EUVD-2026-79801

Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion component: Access and security. The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

CVE-2026-87141

CVE-2026-87141 affects the Access and security component of Oracle Hyperion Data Relationship Management (version 11.2.26.0.000 ). A low-privileged attacker with network access via HTTP can exploit this vulnerability, which carries a scope change —meaning attacks may significantly impact addition...

EUVD-2026-79796

Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion component: Access and security. The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

CVE-2026-87133

Oracle Hyperion Data Relationship Management (component: Access and security ) version 11.2.26.0.000 is affected by an easily exploitable vulnerability reachable via network access over HTTP by a high-privileged attacker with no user interaction. Successful exploitation results in unauthorized ac...

CVE-2026-87127

CVE-2026-87127 affects the G-Invoicing component of Oracle Purchasing in Oracle E-Business Suite, versions 12.2.10 through 12.2.15 . The vulnerability is easily exploitable by a low-privileged attacker with network access via HTTP . Although the flaw resides in Oracle Purchasing, the changed scop...

CVE-2026-87124

Oracle iRecruitment (component: Internal Operations ) in Oracle E-Business Suite versions 12.2.3 through 12.2.15 is affected by a network-accessible vulnerability exploitable over HTTP by a low-privileged attacker . The vulnerability carries a scope change , meaning attacks may significantly impa...

CVE-2026-83490

CVE-2026-83490 affects the Oracle iRecruitment product (component: Internal Operations) of Oracle E-Business Suite , versions 12.2.3 through 12.2.15 . A low-privileged attacker with network access via HTTP can exploit this vulnerability, which carries a scope change —meaning the attack may signif...

EUVD-2026-79775

Vulnerability in the Helidon product of Oracle Fusion Middleware component: helidon-microprofile-security. Supported versions that are affected are 4.0.0-4.5.4. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Helidon. Successful attacks o...

EUVD-2026-79773

Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite component: Item Catalog. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Product Hub. While the...

CVE-2026-83488

Oracle Fusion Middleware – Helidon (component: helidon-microprofile-security ) versions 4.0.0 through 4.5.4 are affected by an easily exploitable vulnerability. A low-privileged attacker with network access via HTTP can achieve unauthorized update, insert, delete, and read access to a subset of d...

CVE-2026-83486

CVE-2026-83486 affects the Item Catalog component of Oracle Product Hub within Oracle E-Business Suite , versions 12.2.3 through 12.2.15 . A low-privileged attacker with network access via HTTP can exploit this vulnerability to gain unauthorized access to critical data or complete access to all O...

EUVD-2026-79774

Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite component: Item Catalog. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Product Hub. While the...

CVE-2026-83485

This vulnerability affects the Item Catalog component of Oracle Product Hub within Oracle E-Business Suite, supporting versions 12.2.3 through 12.2.15 . A low-privileged attacker with network access via HTTP can exploit it with low complexity and no user interaction. Successful exploitation resul...

CVE-2026-83448

A vulnerability in Oracle Bills of Material (component: Internal Operations ) within Oracle E-Business Suite affects supported versions 12.2.3 through 12.2.15 . A low-privileged attacker with network access via HTTP can exploit it with low complexity and no user interaction. Successful exploitati...

EUVD-2026-79748

Vulnerability in the Oracle Bills of Material product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Bills of...

CVE-2026-83441

Oracle E-Business Suite – Product Hub (component: Internal Operations) in supported versions 12.2.3 through 12.2.15 contains a vulnerability allowing a low-privileged attacker with network access via HTTP to compromise the component. The vulnerability is rated difficult to exploit (high attack co...

EUVD-2026-79741

Vulnerability in the Oracle Assets product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Assets. Successful attac...

CVE-2026-83437

Oracle Engineering (component: Change Management ) in Oracle E-Business Suite versions 12.2.3 through 12.2.15 contains an easily exploitable vulnerability. A low-privileged attacker with network access via HTTP can compromise the component, and due to a scope change , attacks may significantly im...

EUVD-2026-79735

Vulnerability in the Oracle Engineering product of Oracle E-Business Suite component: Change Management. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Engineering. While th...

CVE-2026-83439

CVE-2026-83439 affects the helidon-security-providers-idcs-mapper component of Oracle Helidon (Fusion Middleware), versions 3.0.0–3.2.20 and 4.0.0–4.5.4 . A low-privileged attacker with network access via HTTP can exploit this vulnerability to achieve unauthorized creation, deletion, or modificat...