CVE-2026-83375

The Oracle PeopleSoft Enterprise HCM Human Resources product (component: Administer Workforce ) is affected by a high-complexity vulnerability in version 9.2 . A high-privileged attacker with network access via HTTP can compromise the system, but the attack requires human interaction from a third...

CVE-2026-83366

A vulnerability exists in the Workflow Events component of the Oracle Shipping Execution product within Oracle E-Business Suite (versions 12.2.3-12.2.15 ). An unauthenticated attacker with network access via HTTP can exploit this difficult-to-exploit vulnerability to compromise Oracle Shipping Ex...

CVE-2026-70869

A vulnerability exists in the Integration Broker component of Oracle PeopleSoft (PeopleSoft Enterprise PeopleTools), affecting supported versions 8.61-8.63 . This flaw allows an unauthenticated attacker with network access via HTTP to compromise the system. While the vulnerability is difficult to...

CVE-2026-60968

A vulnerability exists in the Updates Environment Mgmt component of Oracle PeopleSoft Enterprise PeopleTools (affected versions 8.61-8.63 ). A high privileged attacker with access to the underlying infrastructure can exploit this issue to compromise the software. Successful exploitation may lead ...

CVE-2026-70860

Oracle PeopleSoft PeopleSoft Enterprise FIN Common Objects Argentina (specifically the eProcurement component) version 9.1 is affected by a difficult to exploit vulnerability. A low-privileged attacker with network access via HTTP could compromise the system, potentially gaining unauthorized crea...

CVE-2026-60887

A vulnerability exists in the Data Mover component of Oracle PeopleSoft Enterprise PeopleTools (affected versions 8.61-8.63 ). A high-privileged attacker with access to the infrastructure can exploit this issue, though it is difficult to execute and requires human interaction from another person....

CVE-2026-60876

The PeopleSoft Enterprise PeopleTools product, specifically the Search Framework component in version 8.62 , is affected by a vulnerability that allows an unauthenticated attacker with network access via HTTP to compromise the system. This is considered a difficult-to-exploit vulnerability as it ...

CVE-2026-60839

A vulnerability exists in the Query component of Oracle PeopleSoft Enterprise PeopleTools (affected versions 8.61 and 8.62 ). A high-privileged attacker with network access via HTTP can exploit this flaw to cause a complete denial of service (DoS) by triggering a hang or repeatable crash. Additio...

CVE-2026-60745

Oracle PeopleSoft Enterprise PeopleTools (component: Application Server - JRE ) is affected by a vulnerability in versions 8.61-8.63 . A high-privileged attacker with access to the infrastructure where PeopleSoft Enterprise PeopleTools executes can exploit this flaw to compromise the system. Succ...

CVE-2026-101850

A vulnerability exists in the Installed Base product of Oracle E-Business Suite (component: HTML UI ) affecting supported versions 12.2.3-12.2.15 . An unauthenticated attacker with network access via HTTP can exploit this vulnerability to compromise Installed Base, although successful attacks req...

CVE-2026-101835

A vulnerability exists in the Workflow Events component of the Oracle Shipping Execution product within Oracle E-Business Suite (versions 12.2.3-12.2.15 ). An unauthenticated attacker with network access via HTTP can easily exploit this flaw to compromise the product. Successful exploitation may ...

CVE-2026-101837

A vulnerability exists in the Workflow Events component of the Oracle Shipping Execution product within Oracle E-Business Suite (affected versions 12.2.3-12.2.15 ). A low-privileged attacker with network access via HTTP can exploit this difficult-to-exploit flaw to compromise the product, potenti...

CVE-2026-101829

The Oracle Mobile Application Server product of Oracle E-Business Suite (specifically the MWA Terminal Server component) is affected by a vulnerability in versions 12.2.3-12.2.15 . This issue allows an unauthenticated attacker with network access via HTTP to compromise the server. Successful expl...

CVE-2026-101827

A vulnerability exists in the Oracle HCM Common Architecture product of Oracle E-Business Suite (specifically the Internal Operations component). This issue affects supported versions 12.2.3 through 12.2.15 . A low-privileged attacker with network access via HTTP can exploit this difficult-to-exp...

CVE-2026-101822

A vulnerability exists in the Internal Operations component of the Oracle Bills of Material product within Oracle E-Business Suite (versions 12.2.3-12.2.15). A high-privileged attacker with network access via HTTP can exploit this difficult-to-exploit flaw to compromise the product. Successful ex...

CVE-2026-101815

A vulnerability exists in the Assets product of Oracle E-Business Suite (component: Internal Operations ) affecting supported versions 12.2.3-12.2.15 . A low-privileged attacker with network access via HTTP can exploit this flaw to cause a complete DOS (hang or repeatable crash), perform unauthor...

CVE-2026-101807

A vulnerability exists in the BRM Server component of Oracle Communications Billing and Revenue Management affecting versions 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0, and 15.2.0.0.0 . An unauthenticated attacker with network access via HTTP can exploit this difficult-to-exploit flaw to compromise the ...

CVE-2026-101803

A vulnerability exists in the XML component of Oracle MySQL Server and MySQL Cluster . Affected versions of MySQL Server include 8.4.0-8.4.12 , 9.7.0-9.7.3 , and 26.7.0-26.7.1 , while MySQL Cluster affects versions 8.0.0-8.0.49 , 8.4.0-8.4.12 , 9.7.0-9.7.3 , and 26.7.0-26.7.1 . A high privileged ...

CVE-2026-101803

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL component: Server: XML. Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and 26.7.0-26.7.1. Easily exploitable...

CVE-2026-101800

A vulnerability exists in the MySQL Server and MySQL Cluster products of Oracle MySQL (component: Server: Security: Privileges ). The issue affects MySQL Server versions 8.4.0-8.4.12, 9.7.0-9.7.3, and 26.7.0-26.7.1, as well as MySQL Cluster versions 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3, and 26...