CVE-2026-87209

CVE-2026-87209 affects the Security component of Oracle Hyperion Financial Management , version 11.2.26.0.000 . A low-privileged attacker with network access via HTTP can exploit this vulnerability with low complexity to gain unauthorized access to critical or all accessible data (high confidenti...

EUVD-2026-79855

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion component: Security. The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hyperion Financial...

CVE-2026-87200

Oracle Hyperion Financial Management (component: Security ), version 11.2.26.0.000 , is vulnerable to an easily exploitable flaw that allows an unauthenticated attacker with network access via HTTP to compromise the application. Successful exploitation can lead to unauthorized creation, deletion,...

CVE-2026-87192

CVE-2026-87192 affects the Security component of Oracle Hyperion Financial Management version 11.2.26.0.000 . A low-privileged attacker with network access via HTTP can exploit this vulnerability to gain unauthorized access to critical data accessible by the application and cause a partial denial...

EUVD-2026-79847

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion component: Security. The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hyperion Financial...

CVE-2026-87191

This vulnerability affects the Security component of Oracle Hyperion Financial Management version 11.2.26.0.000 . A low-privileged attacker with network access via HTTP can exploit it with low complexity and no user interaction. Successful exploitation results in unauthorized access to critical o...

EUVD-2026-79846

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion component: Security. The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hyperion Financial...

EUVD-2026-79797

Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion component: Access and security. The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle...

CVE-2026-87126

Oracle Report Manager (component: Reports Security ) in Oracle E-Business Suite versions 12.2.3 through 12.2.15 contains a network-exploitable vulnerability accessible via HTTP. A low-privileged attacker with network access can compromise the component, resulting in unauthorized access to critica...

EUVD-2026-79780

Vulnerability in the Oracle Financials for Asia/Pacific product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.8-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

CVE-2026-87125

Oracle Financials for Asia/Pacific (component: Internal Operations ) within Oracle E-Business Suite versions 12.2.8–12.2.15 contains a vulnerability exploitable by a low-privileged attacker over HTTP with no user interaction required. Successful exploitation allows unauthorized creation, deletion...

EUVD-2026-79767

Vulnerability in the Helidon product of Oracle Fusion Middleware component: WebSocket. Supported versions that are affected are 4.0.0-4.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful attacks of this vulnerabilit...

EUVD-2026-79760

Vulnerability in the Oracle Mobile Application Server product of Oracle E-Business Suite component: MWA Terminal Server. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via TCP to compromise Oracle Mobil...

EUVD-2026-79757

Vulnerability in the Helidon product of Oracle Fusion Middleware component: JSON. Supported versions that are affected are 4.0.0-4.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful attacks of this vulnerability can...

CVE-2026-83459

CVE-2026-83459 affects Helidon (Oracle Fusion Middleware), specifically the helidon-media-multipart component, in supported versions 3.0.0 through 3.2.20 . The vulnerability is easily exploitable by an unauthenticated attacker with network access via HTTP , resulting in a partial denial of servic...

CVE-2026-83449

A vulnerability in the Oracle Bills of Material component (Internal Operations) of Oracle E-Business Suite affects supported versions 12.2.3 through 12.2.15 . An attacker with low-level network access via HTTP can exploit this with low complexity and no user interaction, leading to high confident...

CVE-2026-83425

Oracle Complex Maintenance, Repair and Overhaul (component: Internal Operations) within Oracle E-Business Suite versions 12.2.12–12.2.15 is affected by a network-accessible vulnerability exploitable over HTTP by a low-privileged attacker with no user interaction. Successful exploitation grants co...

EUVD-2026-79725

Vulnerability in the Oracle Complex Maintenance, Repair and Overhaul product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.12-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...

EUVD-2026-79717

Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

CVE-2026-83416

Oracle Coherence (component: Core ) in Oracle Fusion Middleware versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0 is affected by a vulnerability exploitable over HTTP by a low-privileged attacker with network access and no user interaction. Successful exploitation results in a partial d...