CVE-2026-87131

A vulnerability in the Access and security component of Oracle Hyperion Data Relationship Management (version 11.2.26.0.000 ) allows a low-privileged attacker with network access via HTTP to compromise the product. The attack requires human interaction and involves a scope change , meaning it can...

CVE-2026-87127

CVE-2026-87127 affects the G-Invoicing component of Oracle Purchasing in Oracle E-Business Suite, versions 12.2.10 through 12.2.15 . The vulnerability is easily exploitable by a low-privileged attacker with network access via HTTP . Although the flaw resides in Oracle Purchasing, the changed scop...

EUVD-2026-79779

Vulnerability in the Oracle iRecruitment product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle iRecruitment. Whil...

EUVD-2026-79780

Vulnerability in the Oracle Financials for Asia/Pacific product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.8-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

CVE-2026-87125

Oracle Financials for Asia/Pacific (component: Internal Operations ) within Oracle E-Business Suite versions 12.2.8–12.2.15 contains a vulnerability exploitable by a low-privileged attacker over HTTP with no user interaction required. Successful exploitation allows unauthorized creation, deletion...

CVE-2026-87124

Oracle iRecruitment (component: Internal Operations ) in Oracle E-Business Suite versions 12.2.3 through 12.2.15 is affected by a network-accessible vulnerability exploitable over HTTP by a low-privileged attacker . The vulnerability carries a scope change , meaning attacks may significantly impa...

CVE-2026-87126

Oracle Report Manager (component: Reports Security ) in Oracle E-Business Suite versions 12.2.3 through 12.2.15 contains a network-exploitable vulnerability accessible via HTTP. A low-privileged attacker with network access can compromise the component, resulting in unauthorized access to critica...

EUVD-2026-79781

Vulnerability in the Oracle Report Manager product of Oracle E-Business Suite component: Reports Security. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Report Manager...

CVE-2026-83490

CVE-2026-83490 affects the Oracle iRecruitment product (component: Internal Operations) of Oracle E-Business Suite , versions 12.2.3 through 12.2.15 . A low-privileged attacker with network access via HTTP can exploit this vulnerability, which carries a scope change —meaning the attack may signif...

EUVD-2026-79777

Vulnerability in the Oracle iRecruitment product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle iRecruitment. Whil...

CVE-2026-83489

This vulnerability affects Oracle Banking Origination (Oracle Financial Services Applications), specifically the Onboarding Batch Processes component, in supported versions 14.5.0.0.0 through 14.9.0.0.0 . A low-privileged attacker with network access via HTTP can exploit this vulnerability, which...

CVE-2026-83487

Oracle Product Hub (component: Item Catalog ) in Oracle E-Business Suite versions 12.2.3 through 12.2.15 is affected by a vulnerability that allows a low-privileged attacker with network access via HTTP to gain unauthorized access to critical data or complete access to all Oracle Product Hub acce...

CVE-2026-83486

CVE-2026-83486 affects the Item Catalog component of Oracle Product Hub within Oracle E-Business Suite , versions 12.2.3 through 12.2.15 . A low-privileged attacker with network access via HTTP can exploit this vulnerability to gain unauthorized access to critical data or complete access to all O...

EUVD-2026-79775

Vulnerability in the Helidon product of Oracle Fusion Middleware component: helidon-microprofile-security. Supported versions that are affected are 4.0.0-4.5.4. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Helidon. Successful attacks o...

EUVD-2026-79773

Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite component: Item Catalog. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Product Hub. While the...

EUVD-2026-79774

Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite component: Item Catalog. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Product Hub. While the...

EUVD-2026-79772

Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite component: Item Catalog. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Product Hub. While the...

EUVD-2026-79771

Vulnerability in the Oracle US Federal Human Resources product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle US...

CVE-2026-83479

Oracle Contracts (component: Internal Operations) in Oracle E-Business Suite versions 12.2.14–12.2.15 contains a vulnerability that allows a low-privileged attacker with network access via HTTP to achieve a takeover of the product, with high impact on confidentiality, integrity, and availability....

CVE-2026-83457

CVE-2026-83457 affects the Oracle Demand Signal Repository product within Oracle E-Business Suite (component: Internal Operations ), versions 12.2.3 through 12.2.15 . A low-privileged attacker with network access via HTTP can exploit this vulnerability with low complexity and no user interaction....