CVE-2026-87177

Oracle Hyperion Financial Management version 11.2.26.0.000 is affected by a vulnerability in its Security component. A low-privileged attacker with network access via HTTP can exploit this with low complexity and no user interaction. Due to scope change , attacks may significantly impact addition...

CVE-2026-87172

A critical vulnerability (CVSS 9.9) in the Security component of Oracle Hyperion Financial Management 11.2.26.0.000 allows a low-privileged attacker with network access via HTTP to achieve a full takeover of the product. The scope change (S:C) indicates that successful exploitation may also signi...

EUVD-2026-79827

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion component: Security. The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hyperion Financial...

CVE-2026-87167

CVE-2026-87167 affects Oracle Purchasing (component: G-Invoicing ) in Oracle E-Business Suite , versions 12.2.11 through 12.2.15 . The vulnerability is exploitable over the network via HTTP by a low-privileged attacker with no user interaction, allowing unauthorized creation, deletion, or modific...

CVE-2026-87166

Oracle Purchasing in Oracle E-Business Suite (component: "Other issue") is affected by a vulnerability in supported versions 12.2.3 through 12.2.15 . The flaw allows a low-privileged attacker with network access via HTTP and no user interaction to compromise the product. Successful exploitation c...

EUVD-2026-79821

Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite component: Other issue. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Purchasing. Successful attac...

EUVD-2026-79822

Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite component: G-Invoicing. Supported versions that are affected are 12.2.11-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Purchasing. Successful...

CVE-2026-87168

A vulnerability in the Oracle Purchasing product of Oracle E-Business Suite (component: G-Invoicing ) affects supported versions 12.2.10 through 12.2.15 . A low-privileged attacker with network access via HTTP can exploit this vulnerability with low complexity and no user interaction. Successful ...

EUVD-2026-79823

Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite component: G-Invoicing. Supported versions that are affected are 12.2.10-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Purchasing. Successful...

EUVD-2026-79820

Vulnerability in the Oracle Contract Lifecycle Management for Public Sector product of Oracle E-Business Suite component: ECC For Award and IDV. The supported version that is affected is V16. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromis...

EUVD-2026-79819

Vulnerability in the Oracle Banking Branch product of Oracle Financial Services Applications component: Reports. Supported versions that are affected are 14.5.0.0.0-14.9.0.0.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

CVE-2026-87165

CVE-2026-87165 affects Oracle Contract Lifecycle Management for Public Sector (component: ECC For Award and IDV ), version 16 . An easily exploitable vulnerability allows a low-privileged attacker with network access via HTTP to compromise the product, potentially resulting in full takeover with ...

CVE-2026-87163

Oracle E-Business Suite 's Oracle Purchasing module is affected by a vulnerability (component listed as "Other issue") in supported versions 12.2.3 through 12.2.15 . A low-privileged attacker with network access via HTTP can exploit this with low complexity and no user interaction to achieve a fu...

CVE-2026-87162

Oracle Contract Lifecycle Management for Public Sector (part of Oracle E-Business Suite, component Award/PO ) in versions 12.2.13 through 12.2.15 is affected by an easily exploitable vulnerability. A low-privileged attacker with network access via HTTP can compromise the product, resulting in a f...

CVE-2026-87161

Oracle HRMS (India) , a component of Oracle E-Business Suite (Internal Operations), is affected in supported versions 12.2.3 through 12.2.15 . An easily exploitable vulnerability allows a low-privileged attacker with network access via HTTP to compromise the product. Due to scope change , attacks...

EUVD-2026-79818

Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite component: Other issue. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Purchasing. Successful attac...

CVE-2026-87160

Oracle HRMS (India) , a module of Oracle E-Business Suite (component: Internal Operations ), is affected in supported versions 12.2.3 through 12.2.15 . An easily exploitable vulnerability allows a low-privileged attacker with network access via HTTPS to compromise the application. Successful expl...

EUVD-2026-79814

Vulnerability in the Oracle HRMS India product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle HRMS India. Successf...

CVE-2026-87158

Oracle E-Business Suite – Order Management (Enterprise Command Center) in version V16 is affected by a network-based vulnerability exploitable via HTTP by a low-privileged attacker . The attack requires no user interaction and has low complexity , making it easily exploitable. Successful exploita...

EUVD-2026-79813

Vulnerability in the Oracle Order Management product of Oracle E-Business Suite component: Enterprise Command Center. The supported version that is affected is V16. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Order Management...