AI and data stack advisories

Severe, 6 weeks1490Projects326

1490 severe, 6 weeks · 326 projects

OracleCVE-2026-101589

Oracle Utilities Network Management System: data exposure via System Wide

Oracle

CVE-2026-101589 · Published Oct 20, 2026 · updated Nov 6, 2026

Medium5.3
No fix yet
Oracle advisory

Vulnerability in the Oracle Utilities Network Management System product of Oracle Utilities Applications (component: System Wide). Supported versions that are affected are 2.6.0.1.0-2.6.0.1.12, 2.6.0.2.0-2.6.0.2.10 and 25.12.0.0.0-25.12.0.0.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle Utilities Network Management System. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Utilities Network Management System accessible data. CVSS 3.1 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).

Affected versions

PackageAffectedFixed in
Oracle Utilities Network Management System
Product
>= 2.6.0.1.0, <= 2.6.0.1.12No fix yet
>= 2.6.0.2.0, <= 2.6.0.2.10No fix yet
>= 25.12.0.0.0, <= 25.12.0.0.2No fix yet
Details and references
CVSS 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Severity from
the vendor (its own CVE record or advisory)
Weakness
CWE-284

More Oracle advisories

All Oracle