189887 matches found
CVE-2026-87418
A vulnerability exists in the Updates Environment Mgmt component of the Oracle PeopleSoft Enterprise PeopleTools product, specifically affecting versions 8.61-8.63 . A low-privileged attacker with infrastructure access can exploit this difficult-to-exploit flaw to compromise the product, potentia...
CVE-2026-87416
A vulnerability exists in the Report Distribution component of Oracle PeopleSoft Enterprise PeopleTools affecting supported versions 8.61-8.63 . An unauthenticated attacker with network access via HTTP can exploit this difficult-to-exploit vulnerability to achieve unauthorized read access to a su...
CVE-2026-87412
A vulnerability exists in the Report Distribution component of Oracle PeopleSoft Enterprise PeopleTools (affected versions 8.61-8.63 ). A high-privileged attacker with network access via HTTP can easily exploit this flaw to gain unauthorized read access to a subset of accessible data. No specific...
CVE-2026-87401
A vulnerability exists in the XML Publisher component of Oracle PeopleSoft Enterprise PeopleTools affecting supported versions 8.61-8.63 . A low-privileged attacker with local access to the infrastructure can exploit this vulnerability to compromise the software, potentially resulting in unauthor...
CVE-2026-87385
A vulnerability exists in the Human Resources component of Oracle JD Edwards EnterpriseOne Human Resources Management version 9.2 . This difficult to exploit vulnerability allows an unauthenticated attacker with network access via JDENET to compromise the system. Successful exploitation may resul...
CVE-2026-87379
A vulnerability exists in the WebCenter Content: Imaging product of Oracle Fusion Middleware (component: Core ), specifically affecting versions 12.2.1.4.0 and 14.1.2.0.0 . A low-privileged attacker with network access via SOAP can exploit this flaw to compromise the system, potentially resulting...
CVE-2026-87354
A vulnerability exists in the Kubernetes Operator component of the Oracle TimesTen In-Memory Database (affected versions 22.1-22.1.40.0 and 26.1-26.1.1.2.0 ). A low-privileged attacker with network access via HTTPS can exploit this flaw to compromise the database, potentially leading to unauthori...
CVE-2026-87339
A vulnerability exists in the REST component of the Siebel CRM Integration product within Oracle Siebel CRM , affecting versions 17.0-26.9 . An unauthenticated attacker with network access via HTTP can exploit this difficult-to-execute vulnerability to gain unauthorized read access to a subset of...
CVE-2026-87294
A vulnerability exists in the Security component of Oracle Java SE , Oracle GraalVM for JDK , and Oracle GraalVM Enterprise Edition . Affected versions include Oracle Java SE 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, and 27; Oracle GraalVM for JDK 17.0.20.1 and 21.0.12.1; and ...
CVE-2026-87291
Vulnerability in Oracle Java SE component: Networking. Supported versions that are affected are Oracle Java SE: 21.0.12.1, 25.0.4.1 and 27. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE. Successful attacks ...
CVE-2026-87291
A vulnerability exists in the Networking component of Oracle Java SE (affected versions: 21.0.12.1, 25.0.4.1, and 27). An unauthenticated attacker with network access via multiple protocols can exploit this flaw to gain unauthorized read access to a subset of accessible data. Exploitation occurs ...
CVE-2026-87291
Vulnerability in Oracle Java SE component: Networking. Supported versions that are affected are Oracle Java SE: 21.0.12.1, 25.0.4.1 and 27. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE. Successful attacks ...
CVE-2026-87291
Vulnerability in Oracle Java SE component: Networking. Supported versions that are affected are Oracle Java SE: 21.0.12.1, 25.0.4.1 and 27. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE. Successful attacks ...
CVE-2026-87255
Vulnerability in Oracle Java SE component: Compiler. Supported versions that are affected are Oracle Java SE: 25.0.4.1 and 27. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE. Successful attacks of this...
CVE-2026-87255
A vulnerability exists in the Compiler component of Oracle Java SE versions 25.0.4.1 and 27 . An unauthenticated attacker with network access via multiple protocols can exploit this vulnerability by supplying data to specific APIs—excluding Untrusted Java Web Start applications or applets (e.g., ...
CVE-2026-87255
Vulnerability in Oracle Java SE component: Compiler. Supported versions that are affected are Oracle Java SE: 25.0.4.1 and 27. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE. Successful attacks of this...
CVE-2026-87255
Vulnerability in Oracle Java SE component: Compiler. Supported versions that are affected are Oracle Java SE: 25.0.4.1 and 27. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE. Successful attacks of this...
CVE-2026-83392
The Oracle Applications Manager product within Oracle E-Business Suite (specifically the Diagnostics component) is affected by a vulnerability in supported versions 12.2.3-12.2.15 . A low-privileged attacker with network access via HTTP can exploit this difficult-to-exploit vulnerability to compr...
CVE-2026-83390
A vulnerability exists in the Diagnostics component of the Oracle Applications Manager product within Oracle E-Business Suite , affecting supported versions 12.2.3-12.2.15 . A low-privileged attacker with network access via HTTP can exploit this difficult-to-exploit vulnerability to compromise Or...
CVE-2026-83388
A vulnerability exists in the Diagnostics component of the Oracle Applications Manager product within Oracle E-Business Suite (affected versions 12.2.3-12.2.15 ). A high-privileged attacker with network access via HTTP can exploit this difficulty-to-exploit flaw to compromise Oracle Applications ...