CVE-2026-87131

A vulnerability in the Access and security component of Oracle Hyperion Data Relationship Management (version 11.2.26.0.000 ) allows a low-privileged attacker with network access via HTTP to compromise the product. The attack requires human interaction and involves a scope change , meaning it can...

CVE-2026-87132

Oracle Hyperion Data Relationship Management (component: Access and security ) in version 11.2.26.0.000 is vulnerable to a low-privilege attacker with network access via HTTP . Successful exploitation requires human interaction from a non-attacker and involves a scope change , meaning attacks may...

CVE-2026-87126

Oracle Report Manager (component: Reports Security ) in Oracle E-Business Suite versions 12.2.3 through 12.2.15 contains a network-exploitable vulnerability accessible via HTTP. A low-privileged attacker with network access can compromise the component, resulting in unauthorized access to critica...

EUVD-2026-79760

Vulnerability in the Oracle Mobile Application Server product of Oracle E-Business Suite component: MWA Terminal Server. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via TCP to compromise Oracle Mobil...

EUVD-2026-79727

Vulnerability in the Oracle Demand Signal Repository product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Demand...

EUVD-2026-79720

Vulnerability in the Oracle Communications Cloud Native Core Security Edge Protection Proxy product of Oracle Communications component: SEPP. Supported versions that are affected are 26.1.200 and 25.2.201. Easily exploitable vulnerability allows low privileged attacker with network access via HTT...

EUVD-2026-79673

Vulnerability in the Oracle BI Publisher product of Oracle Analytics component: Administration. Supported versions that are affected are 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle BI...

CVE-2026-83320

Oracle BI Publisher (Administration component) within Oracle Analytics is affected by an easily exploitable vulnerability in versions 8.2.0.0.0 , 12.2.1.4.0 , and 26.01.0.0.0 . A low-privileged attacker with network access via HTTP can exploit this vulnerability, requiring human interaction from ...

EUVD-2026-79671

Vulnerability in the Oracle BI Publisher product of Oracle Analytics component: Web Service API. The supported version that is affected is 12.2.1.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via SOAP to compromise Oracle BI Publisher. While the...

EUVD-2026-79664

Vulnerability in the Oracle BI Publisher product of Oracle Analytics component: E-Business Suite - XDO. Supported versions that are affected are 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

CVE-2026-83302

Oracle BI Publisher (component: BI Publisher Security ), part of Oracle Analytics, version 12.2.1.4.0 is affected by an easily exploitable vulnerability. A low-privileged attacker with network access via HTTP can exploit it to gain unauthorized access to critical data (high confidentiality impact...

CVE-2026-83300

Oracle E-Business Suite – XML Gateway (Install component) in supported versions 12.2.3 through 12.2.15 is vulnerable to an easily exploitable attack over network access via HTTP . A low-privileged attacker can compromise the component, resulting in unauthorized access to critical data (high confi...

EUVD-2026-79619

Vulnerability in the Oracle BI Publisher product of Oracle Analytics component: BI Publisher Security. Supported versions that are affected are 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle ...

CVE-2026-83267

Oracle BI Publisher (component: BI Publisher Security ) in Oracle Analytics is affected in versions 8.2.0.0.0 , 12.2.1.4.0 , and 26.01.0.0.0 . A low-privileged attacker with network access via HTTP can exploit this vulnerability with low complexity. Due to a scope change , the attack may signific...

CVE-2026-83238

CVE-2026-83238 affects Oracle Commerce Guided Search / Oracle Commerce Experience Manager (component: Forge ), version 11.4.0 . The vulnerability is easily exploitable by a low-privileged attacker with network access via HTTP , requiring no user interaction. Successful exploitation can lead to un...

EUVD-2026-79585

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce component: Experience Manager. The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...

CVE-2026-83198

Oracle Field Service (component: Internal Operations ) in Oracle E-Business Suite versions 12.2.3–12.2.15 contains an easily exploitable vulnerability that allows a low-privileged attacker with network access via HTTP to compromise the product. Successful exploitation requires human interaction f...

EUVD-2026-79550

Vulnerability in the Oracle Field Service product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Field Service...

CVE-2026-83175

Oracle Application Object Library (AAL) , component Core within Oracle E-Business Suite , is vulnerable in supported versions 12.2.3 through 12.2.15 . A low-privileged attacker with network access via HTTP can exploit this vulnerability with low complexity to achieve unauthorized access to critic...

EUVD-2026-79527

Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite component: Core. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Application Object...