EUVD-2026-79798

Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion component: Access and security. The supported version that is affected is 11.2.26.0.000. Difficult to exploit vulnerability allows unauthenticated attacker with network access via TCP to compromise Oracle...

CVE-2026-87141

CVE-2026-87141 affects the Access and security component of Oracle Hyperion Data Relationship Management (version 11.2.26.0.000 ). A low-privileged attacker with network access via HTTP can exploit this vulnerability, which carries a scope change —meaning attacks may significantly impact addition...

EUVD-2026-79792

Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion component: Access and security. The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

CVE-2026-87134

Oracle Hyperion Data Relationship Management (component: Access and security ) in version 11.2.26.0.000 is affected by a vulnerability allowing a low-privileged attacker with network access via TCP to gain unauthorized access to critical or complete data accessible by the product. The vulnerabili...

EUVD-2026-79789

Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion component: Access and security. The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows low privileged attacker with network access via TCP to compromise Oracle...

EUVD-2026-79786

Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion component: Access and security. The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

CVE-2026-83491

Oracle iRecruitment (component: Internal Operations ) in Oracle E-Business Suite versions 12.2.3 through 12.2.15 is affected by a vulnerability that allows an unauthenticated attacker with access to the adjacent physical communication segment to compromise the product. The attack vector is adjace...

EUVD-2026-79770

Vulnerability in the Oracle Advanced Benefits product of Oracle E-Business Suite component: Self-serv What-if Analysis. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle...

EUVD-2026-79771

Vulnerability in the Oracle US Federal Human Resources product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle US...

EUVD-2026-79763

Vulnerability in the Oracle Mobile Application Server product of Oracle E-Business Suite component: MWA Terminal Server. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via TCP to compromise Oracle...

CVE-2026-83477

Oracle E-Business Suite (component: Work in Process – Workbenches ) is affected by an easily exploitable vulnerability in supported versions 12.2.3 through 12.2.15 . An unauthenticated attacker with access to the adjacent network segment can compromise the product with low complexity and no user ...

EUVD-2026-79765

Vulnerability in the Oracle Work in Process product of Oracle E-Business Suite component: Workbenches. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with access to the physical communication segment attached to the hardwa...

CVE-2026-83464

Oracle Mobile Application Server (component: MWA Terminal Server ), part of Oracle E-Business Suite, is affected in versions 12.2.3 through 12.2.15 . A difficult-to-exploit vulnerability allows an unauthenticated attacker with network access via TCP to achieve full takeover of the server, with hi...

CVE-2026-83462

Oracle Mobile Application Server (component: MWA Terminal Server ) in Oracle E-Business Suite versions 12.2.3 through 12.2.15 is affected by an easily exploitable vulnerability that allows an unauthenticated attacker with network access via TCP to achieve full takeover of the server, impacting co...

EUVD-2026-79760

Vulnerability in the Oracle Mobile Application Server product of Oracle E-Business Suite component: MWA Terminal Server. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via TCP to compromise Oracle Mobil...

CVE-2026-83463

Oracle Mobile Application Server (MWA Terminal Server component of Oracle E-Business Suite , versions 12.2.3–12.2.15) is affected by a vulnerability that allows an unauthenticated attacker with access to the adjacent physical communication segment to achieve full takeover of the server, impacting...

EUVD-2026-79744

Vulnerability in the Oracle Financials Common Modules product of Oracle E-Business Suite component: Common Components. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

EUVD-2026-79743

Vulnerability in the Oracle Complex Maintenance, Repair and Overhaul product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTPS to...

CVE-2026-83445

CVE-2026-83445 affects the Oracle Complex Maintenance, Repair and Overhaul module (component: Internal Operations) within Oracle E-Business Suite , versions 12.2.3 through 12.2.15 . The vulnerability is described as easily exploitable by a low-privileged attacker with network access over HTTPS , ...

CVE-2026-83438

CVE-2026-83438 affects the Oracle Engineering product (component: Internal Operations ) of Oracle E-Business Suite, versions 12.2.3 through 12.2.15 . A low-privileged attacker with network access via HTTP can exploit this vulnerability, which is rated CVSS 3.1 8.2 (HIGH) with a scope change , mea...