CVE-2026-87393

A vulnerability exists in the Outside In Core component of the Oracle Outside In Technology product (version 8.5.8 ) within Oracle Fusion Middleware . An unauthenticated attacker with network access via HTTP can exploit this flaw to cause a hang or a frequently repeatable crash , leading to a com...

CVE-2026-87391

The Oracle Fusion Middleware product WebCenter Content: Imaging (specifically the Core component) is affected by a vulnerability in versions 12.2.1.4.0 and 14.1.2.0.0 . A high privileged attacker with local access to the infrastructure can exploit this flaw to compromise the product, provided the...

CVE-2026-87378

A vulnerability exists in the Core component of Oracle Fusion Middleware 's WebCenter Content: Imaging product, specifically affecting versions 12.2.1.4.0 and 14.1.2.0.0 . A low-privileged attacker with network access via HTTP can exploit this flaw to compromise the system, potentially gaining un...

CVE-2026-87379

A vulnerability exists in the WebCenter Content: Imaging product of Oracle Fusion Middleware (component: Core ), specifically affecting versions 12.2.1.4.0 and 14.1.2.0.0 . A low-privileged attacker with network access via SOAP can exploit this flaw to compromise the system, potentially resulting...

CVE-2026-87375

A vulnerability exists in the WebCenter Content: Imaging product of Oracle Fusion Middleware (component: Core ) affecting versions 12.2.1.4.0 and 14.1.2.0.0 . A low-privileged attacker with network access via HTTP can exploit this flaw to compromise the system, potentially resulting in unauthoriz...

CVE-2026-87376

The WebCenter Content: Imaging product of Oracle Fusion Middleware (component: Core ) is affected by a vulnerability in version 14.1.2.0.0 . A low-privileged attacker with network access via HTTP can exploit this difficult-to-exploit flaw to compromise the system. Successful exploitation may lead...

CVE-2026-87377

The WebCenter Content: Imaging product of Oracle Fusion Middleware (specifically the Core component) is affected by a vulnerability in version 14.1.2.0.0 . This issue allows a low-privileged attacker with network access via SOAP to compromise the product. Successful exploitation can lead to unaut...

CVE-2026-87369

A vulnerability exists in the Oracle Service Bus product of Oracle Fusion Middleware (component: Core ), affecting supported versions 12.2.1.4.0 and 14.1.2.0.0 . An unauthenticated attacker with network access via HTTP can easily exploit this flaw to cause a hang or a frequently repeatable crash,...

CVE-2026-87370

A vulnerability exists in the Oracle WebCenter Content product (component: Content Server ) within Oracle Fusion Middleware , specifically affecting versions 12.2.1.4.0 and 14.1.2.0.0 . A low-privileged attacker with network access via HTTP can exploit this difficult-to-exploit vulnerability to c...

CVE-2026-87359

A vulnerability exists in the Oracle Service Bus product of Oracle Fusion Middleware (component: Core ), specifically affecting versions 12.2.1.4.0 and 14.1.2.0.0 . A low-privileged attacker with network access via HTTP can easily exploit this vulnerability to compromise the Oracle Service Bus, p...

CVE-2026-87347

A vulnerability exists in the Oracle HTTP Server product of Oracle Fusion Middleware , specifically within the OSSL Module . Affected versions include 12.2.1.4.0 and 14.1.2.0.0 . A low-privileged attacker with network access via HTTP can exploit this flaw to compromise the server, potentially gai...

CVE-2026-87346

The Oracle HTTP Server product within Oracle Fusion Middleware (specifically the Oracle Weblogic Server Proxy Plug-in for Oracle HTTP Server component) is vulnerable in versions 12.2.1.4.0 and 14.1.2.0.0 . A difficult-to-exploit vulnerability allows an unauthenticated attacker with network access...

CVE-2026-87334

A vulnerability exists in the ADF Faces component of Oracle JDeveloper (part of Oracle Fusion Middleware) affecting versions 12.2.1.4.0 and 14.1.2.0.0 . A low-privileged attacker with access to the infrastructure where Oracle JDeveloper executes can exploit this vulnerability to compromise the pr...

CVE-2026-87300

A vulnerability exists in the Oracle Weblogic Server Proxy Plug-in (component: WebLogic Server Proxy Plug-In for Third-Party Web Servers) within Oracle Fusion Middleware. Affected versions include 12.2.1.4.0 , 14.1.1.0.0 , and 14.1.2.0.0 . This difficult-to-exploit flaw allows an unauthenticated ...

CVE-2026-87302

A critical vulnerability in the Oracle WebLogic Server product (component: Core ) allows an unauthenticated attacker with network access via HTTP to compromise the server. Affected versions include 12.2.1.4.0 , 14.1.1.0.0 , 14.1.2.0.0 , and 15.1.1.0.0 . Successful exploitation can lead to unautho...

CVE-2026-87299

A vulnerability exists in the Oracle WebCenter Content product (component: Content Server ) within Oracle Fusion Middleware . Affected versions include 12.2.1.4.0 and 14.1.2.0.0 . An unauthenticated attacker with network access via HTTP can exploit this vulnerability to compromise the system, pro...

CVE-2026-87298

A vulnerability exists in the Content Server component of the Oracle WebCenter Content product within Oracle Fusion Middleware. Affected versions include 12.2.1.4.0 and 14.1.2.0.0 . A low-privileged attacker with network access via HTTP can easily exploit this flaw to compromise the product, pote...

CVE-2026-87251

The Oracle Access Manager product of Oracle Fusion Middleware is affected by a vulnerability in the Authentication Engine component. This issue impacts versions 12.2.1.4.0 and 14.1.2.1.0 . An unauthenticated attacker with network access via SAML can easily exploit this vulnerability to compromise...

CVE-2026-83409

A vulnerability exists in the Oracle Access Manager product (component: Authentication Engine ) within Oracle Fusion Middleware . Affected versions include 12.2.1.4.0 and 14.1.2.0.0 . A difficult-to-exploit flaw allows an unauthenticated attacker with network access via SAML to compromise the pro...

CVE-2026-83401

The Oracle Identity Manager product within Oracle Fusion Middleware is affected by a vulnerability in the OIM Legacy UI component, specifically in versions 12.2.1.4.0 and 14.1.2.1.0 . An unauthenticated attacker with network access via HTTP can compromise the system, provided they can elicit nece...