentiality read access to data managed by the identity server plus limited ability to modify it and to degrade availability (CVSS 3.1 base 8.6, AV:N/AC:L/PR:N/UI:N). Because the vector carries PR:N and UI:N, no credentials, session, or victim interaction are needed - only network reachability to a vulnerable OAM deployment. No public exploit code or confirmed active exploitation was identified at time of analysis, so risk is driven by exposure: internet-facing or broadly reachable OAM instances should be treated as high priority and patched via Oracle's October 2026 Critical Patch Update, while internal-only deployments behind filtering proxies have materially lower reachability.
Stack-based buffer overflow in Advantech ADAM-3600 industrial remote I/O modules lets a high-privileged authenticated attacker execute arbitrary code on the device. Reaching the flaw requires operator-level credentials and invocation of a specific feature the vendor characterizes as non-functional, so the realistic attack surface is limited to insiders or attackers who have already compromised privileged access - the network vector and low attack complexity mean no user interaction is needed once those prerequisites are met. No public exploit code or confirmed active exploitation was identified at time of analysis, and EPSS/KEV data was not provided.
Oracle Outside In Clean Content SDK 8.5.8, as embedded in Oracle Fusion Middleware and integrating products, can be made to create, modify, or delete critical data by unauthenticated remote attackers who can supply documents over HTTP to an application that parses them with the SDK. The CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N) indicates no authentication or user interaction, with scope change extending impact to the integrating product, although confidentiality and availability are unaffected. No public exploit identified at time of analysis, and no CISA KEV listing is provided.
Unauthenticated remote resource exhaustion in IBM QRadar SIEM allows a network-reachable attacker to degrade or take down the security monitoring platform without credentials or user interaction, per the CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:N, availability-only impact). The vendor scored the issue 8.6 with Scope:Changed, while our independent assessment treats scope as unchanged (7.5-equivalent), since no downstream component beyond the QRadar service itself is demonstrated; either way the practical effect is loss of SIEM visibility while the attack runs. No public exploit code or confirmed active exploitation was identified at time of analysis, and the affected version range is not disclosed in the supplied data - it must be confirmed against IBM advisory node 7292244 before exposure decisions are made.
Unauthenticated SOAP requests to the JD Edwards EnterpriseOne Tools Interoperability SEC component can expose critical data in versions 9.2.0.0 through 9.2.26.5, with a scope change that may extend impact to connected products. The CVSS 3.1 score is 8.6 (AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N), and only confidentiality is affected; no public exploit identified at time of analysis. Risk is highest where the SOAP Interoperability service is deployed and reachable from untrusted networks.
Unauthenticated HTTP access to the Oracle SOA Suite Fabric Layer can expose critical data and, because of a scope change, may affect integrated products that trust SOA Suite. The flaw affects Oracle Fusion Middleware SOA Suite 12.2.1.4.0 and 14.1.2.0.0 and is rated CVSS 8.6 with confidentiality-only impact. No public exploit was identified at time of analysis.
Unauthenticated network access to the Generic REST interface in Oracle Identity Manager Connector 12.2.1.4.0 and 14.1.2.1.0 can expose critical data, with a CVSS 3.1 score of 8.6 and a scope change that may extend disclosed access to additional integrated products. The flaw is remotely exploitable over HTTP without credentials or user interaction, but impact is limited to confidentiality, with no integrity or availability effect. No public exploit code was identified at time of analysis; the main exposure driver is whether the connector's REST endpoint is reachable by an attacker.
Arbitrary OS command execution in multiple Atsumi Electric DVR models (ADX1004, ADX1008, ADX204, ADX404, ADX3004, ADX3008, ADX3016, ADX5004, ADX5008 and ADX2016) is enabled by an undocumented hidden function reachable by an administrator-level user, with high confidentiality, integrity and availability impact (CVSS 8.6 CVSS 4.0; assessed CVSS 3.1 vector AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H). Exploitation requires valid administrator credentials (PR:H) and network reachability to the management interface, but no user interaction and low attack complexity; no public exploit code or CISA KEV entry was identified at time of analysis. Risk is concentrated where admin passwords are default, weak or reused, or where the DVR management interface is exposed to untrusted networks.
Unauthenticated HTTP requests to the Analytics Web General component of Oracle Business Intelligence Enterprise Edition can drive the service into a hang or repeatable crash, giving a complete denial of service while also permitting limited reads and limited inserts/updates/deletes against a subset of BI EE data. The flaw is rated CVSS 3.1 8.6 (AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H) and affects releases 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0; Oracle characterizes it as easily exploitable by a remote attacker with network access and no credentials. There is no CISA KEV listing and no public exploit identified at time of analysis, so prioritization should be driven by internet or broad-network exposure of the analytics web tier rather than by observed attack activity.
A privileged, authenticated attacker who can reach the Advantech ADAM-3600 firmware upgrade function can upload a forged firmware image and achieve persistent compromise of the device. The issue is rated CVSS 4.0 8.6 (HIGH) with network reachability and high confidentiality, integrity, and availability impact, but exploitation requires high privileges (PR:H); no CISA KEV entry or public exploit code is identified in the supplied data.
Cross-session task access in the MCP TypeScript SDK (@modelcontextprotocol/sdk 1.24.0 through 1.31.0) allows any client sharing a single InMemoryTaskStore to list, read, and cancel other clients' experimental task records and results, an IDOR-style authorization bypass rated 8.6 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L) with high confidentiality impact and low integrity/availability impact. The flaw is only reachable where an HTTP MCP server explicitly passes a shared taskStore to McpServer or Server and serves multiple sessions from it using the deprecated experimental tasks feature; stdio servers, stateless HTTP servers, and one-store-per-session deployments are not exposed, and 2.x packages are unaffected. There is no public exploit identified at time of analysis and no confirmed active exploitation; the vendor patched the SDK in 1.32.0 by binding each task to the session that created it.
Cross-site scripting in Unblu Spark's embedded co-browsing feature (7.0 through 7.57.7 and 8.0 through 8.39.2) allows an unauthenticated visitor to execute arbitrary JavaScript in the browser of an agent who joins the attacker's co-browsing session, with the script running in the agent's Agent Desk or Single Conversation Desk session context. Both on-premises and cloud deployments are affected, but mobile co-apping is not. Exploitation is conditional on live agent participation and rendering of attacker-supplied co-browsed HTML; no public exploit code or confirmed active exploitation is identified in the available data.
Authenticated low-privileged attackers with HTTP access can exploit Oracle iSupport in E-Business Suite 12.2.3 through 12.2.15 to create, delete, or modify critical Service Request data and cause partial denial of service, with scope change potentially affecting other EBS products. The flaw is easily exploitable (CVSS 8.5, AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:L), and because iSupport is a customer-facing self-service portal, the required credentials may be broadly available. No public exploit was identified at the time of analysis.
Authenticated low-privileged attackers with HTTP access to Oracle Product Hub 12.2.3 through 12.2.15 can achieve takeover of the component, with scope change (S:C) extending impact to additional connected Oracle E-Business Suite products. The CVSS 3.1 base score is 8.5, but exploitation is rated difficult (AC:H) and requires a valid low-privileged account (PR:L) with no user interaction (UI:N). No public exploit code or confirmed active exploitation was identified in the available intelligence at time of analysis.
Full takeover of Oracle Essbase 21.8.3.0.0 is achievable by a low-privileged, authenticated attacker reaching the Essbase Web Platform over HTTP, with Oracle's scope-change rating (S:C) warning that a compromise may significantly impact additional products beyond Essbase itself. Oracle characterizes the flaw as difficult to exploit (AC:H), so success depends on conditions outside the attacker's control rather than being reliably repeatable, and the prior-authentication requirement (PR:L) is the main limiting factor. No public exploit was identified at time of analysis, and the issue is addressed through Oracle's October 2026 Critical Patch Update.
Oracle EDI Gateway in Oracle E-Business Suite 12.2.3 through 12.2.15 exposes critical EDI data to low-privileged network attackers via HTTP, allowing high confidentiality impact and limited integrity modification with a scope change that can affect additional connected Oracle products. Exploitation requires a valid low-privilege EBS/EDI Gateway account (PR:L) and network reachability to the EDI Gateway component; no public exploit or active exploitation is identified in the available intelligence. The CVSS 3.1 base score is 8.5, reflecting high confidentiality and low integrity impact.
Critical data exposure and limited data modification in Oracle Essbase 21.8.3.0.0's Web Platform are possible for an authenticated low-privileged attacker with HTTP network access. The CVSS 3.1 score is 8.5 (AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N), with scope change extending impact to additional products; no public exploit identified at time of analysis, and the supplied 'Authentication Bypass' tag conflicts with the vector's PR:L requirement.
ASUS Armoury Crate on Windows loads at least one dynamic-link library by name without a fully qualified path, so a local attacker who can write to a directory that precedes the legitimate library in the Windows DLL search order can plant a malicious DLL and have it loaded by a high-privilege Armoury Crate component, yielding arbitrary code execution at SYSTEM integrity. The flaw (CWE-427) is local-only: the attacker must already hold low-privileged code execution on the host (CVSS:4.0 AV:L/PR:L, independently assessed as CVSS:3.1 AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, 8.5 CVSS 4.0 base) and must be able to write to the hijackable path; the payload then runs when the privileged process or service next starts, with no victim interaction required. Only machines with Armoury Crate installed are affected, and no public exploit code or confirmed active exploitation was identified at time of analysis, making this a credible but not emergency-tier hardening/patching priority for gaming laptops, desktops and ROG/TUF motherboard owners.
Eclipse ThreadX's Cortex-A7 MMU module port accepts a caller-supplied buffer range after validating only its first byte, so an authenticated local attacker who can execute code in a protected module can cause privileged dispatch code to read or write beyond the module's declared memory. The weakness sits in a shared range-check macro used by protected-module dispatchers that consume buffers or extra-parameter arrays, and exposure is limited to systems running the ThreadX Module Manager with memory-protected modules on that port. No public exploit identified at time of analysis, and the attack path is local rather than remote or unauthenticated.
Eclipse ThreadX firmware built with Module Manager and loadable modules enabled contains a use-after-free in txm_module_object_deallocate: a module can request release of a kernel object control block by address, and the manager frees it even if the kernel still references it. The object remains on its created list and, for threads or timers, on scheduler/timer lists, so the byte pool can reallocate the same memory while the kernel still uses it. Exploitation requires local low-privilege code execution inside a loaded module (PR:L, AV:L) and is not remotely reachable in default builds; no public exploit code was identified at time of analysis.
Authenticated low-privileged users with HTTP access to Oracle Partner Management can read, create, delete or modify critical data and cause a partial denial of service across Oracle E-Business Suite 12.2.3 through 12.2.15, with the scope-change rating (S:C) meaning the impact can extend beyond Partner Management into other EBS products (CVSS 3.1 base score 8.4: C:H/I:H/A:L). Oracle rates the flaw as difficult to exploit because success depends on conditions or timing the attacker does not fully control (AC:H), and no public exploit code or active exploitation has been identified at time of analysis. The practical limiting factors are the requirement for valid low-privilege credentials (PR:L) and network reachability to a deployed Partner Management / Internal Operations component; no user interaction is needed (UI:N).
Oracle Agile Engineering Data Management 6.2.1 contains an authenticated, high-complexity flaw in the Engineering Communication Interface that lets a low-privileged network attacker read or modify critical data, affect additional products through scope change, and cause partial denial of service. Exploitation requires a valid low-privileged account and HTTP access to the component; no public exploit identified at time of analysis. The CVSS 8.4 score reflects high confidentiality and integrity impact, but Oracle's 'difficult to exploit' rating and the authentication prerequisite reduce mass-exploitation risk.
Takeover of Oracle VM VirtualBox 7.2.20 is possible by a high-privileged attacker with access to the physical communication segment attached to the hardware running VirtualBox, per Oracle's October 2026 CPU. The Core component flaw has a CVSS 3.1 score of 8.4 (AV:A/AC:L/PR:H/UI:N/S:C) and can cross a scope boundary to affect additional products. No public exploit or CISA KEV listing was identified at time of analysis, and no EPSS score was supplied.
Takeover of Oracle Outside In Technology 8.5.8 is possible for an attacker who already has a local logon on the host running the Outside In Clean Content SDK, with high confidentiality, integrity, and availability impact and no additional authentication or user interaction required. The flaw is rated CVSS 8.4 (AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H), and no public exploit was identified at time of analysis; risk is concentrated where untrusted documents reach the Clean Content SDK on multi-user or otherwise locally exposed hosts.
Low-privileged local users with logon access to a JD Edwards EnterpriseOne Tools host can bypass authentication in the Monitoring and Diagnostics (SEC) component and gain read/write control over critical data. Affected releases are Tools 9.2.0.0 through 9.2.26.5; exploitation requires an existing interactive account on the server (CVSS vector AV:L/PR:L), so the realistic threat is insider abuse or an attacker operating after an initial foothold, not a remote mass-exploitation campaign. Impact is rated CVSS 8.4 because a scope change (S:C) lets the compromise spill into connected products and the underlying ERP data, though no public exploit code and no confirmed active exploitation were identified at time of analysis.
Oracle VM VirtualBox 7.2.16 carries a flaw in its Core component that lets a low-privileged user with local logon to the host read critical data accessible to VirtualBox and reliably hang or repeatedly crash the hypervisor, with a scope change (S:C) that points to a guest-to-host boundary escape rather than a mere guest-local bug. The vector (AV:L/AC:L/PR:L/UI:N) means exploitation is local and requires only a low-privileged account, no user interaction, and low attack complexity, so risk concentrates in multi-tenant hosts, VDI estates and developer machines where semi-trusted users can log on or drive a guest VM. No public exploit code has been identified at time of analysis, the issue is not confirmed actively exploited (no CISA KEV entry), no EPSS score was supplied, and the exact fixed build is not specified in the provided data - the Oracle Critical Patch Update (October 2026) advisory is the authoritative patch source.
Oracle Solaris 11.3 and 11.4 can be fully taken over by an attacker who can already log on to the host, through a flaw in the operating system's 'Utility' component. Exploitation yields high confidentiality, integrity and availability impact - effectively a complete loss of control of the Solaris system - but it requires a local foothold: the CVSS vector is AV:L, and our assessed vector (PR:L) indicates at least a low-privileged local account is needed, contrary to Oracle's PR:N labelling. No public exploit code has been identified at time of analysis and the CVE is not in CISA KEV; with low attack complexity and no user interaction, however, the step from local access to full compromise is short.
Local privilege escalation in IBM Sterling Connect:Direct for UNIX (6.3.0.0-6.3.0.7 and 6.4.0.0-6.4.0.6) allows an authenticated local attacker with a low-privileged account to gain elevated privileges through improper privilege management. The CVSS 3.1 score is 8.4 (AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N), reflecting high confidentiality and integrity impact to the host with scope change, but the attack is not remotely reachable. No public exploit was identified at the time of analysis, and exploitation requires an existing local foothold on a host running the affected Connect:Direct components, likely under elevated privileges.
The Eclipse ThreadX GUIX PNG decoder can be driven out of bounds by a crafted PNG that places a second IHDR chunk after IDAT, enabling memory corruption in applications that render attacker-supplied images. Any integration with the GUIX PNG decoder enabled is in scope, since the decoder is compiled in by default, and exploitation is local and requires user/application interaction to open the crafted file. No public exploit was identified at time of analysis; the reporter rates the issue 8.4, and the independent assessment treats it as a local, user-interaction-dependent memory-corruption flaw.
A high-severity flaw in Oracle E-Business Suite Integrated SOA Gateway (Internal Operations) 12.2.3 through 12.2.15 allows a low-privileged, network-positioned attacker using HTTP to read and modify critical data and cause partial denial of service. CVSS 3.1 is 8.3 (AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L), so a valid low-privilege account and a reachable Gateway endpoint are required - the 'Authentication Bypass' tag should not be read as fully unauthenticated access. No CISA KEV listing was present, and no public exploit identified at time of analysis; Oracle's October 2026 Critical Patch Update advisory is the referenced fix source.
Low-privileged authenticated attackers can compromise Oracle Siebel CRM Deployment 17.0 through 26.9 over HTTP, gaining high confidentiality and integrity impact and causing partial denial of service (CVSS 8.3, PR:L). The affected Server Infrastructure component allows unauthorized creation, deletion, modification, and access to critical deployment data, and no public exploit code or CISA KEV entry was identified at time of analysis. Although tagged 'Authentication Bypass', the assessed vector requires valid low-privilege credentials and does not represent unauthenticated access.
Authenticated low-privileged users can read, modify, and delete critical Product Quality Management data in Oracle Agile Product Lifecycle Management for Process 6.2.4, and can additionally degrade availability, giving the issue a CVSS 3.1 base score of 8.3. The flaw is reachable over the network via HTTP, requires only a valid low-privilege account (PR:L), needs no user interaction, and has low attack complexity, so exploitation is straightforward once an attacker holds credentials. No public exploit code and no confirmed active exploitation were identified at time of analysis, and the main practical constraints are the authentication prerequisite and the narrow deployment base of this specialized supply-chain product.
Oracle MySQL Server and MySQL Cluster are exposed to a high-severity integrity and availability flaw in the Server: JSON component, affecting MySQL Server 8.4.0-8.4.12, 9.7.0-9.7.3, and 26.7.0-26.7.1 plus MySQL Cluster 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3, and 26.7.0-26.7.1. An authenticated low-privileged attacker with network access can use MySQL protocols to create, delete, or modify critical data, read a limited subset of data, and cause hangs or repeatable crashes, yielding CVSS 3.1 score 8.3. No public exploit was identified at time of analysis, and exploitation is constrained by the need for valid low-privileged database credentials.
Broken object-level authorization in IBM Langflow OSS 1.0.0 through 1.12.4 allows any authenticated low-privilege user to bulk-delete another user's messages, overwrite message content to inject malicious prompts, or reassign a conversation session ID to hijack the session. The CVSS 3.1 score is 8.3 (AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L), so exploitation requires a valid account and a shared deployment where other users' messages or sessions exist; single-user instances have little cross-user data to target. No public exploit code or confirmed active exploitation was identified at time of analysis, and this is assessed as above-average priority rather than an emergency.
Adjacent-network attackers can achieve takeover of Oracle Business Intelligence Enterprise Edition 8.2.0.0.0 and 26.01.0.0.0 through a high-complexity Platform Security flaw, with no authentication or user interaction required; CVSS 8.3 reflects high confidentiality, integrity, and availability impact plus scope change. Oracle rates exploitation as difficult and requires access to the physical or adjacent communication segment attached to the OBIEE host, not the open internet. No public exploit was identified at time of analysis.
The Advantech ADAM-3600 industrial RTU/edge controller can be crashed by a remotely delivered crafted message that triggers an assertion fault, causing a denial of service limited to availability. No authentication or user interaction is required (PR:N/UI:N), but exploitation depends on network reachability to the affected service and on a specific precondition (AT:P) for the fault to fire. No public exploit code or CISA KEV entry was identified at time of analysis.
Unauthenticated remote attackers can read critical data and cause a partial denial of service in Oracle Outside In Technology 8.5.8 by supplying crafted files to applications that embed the Outside In Core parser. The CVSS 3.1 score is 8.2 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L), reflecting high confidentiality impact, low availability impact, and no integrity impact. No public exploit was identified at time of analysis, and exploitation depends on a host application exposing file-processing paths to untrusted input.
Oracle Solaris 11.4 exposes an HTTP-reachable service in its Services component that remote unauthenticated attackers can exploit to crash or repeatedly hang the system (complete denial of service) and read a subset of accessible data. No authentication or user interaction is required, and the CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H) scores 8.2, with availability impact dominant and a secondary confidentiality leak; scope is unchanged, so impact stays confined to the Solaris host. No public exploit code or confirmed active exploitation was identified at time of analysis, and real-world urgency hinges primarily on whether the affected HTTP service is exposed beyond trusted management networks.
Arbitrary file write in Advantech ADAM-3600 lets an authenticated attacker with high-privilege operator or administrator credentials and network access to the device management interface write files to arbitrary system locations, compromising device integrity and potentially that of a subsequent system. The assessed impact is integrity-only, with no confidentiality or availability impact, and a CVSS 4.0 base score of 8.2. No public exploit was identified at time of analysis, and exploitation is gated by the need for valid privileged credentials.
Advantech ADAM-3600 industrial remote terminal units expose a path traversal flaw that allows a high-privileged authenticated user to read arbitrary files from the device filesystem over the network. This is a moderate-priority issue because exploitation requires a valid high-privilege session and network reachability to the management interface, which are constrained in segmented OT deployments; no public exploit identified at time of analysis, and the vendor advisory plus a CSA alert are available.
follow-redirects 1.16.0 through 1.16.x before 1.16.1 can disclose Authorization, Proxy-Authorization, Cookie, and caller-declared sensitiveHeaders when an application supplies headers in Node's alternating name/value array form and follows an attacker-influenced redirect to a different host or a downgraded protocol. This is an unauthenticated confidentiality issue (CWE-200) with high credential impact, but exploitation is conditional because object-form headers are unaffected and the attacker must serve or influence the redirect; the supplied CVSS 4.0 score is 8.2, while the independent CVSS 3.1 vector AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N captures the high attack complexity. No public exploit was identified at time of analysis, and no CISA KEV confirmation was present in the supplied data; the vendor patch is 1.16.1.
Unauthenticated HTTP access to the Oracle E-Business Suite Integrated SOA Gateway can expose critical data and permit limited unauthorized data changes in EBS 12.2.3 through 12.2.15, because the SOA Provider component does not adequately enforce access controls. The issue is an authentication bypass rated CVSS 8.2 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N), so where the optional gateway is deployed and reachable, default configurations are remotely exploitable without credentials or user interaction. No public exploit identified at time of analysis; practical risk is driven by whether the gateway is enabled and network-exposed.
Unauthenticated HTTP access to the Audience component of Oracle Marketing in Oracle E-Business Suite 12.2.3 through 12.2.15 can let a remote attacker read all Oracle Marketing-accessible data and modify some of it, with no privileges or user interaction required. Oracle rates the issue 8.2 on CVSS 3.1 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N); exposure depends on the Marketing module being installed and its HTTP endpoints being reachable. Exploitation status at time of analysis: no public exploit identified at time of analysis, and Oracle's October 2026 Critical Patch Update advisory provides the vendor remediation.
Oracle BPM Suite 12.2.1.4.0 and 14.1.2.0.0 expose the Case Management Service (11g+) to unauthenticated, low-complexity HTTP attacks that can read critical data and make limited unauthorized changes. Oracle rates the issue 8.2 (High) with CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N, meaning no credentials or user interaction are required against a reachable instance. No public exploit was identified at time of analysis, so exposure is primarily a function of whether the BPM Suite HTTP interface is reachable from untrusted networks.
Unauthenticated HTTP access to the Data Transforms component in Oracle Data Integrator 12.2.1.4.0 and 14.1.2.0.0 can be abused to read critical ODI data and perform limited unauthorized data changes. The flaw is rated CVSS 8.2 with high confidentiality and low integrity impact and requires no credentials or user interaction, making reachable ODI endpoints a high-priority exposure. No public exploit code was identified at time of analysis.
Unauthenticated HTTP requests to Oracle BRM Server in Oracle Communications Billing and Revenue Management 15.0.0.0.0 through 15.2.0.0.0 can read critical billing data and make limited unauthorized changes, according to Oracle's October 2026 Critical Patch Update. The CVSS 3.1 score is 8.2 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N), so confidentiality is fully exposed while integrity impact is partial and availability is unaffected. No public exploit code or confirmed active exploitation was identified in the provided intelligence at time of analysis.
Unauthorized data access and limited data modification in Oracle Siebel CRM Deployment 17.0 through 26.9 are possible for unauthenticated network attackers able to reach the Server Infrastructure HTTP interface. The CVSS 3.1 score is 8.2 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N), reflecting high confidentiality impact and low integrity impact with no availability impact; Oracle tags the issue as an authentication bypass. No CISA KEV entry or public exploit code was identified in the supplied intelligence, so exposure is chiefly governed by whether the Siebel HTTP endpoint is reachable from untrusted networks.
IBM QRadar SIEM 7.6.0.0 through 7.6.0.4 and 7.5.0 through 7.5.0 Update Package 16 Interim Fix 001 contains an out-of-bounds read that a network-reachable attacker can trigger without authentication or user interaction. Successful exploitation can crash or degrade the service for a high availability impact and may expose limited adjacent memory, yielding low confidentiality impact; no public exploit has been identified at time of analysis and no KEV status is provided.
Authenticated attackers can achieve broad data tampering and disclosure against Oracle E-Business Suite's Global Order Promising Web Service in versions 12.2.3 through 12.2.15, with CVSS 3.1 scoring 8.2 (C:H/I:H, no availability impact). Exploitation requires a valid low-privilege EBS account (PR:L) plus network HTTP reachability to the affected component and satisfaction of high-complexity, server-side conditions the attacker cannot directly control (AC:H); no user interaction is needed (UI:N), and successful attacks cross a scope boundary (S:C), meaning other products can be significantly impacted. No public exploit code or confirmed in-the-wild activity was identified at time of analysis - no public exploit identified at time of analysis - so risk is real but bounded by the authentication prerequisite and the High attack complexity.