CVE-2026-87166

Oracle Purchasing in Oracle E-Business Suite (component: "Other issue") is affected by a vulnerability in supported versions 12.2.3 through 12.2.15 . The flaw allows a low-privileged attacker with network access via HTTP and no user interaction to compromise the product. Successful exploitation c...

CVE-2026-87160

Oracle HRMS (India) , a module of Oracle E-Business Suite (component: Internal Operations ), is affected in supported versions 12.2.3 through 12.2.15 . An easily exploitable vulnerability allows a low-privileged attacker with network access via HTTPS to compromise the application. Successful expl...

CVE-2026-87153

CVE-2026-87153 is a vulnerability in the Oracle Product Hub product of Oracle E-Business Suite , specifically in the Internal Operations component. Supported versions 12.2.3 through 12.2.15 are affected. An easily exploitable flaw allows a low-privileged attacker with network access via HTTP to c...

EUVD-2026-79806

Vulnerability in the Oracle Bills of Material product of Oracle E-Business Suite component: Setup Workbench. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Bills of Material...

CVE-2026-87143

Oracle Hyperion Data Relationship Management (component: Access and security ), version 11.2.26.0.000 , is affected by a vulnerability that allows an unauthenticated attacker with network access via TCP to compromise the product. The attack complexity is rated high (CVSS 3.1: 7.4 , AV:N/AC:H/PR:N...

EUVD-2026-79798

Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion component: Access and security. The supported version that is affected is 11.2.26.0.000. Difficult to exploit vulnerability allows unauthenticated attacker with network access via TCP to compromise Oracle...

CVE-2026-87134

Oracle Hyperion Data Relationship Management (component: Access and security ) in version 11.2.26.0.000 is affected by a vulnerability allowing a low-privileged attacker with network access via TCP to gain unauthorized access to critical or complete data accessible by the product. The vulnerabili...

EUVD-2026-79790

Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion component: Access and security. The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

EUVD-2026-79789

Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion component: Access and security. The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows low privileged attacker with network access via TCP to compromise Oracle...

CVE-2026-87133

Oracle Hyperion Data Relationship Management (component: Access and security ) version 11.2.26.0.000 is affected by an easily exploitable vulnerability reachable via network access over HTTP by a high-privileged attacker with no user interaction. Successful exploitation results in unauthorized ac...

EUVD-2026-79787

Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion component: Access and security. The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

EUVD-2026-79786

Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion component: Access and security. The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

EUVD-2026-79784

Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion component: Access and security. The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

CVE-2026-87129

Oracle Hyperion Data Relationship Management (version 11.2.26.0.000 ) has a vulnerability in the Access and security component that allows an unauthenticated attacker with network access via HTTP to compromise the system. Successful exploitation can result in unauthorized creation, deletion, or m...

CVE-2026-87124

Oracle iRecruitment (component: Internal Operations ) in Oracle E-Business Suite versions 12.2.3 through 12.2.15 is affected by a network-accessible vulnerability exploitable over HTTP by a low-privileged attacker . The vulnerability carries a scope change , meaning attacks may significantly impa...

CVE-2026-83486

CVE-2026-83486 affects the Item Catalog component of Oracle Product Hub within Oracle E-Business Suite , versions 12.2.3 through 12.2.15 . A low-privileged attacker with network access via HTTP can exploit this vulnerability to gain unauthorized access to critical data or complete access to all O...

EUVD-2026-79774

Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite component: Item Catalog. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Product Hub. While the...

CVE-2026-83460

CVE-2026-83460 affects the LRA component of Oracle Helidon (part of Oracle Fusion Middleware), versions 4.0.0 through 4.5.4 . The vulnerability is an easily exploitable flaw allowing an unauthenticated attacker with network access via HTTP to compromise the service. Successful exploitation can re...

CVE-2026-83455

Oracle Demand Signal Repository (component: Internal Operations ) in Oracle E-Business Suite , versions 12.2.3 through 12.2.15 , is vulnerable to an easily exploitable flaw reachable via HTTP by a low-privileged network attacker. Successful exploitation can lead to unauthorized creation, deletion...

CVE-2026-83447

CVE-2026-83447 affects the Oracle Bills of Material product within Oracle E-Business Suite (component: Internal Operations ), versions 12.2.3 through 12.2.15 . An easily exploitable vulnerability allows a low-privileged attacker with network access via HTTP to compromise the component. Successful...