CVE-2026-83025

Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via TCP to compromise Oracle...

CVE-2026-87264

CVE-2026-87264 affects the Integration Broker component of Oracle PeopleSoft Enterprise PeopleTools , versions 8.61 through 8.63 . The vulnerability is exploitable over the network via HTTP by a low-privileged attacker without user interaction, resulting in unauthorized creation, deletion, or mod...

CVE-2026-87262

CVE-2026-87262 affects the Engineering Communication Interface component of Oracle Agile Engineering Data Management (Oracle Supply Chain), version 6.2.1 . An unauthenticated attacker with access to the adjacent physical communication segment can exploit this with low complexity to achieve high c...

EUVD-2026-79850

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion component: Security. The supported version that is affected is 11.2.26.0.000. Difficult to exploit vulnerability allows unauthenticated attacker with network access via TLS to compromise Oracle Hyperion Financial...

CVE-2026-87175

Oracle Hyperion Financial Management version 11.2.26.0.000 has a vulnerability in its Security component. An unauthenticated attacker with network access via TCP can exploit this easily (no user interaction, low complexity) to gain unauthorized read and write access to critical data, resulting in...

EUVD-2026-79826

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion component: Security. The supported version that is affected is 11.2.26.0.000. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle Hyperion Financi...

CVE-2026-87171

CVE-2026-87171 affects the Security component of Oracle Hyperion Financial Management , version 11.2.26.0.000 . An unauthenticated attacker with network access via HTTPS can exploit this vulnerability, though the attack complexity is rated high (difficult to exploit). The scope is changed , meani...

EUVD-2026-79821

Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite component: Other issue. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Purchasing. Successful attac...

CVE-2026-87160

Oracle HRMS (India) , a module of Oracle E-Business Suite (component: Internal Operations ), is affected in supported versions 12.2.3 through 12.2.15 . An easily exploitable vulnerability allows a low-privileged attacker with network access via HTTPS to compromise the application. Successful expl...

CVE-2026-87153

CVE-2026-87153 is a vulnerability in the Oracle Product Hub product of Oracle E-Business Suite , specifically in the Internal Operations component. Supported versions 12.2.3 through 12.2.15 are affected. An easily exploitable flaw allows a low-privileged attacker with network access via HTTP to c...

EUVD-2026-79798

Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion component: Access and security. The supported version that is affected is 11.2.26.0.000. Difficult to exploit vulnerability allows unauthenticated attacker with network access via TCP to compromise Oracle...

CVE-2026-87143

Oracle Hyperion Data Relationship Management (component: Access and security ), version 11.2.26.0.000 , is affected by a vulnerability that allows an unauthenticated attacker with network access via TCP to compromise the product. The attack complexity is rated high (CVSS 3.1: 7.4 , AV:N/AC:H/PR:N...

EUVD-2026-79790

Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion component: Access and security. The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

EUVD-2026-79786

Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion component: Access and security. The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

EUVD-2026-79784

Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion component: Access and security. The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

CVE-2026-87129

Oracle Hyperion Data Relationship Management (version 11.2.26.0.000 ) has a vulnerability in the Access and security component that allows an unauthenticated attacker with network access via HTTP to compromise the system. Successful exploitation can result in unauthorized creation, deletion, or m...

CVE-2026-83460

CVE-2026-83460 affects the LRA component of Oracle Helidon (part of Oracle Fusion Middleware), versions 4.0.0 through 4.5.4 . The vulnerability is an easily exploitable flaw allowing an unauthenticated attacker with network access via HTTP to compromise the service. Successful exploitation can re...

CVE-2026-83438

CVE-2026-83438 affects the Oracle Engineering product (component: Internal Operations ) of Oracle E-Business Suite, versions 12.2.3 through 12.2.15 . A low-privileged attacker with network access via HTTP can exploit this vulnerability, which is rated CVSS 3.1 8.2 (HIGH) with a scope change , mea...

EUVD-2026-79726

Vulnerability in the Oracle Demand Signal Repository product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Demand...

EUVD-2026-79718

Vulnerability in the Oracle Communications Cloud Native Core Security Edge Protection Proxy product of Oracle Communications component: SEPP. Supported versions that are affected are 26.1.200 and 25.2.201. Easily exploitable vulnerability allows unauthenticated attacker with access to the physica...