Vulnerabilities

TI-2026-77417 CVE-2026-91358 · GHSA-g5mx-vf68-wj3q

Missing authentication in Oracle Business Process Management Suite

MEDIUM 42

Vulnerability in the Oracle Business Process Management Suite product of Oracle Fusion Middleware (component: Case management Service (11g+)).

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00321 Published 2026-10-20 No fix listed CWE-306

TI-2026-77303 CVE-2026-91243 · GHSA-6hv5-x898-h56c

MEDIUM 43

Vulnerability in the Oracle Business Process Management Suite product of Oracle Fusion Middleware (component: Fabric Layer).

CVSS 3.1CRITICAL 9.6 Network Low privileges No interaction EPSS 0.00326 Published 2026-10-20 No fix listed CWE-284

TI-2026-77282 CVE-2026-91222 · GHSA-533p-f5rf-xrvm

MEDIUM 43

Vulnerability in the Oracle Business Process Management Suite product of Oracle Fusion Middleware (component: Human Workflow (11g+)).

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.00389 Published 2026-10-20 No fix listed CWE-287

TI-2026-77280 CVE-2026-91220 · GHSA-5cqg-m39q-mw7f

MEDIUM 49

Vulnerability in the Oracle Business Process Management Suite product of Oracle Fusion Middleware (component: Human Workflow).

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0045 Published 2026-10-20 No fix listed CWE-287

TI-2026-77273 CVE-2026-91213 · GHSA-r29q-5h3q-939f

MEDIUM 40

Vulnerability in the Oracle Business Process Management Suite product of Oracle Fusion Middleware (component: BPM Composer).

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00389 Published 2026-10-20 No fix listed CWE-287