Oracle Corporation security advisory (AV26-1071) – Update 1

Imported from official source

Cybersecurity Classified by Officially

Serial Number: AV26-1071
Date: October 20, 2026
Updated: October 28, 2026

As of October 20, 2026, Oracle Corporation is affected by vulnerabilities in the following products:

  • JD Edwards EnterpriseOne Human Resources Management
  • JD Edwards EnterpriseOne Operational Sourcing
  • JD Edwards EnterpriseOne Sales Order Entry
  • Oracle Agile Engineering Data Management
  • Oracle Agile Product Lifecycle Management for Process
  • Oracle Business Intelligence Enterprise Edition
  • Oracle Business Process Management Suite
  • Oracle Communications BRM - Elastic Charging Engine
  • Oracle Communications Billing and Revenue Management
  • Oracle Communications Cloud Native Core Binding Support Function
  • Oracle Communications Cloud Native Core Certificate Management
  • Oracle Communications Cloud Native Core Console
  • Oracle Communications Cloud Native Core Network Repository Function
  • Oracle Communications Cloud Native Core Network Slice Selection Function
  • Oracle Communications Cloud Native Core Policy
  • Oracle Communications Cloud Native Core Security Edge Protection Proxy
  • Oracle Communications Cloud Native Core Service Communication Proxy
  • Oracle Communications Cloud Native Core Unified Data Repository
  • Oracle Communications EAGLE Element Management System
  • Oracle Communications EAGLE LNP Application Processor
  • Oracle Communications Network Analytics Data Director
  • Oracle Communications Operations Monitor
  • Oracle Communications Service Catalog and Design
  • Oracle Communications Unified Inventory Management
  • Oracle Enterprise Manager for Oracle Database
  • Oracle Enterprise Manager for Virtualization
  • Oracle Financial Services Analytical Applications Infrastructure
  • Oracle Financial Services Behavior Detection Platform
  • Oracle Financial Services Trade-Based Anti Money Laundering Enterprise Edition
  • Oracle Global Lifecycle Management NextGen OUI Framework
  • Oracle Global Lifecycle Management OPatch
  • Oracle Global Lifecycle Management OPatchAuto
  • Oracle GoldenGate Big Data and Application Adapters
  • Oracle Health Sciences Information Manager
  • This is an extract. The publication continues at the source.

    Source: Canadian Centre for Cyber Security. Licence

    Read the original at the source: https://cyber.gc.ca/en/alerts-advisories/oracle-corporation-security-advisory-av26-1071

    Officially imported this from Canadian Centre for Cyber Security’s own source and shows an extract. If you work there, claiming the profile and verifying the domain lets you choose to show the full text here.

    This publication has changed since it was first published

    2 versions recorded. The original is kept in full — nothing is overwritten.

    1. v2 imported change on current
    2. v1 as first published on Titled: “Oracle Corporation security advisory (AV26-1071)”

    Provenance

    Organization
    Canadian Centre for Cyber Security — imported from official source
    Official source
    https://www.cyber.gc.ca/api/cccs/rss/v1/get?feed=alerts_advisories&lang=en ATOM
    Imported
    October 21, 2026 19:00
    Versions
    2 recorded
    Identity
    https://cyber.gc.ca/en/alerts-advisories/oracle-corporation-security-advisory-av26-1071

    Officially records where a publication came from, not whether it is true. Imported records are reproduced from an organization's own official source.