CVE-2026-91613

LowCVSS 3.3/10Last modified Nov 11, 2026

Description

Vulnerability in the Oracle Communications Unified Inventory Management product of Oracle Communications (component: Security). Supported versions that are affected are 7.5.0, 7.5.1, 7.6.0, 7.7.0, 7.8.0 and 8.0.1. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Communications Unified Inventory Management executes to compromise Oracle Communications Unified Inventory Management. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Communications Unified Inventory Management accessible data. CVSS 3.1 Base Score 3.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N).

Metrics

CVSS 3.1 3.3/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Weakness enumeration

CWE-200

Affected software

VendorProductVersions
Oracle CorporationOracle Communications Unified Inventory Management7.5.0; 7.5.1; 7.6.0; 7.7.0; 7.8.0; 8.0.1

References

Timeline

Published
Oct 20, 2026
Last modified
Nov 11, 2026
NVD status
Analyzed

Related CVEs from 2026

CVE-2026-916143.3Vulnerability in the Oracle Communications Unified Inventory Management product of Oracle Communications (component: Security). Supported vCVE-2026-916156.3Vulnerability in the Java VM component of Oracle Database Server. Supported versions that are affected are 19.3-19.32, 21.3-21.23 and 23.4CVE-2026-916163.7Vulnerability in the Oracle Middleware Common Libraries and Tools product of Oracle Fusion Middleware (component: Remote Diagnostic Agent). CVE-2026-916175.5Vulnerability in the Oracle Middleware Common Libraries and Tools product of Oracle Fusion Middleware (component: Remote Diagnostic Agent). CVE-2026-91624.3Mattermost versions 11.7.x <= 11.7.0, 11.6.x <= 11.6.2, 11.5.x <= 11.5.5, 10.11.x <= 10.11.17 fail to invalidate cached authentication stateCVE-2026-916229.3Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Product Quality ManageCVE-2026-916237.4Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Product Quality ManageCVE-2026-916249.1Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Product Quality ManageCVE-2026-916258.2Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Product Quality ManageCVE-2026-916277.8Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications (component: Platform). SupportedCVE-2026-916285.5Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications (component: BRM Server). SupportCVE-2026-916294.7Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications (component: Platform). Supported
CVE-2026-91613: Low severity, CVSS 3.3 | Vulnix