Known Vulnerabilities for Sun Role Manager by Oracle
Listed below are 2 of the newest known vulnerabilities associated with "Sun Role Manager" by "Oracle".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-118193 json | The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to Privilege Escalation in all ver... | Not Provided | 2026-11-05 | 2026-11-05 |
| CVE-2026-118045 json | The Ever Accounting WordPress plugin before 2.3.3 does not restrict the file path supplied to its CSV import routine to an a... | Not Provided | 2026-11-06 | 2026-11-06 |
| CVE-2026-117466 json | In affected versions of Octopus Server, a user holding the System Manager role could escalate their privileges to full system... | Not Provided | 2026-10-27 | 2026-11-04 |
| CVE-2026-114233 json | Incorrect Privilege Assignment in the Order Manager in Apache OFBiz 24.09 before 24.09.08 on all platforms allows an authen... | Not Provided | 2026-11-05 | 2026-11-05 |
| CVE-2026-111593 json | Rejected reason: This CVE ID was reserved for a reported issue in the PDF Invoices & Packing Slips for WooCommerce WordPress ... | Not Provided | 2026-10-16 | 2026-10-16 |
| CVE-2026-111106 json | The Mail Mint plugin for WordPress is vulnerable to SQL Injection via the 'filters' parameter of the /wp-json/mrm/v1/segments... | Not Provided | 2026-10-16 | 2026-10-16 |
| CVE-2026-110523 json | The WP User Manager WordPress plugin before 2.9.26 does not keep its paid-registration capability restrictions in force once... | Not Provided | 2026-10-21 | 2026-10-21 |
| CVE-2026-109145 json | The User Rights Access Manager WordPress plugin through 1.1.3 does not restrict access to one of its AJAX account-registratio... | Not Provided | 2026-10-15 | 2026-10-15 |
| CVE-2026-108114 json | Strapi 5.47.0 through 5.57.0 contains an improper authorization vulnerability that allows admin API tokens to retain all-fiel... | Not Provided | 2026-10-10 | 2026-10-14 |
| CVE-2026-105769 json | kaniko before 1.25.20 can send a Microsoft Entra ID (Azure AD) access token for Azure Resource Manager to an attacker-control... | Not Provided | 2026-11-02 | 2026-11-02 |