Vulnerabilities

TI-2026-77523 CVE-2026-91473 · GHSA-cmm6-3pcp-j657

Improper privilege management in Oracle HTTP Server Web Listener

LOW 35

Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware (component: Web Listener).

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00135 Published 2026-10-20 No fix listed CWE-269

TI-2026-77475 CVE-2026-91419 · GHSA-w473-mh6j-gm33

LOW 35

Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware (component: OSSL Module).

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00145 Published 2026-10-20 No fix listed CWE-269

TI-2026-77187 CVE-2026-87347 · GHSA-9p5w-cjch-8g2m

MEDIUM 43

Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware (component: OSSL Module).

CVSS 3.1CRITICAL 9.6 Network Low privileges No interaction EPSS 0.00397 Published 2026-10-20 No fix listed CWE-200

TI-2026-77186 CVE-2026-87346 · GHSA-xwg4-7p6p-mjwr

MEDIUM 40

Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware (component: Oracle Weblogic Server Proxy Plug-in for Oracle HTTP Server).

CVSS 3.1HIGH 8.7 Network No auth No interaction EPSS 0.00327 Published 2026-10-20 No fix listed CWE-200