Vulnerabilities in Oracle Products · CIAD-2026-0043

CERT-In Advisory CIAD-2026-0043

Multiple Vulnerabilities in Oracle Products

Original Issue Date: August 28, 2026

Severity Rating: High

Software Affected

Oracle MySQL Oracle Access Manager Oracle Supply Chain Products Oracle Analytics Oracle Commerce Oracle Communications Oracle Database Server Oracle E-Business Suite Oracle Enterprise Manager Oracle Financial Services Applications

For complete list of affected products and versions refer to the Oracle advisory: https://www.oracle.com/security-alerts/cspuaug2026.html

Overview

Multiple vulnerabilities have been reported in various Oracle products which could be exploited by a remote attacker to gain unauthorized access, execute arbitrary code, disclose sensitive information, manipulate data, bypass security controls, or cause denial-of-service conditions on the targeted system.

Target Audience: Organizations and IT administrators using Oracle Corporation products.

Risk Assessment: Risk of remote code execution, unauthorized access, sensitive information disclosure, data manipulation, or denial-of-service conditions.

Impact Assessment: Potential unauthorized access to sensitive information, data manipulation, and security control bypass, and disruption of affected systems.

Description

Oracle products are used for several applications including enterprise-level data management, cloud solutions, software development, communications, financial services, hospitality, retail, and business applications. They are employed across a wide range of sectors, including finance, healthcare, manufacturing, government, and retail, among others.

These vulnerabilities exist in various components of Oracle products due to weaknesses affecting different product functionalities and third-party components. Several of the vulnerabilities may be exploited remotely without authentication over a network without requiring valid user credentials.

Successful exploitation of these vulnerabilities could allow an attacker to gain unauthorized access, execute arbitrary code, access sensitive information, manipulate data, bypass security controls, or cause denial-of-service conditions on the targeted system.

For complete list of affected products and versions refer to the Oracle advisory: https://www.oracle.com/security-alerts/cspuaug2026.html

Solution

Apply appropriate updates as mentioned by the Vendor: https://www.oracle.com/security-alerts/cspuaug2026.html

Vendor Information

Oracle https://www.oracle.com/security-alerts/

References

https://www.oracle.com/security-alerts/cspuaug2026.html