CVE-2026-87296

A vulnerability exists in the Authentication Engine component of Oracle Access Manager within Oracle Fusion Middleware . Affected versions include 12.2.1.4.0 and 14.1.2.1.0 . An unauthenticated attacker with network access via HTTP can exploit this vulnerability to compromise Oracle Access Manage...

CVE-2026-87295

A vulnerability exists in the Oracle HRMS (India) product within the Oracle E-Business Suite (specifically the Indian Payroll component). Affected versions include 12.2.3-12.2.15 . A low-privileged attacker with access to the infrastructure where the product executes can exploit this vulnerabilit...

CVE-2026-87292

A vulnerability exists in the Networking component of Oracle Java SE , Oracle GraalVM for JDK , and Oracle GraalVM Enterprise Edition . Affected versions include Oracle Java SE (8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27), Oracle GraalVM for JDK (17.0.20.1, 21.0.12.1), and O...

CVE-2026-87293

A vulnerability exists in the RMI component of Oracle Java SE (specifically versions 8u503 and 8u503-perf ) and Oracle GraalVM Enterprise Edition (version 21.3.19.1.1 ). An unauthenticated attacker with network access can exploit this vulnerability by supplying data to APIs within the RMI compone...

CVE-2026-87294

A vulnerability exists in the Security component of Oracle Java SE , Oracle GraalVM for JDK , and Oracle GraalVM Enterprise Edition . Affected versions include Oracle Java SE 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, and 27; Oracle GraalVM for JDK 17.0.20.1 and 21.0.12.1; and ...

CVE-2026-87290

A vulnerability exists in the JAXP component of Oracle Java SE , Oracle GraalVM for JDK , and Oracle GraalVM Enterprise Edition . Affected versions include Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27 ; Oracle GraalVM for JDK: 17.0.20.1, 21.0.12.1 ; and Oracle ...

CVE-2026-87291

A vulnerability exists in the Networking component of Oracle Java SE (affected versions: 21.0.12.1, 25.0.4.1, and 27). An unauthenticated attacker with network access via multiple protocols can exploit this flaw to gain unauthorized read access to a subset of accessible data. Exploitation occurs ...

CVE-2026-87251

The Oracle Access Manager product of Oracle Fusion Middleware is affected by a vulnerability in the Authentication Engine component. This issue impacts versions 12.2.1.4.0 and 14.1.2.1.0 . An unauthenticated attacker with network access via SAML can easily exploit this vulnerability to compromise...

CVE-2026-87255

A vulnerability exists in the Compiler component of Oracle Java SE versions 25.0.4.1 and 27 . An unauthenticated attacker with network access via multiple protocols can exploit this vulnerability by supplying data to specific APIs—excluding Untrusted Java Web Start applications or applets (e.g., ...

CVE-2026-83426

A vulnerability exists in the Authentication Engine component of Oracle Access Manager (part of Oracle Fusion Middleware) affecting versions 12.2.1.4.0 and 14.1.2.1.0 . An unauthenticated attacker with network access via HTTP can exploit this difficult-to-exploit vulnerability to compromise the s...

CVE-2026-83409

A vulnerability exists in the Oracle Access Manager product (component: Authentication Engine ) within Oracle Fusion Middleware . Affected versions include 12.2.1.4.0 and 14.1.2.0.0 . A difficult-to-exploit flaw allows an unauthenticated attacker with network access via SAML to compromise the pro...

CVE-2026-83404

A vulnerability exists in the Connector/Python component of the Oracle MySQL Connectors product (affected version 26.7.0 ). This easily exploitable flaw allows an unauthenticated attacker with network access via multiple protocols to compromise the connectors. Successful exploitation can lead to ...

CVE-2026-83407

A vulnerability exists in the Authentication Engine component of Oracle Access Manager (part of Oracle Fusion Middleware). The issue affects supported versions 12.2.1.4.0 and 14.1.2.0.0 . An unauthenticated attacker with network access via HTTP can easily exploit this flaw to compromise the produ...

CVE-2026-83401

The Oracle Identity Manager product within Oracle Fusion Middleware is affected by a vulnerability in the OIM Legacy UI component, specifically in versions 12.2.1.4.0 and 14.1.2.1.0 . An unauthenticated attacker with network access via HTTP can compromise the system, provided they can elicit nece...

CVE-2026-83394

A vulnerability exists in the Internal Operations component of the Oracle Demand Planning product within Oracle Supply Chain. Affected versions include 12.1 and 12.2 . A low-privileged attacker with network access via HTTP can compromise Oracle Demand Planning, though the attack requires human in...

CVE-2026-83395

A vulnerability exists in the Networking component of Oracle Java SE , Oracle GraalVM for JDK , and Oracle GraalVM Enterprise Edition . Affected versions include Oracle Java SE 8u503, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, and 27; GraalVM for JDK 17.0.20.1 and 21.0.12.1; and GraalVM Enterpris...

CVE-2026-83392

The Oracle Applications Manager product within Oracle E-Business Suite (specifically the Diagnostics component) is affected by a vulnerability in supported versions 12.2.3-12.2.15 . A low-privileged attacker with network access via HTTP can exploit this difficult-to-exploit vulnerability to compr...

CVE-2026-83391

The Oracle E-Business Suite product Oracle HRMS (US) , specifically within the US Payroll Year End component, is affected by a vulnerability in versions 12.2.3-12.2.15 . A low-privileged attacker with network access via HTTP can exploit this flaw to compromise the system, though it requires human...

CVE-2026-83390

A vulnerability exists in the Diagnostics component of the Oracle Applications Manager product within Oracle E-Business Suite , affecting supported versions 12.2.3-12.2.15 . A low-privileged attacker with network access via HTTP can exploit this difficult-to-exploit vulnerability to compromise Or...

CVE-2026-83389

The Oracle E-Business Suite product Oracle HRMS (UK) (component: Internal Operations ) is vulnerable in supported versions 12.2.3-12.2.15 . A low-privileged attacker with network access via HTTP can exploit this vulnerability to compromise the system. Successful exploitation requires human intera...