CVE-2026-87389

A vulnerability exists in the Human Resources component of Oracle JD Edwards EnterpriseOne Human Resources Management (version 9.2 ). This issue allows an unauthenticated attacker with network access via HTTP to compromise the system with high complexity. Successful exploitation can result in una...

CVE-2026-87390

A vulnerability exists in the Content Server component of Oracle WebCenter Content (part of Oracle Fusion Middleware) in supported versions 12.2.1.4.0 and 14.1.2.0.0 . An unauthenticated attacker with network access via HTTP can exploit this issue, though the attack requires human interaction . S...

CVE-2026-87385

A vulnerability exists in the Human Resources component of Oracle JD Edwards EnterpriseOne Human Resources Management version 9.2 . This difficult to exploit vulnerability allows an unauthenticated attacker with network access via JDENET to compromise the system. Successful exploitation may resul...

CVE-2026-87367

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: JAXP. Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 an...

CVE-2026-87367

A vulnerability exists in the JAXP component of Oracle Java SE , Oracle GraalVM for JDK , and Oracle GraalVM Enterprise Edition . Specifically, affected versions include Oracle Java SE (8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27), Oracle GraalVM for JDK (17.0.20.1, 21.0.12.1...

CVE-2026-87361

The Oracle WebCenter Content product (component: Content Server ) of Oracle Fusion Middleware is affected by this vulnerability in version 12.2.1.4.0 . A low-privileged attacker with network access via HTTP can exploit this issue to compromise the product. Successful exploitation may lead to unau...

CVE-2026-87317

A vulnerability exists in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (specifically the Enterprise Infrastructure SEC component) affecting versions 9.2.0.0-9.2.26.5 . A difficult-to-exploit flaw allows an unauthenticated attacker with network access via SMTP to compromise the ...

CVE-2026-87292

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Networking. Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK:...

CVE-2026-87294

A vulnerability exists in the Security component of Oracle Java SE , Oracle GraalVM for JDK , and Oracle GraalVM Enterprise Edition . Affected versions include Oracle Java SE 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, and 27; Oracle GraalVM for JDK 17.0.20.1 and 21.0.12.1; and ...

CVE-2026-60819

A vulnerability exists in the Application Server - JRE component of Oracle PeopleSoft Enterprise PeopleTools (versions 8.61-8.63). An unauthenticated attacker with network access via SSH could exploit this difficult-to-exploit vulnerability to compromise the product, potentially gaining unauthori...

CVE-2026-101846

A vulnerability exists in the Internal Operations component of the Oracle Purchasing product within Oracle E-Business Suite (versions 12.2.3-12.2.15 ). This easily exploitable flaw allows a low-privileged attacker with network access via HTTP to compromise Oracle Purchasing, provided they can tri...

CVE-2026-101845

A vulnerability exists in the Internal Operations component of the Oracle Purchasing product within Oracle E-Business Suite (versions 12.2.3-12.2.15). This difficult to exploit vulnerability allows a low-privileged attacker with network access via HTTP to compromise Oracle Purchasing. Successful ...

CVE-2026-101740

A vulnerability exists in the Engineering Communication Interface component of the Oracle Agile Engineering Data Management product (version 6.2.1 ). A low-privileged attacker with local infrastructure access can exploit this difficult-to-exploit vulnerability to compromise the product. Successfu...

CVE-2026-101738

The Oracle Agile Engineering Data Management product (component: Engineering Communication Interface ) is affected by a vulnerability in version 6.2.1 . A low-privileged attacker with network access via HTTP can exploit this difficult-to-exploit vulnerability to compromise the system. Successful ...

CVE-2026-101720

Oracle MySQL MySQL Server and MySQL Cluster versions 26.7.0-26.7.1 are vulnerable to an easily exploitable flaw in the Connection Handling component. An unauthenticated attacker with network access via multiple protocols can compromise the system, potentially gaining unauthorized update, insert, ...

CVE-2026-101720

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL component: Server: Connection Handling. Supported versions that are affected are MySQL Server: 26.7.0-26.7.1; MySQL Cluster: 26.7.0-26.7.1. Easily exploitable vulnerability allows unauthenticated attacker with network access...

CVE-2026-101677

A vulnerability exists in the Connector/J component of the Oracle MySQL Connectors product, specifically affecting version 26.7.0 . An unauthenticated attacker with network access via multiple protocols can exploit this vulnerability, although successful execution requires human interaction from ...

CVE-2026-101647

A vulnerability exists in the Oracle iSetup product of Oracle E-Business Suite , specifically affecting the General Ledger Update Transform and Reports components in versions 12.2.3-12.2.15 . A low-privileged attacker with network access via HTTP can exploit this difficult-to-exploit vulnerabilit...

CVE-2026-101645

The Oracle iSetup product within Oracle E-Business Suite (specifically the General Ledger Update Transform and Reports components) is affected by a high-severity vulnerability in versions 12.2.3-12.2.15 . A low-privileged attacker with network access via HTTP could exploit this difficulty-to-expl...

CVE-2026-101646

A vulnerability exists in the Oracle iSetup product within Oracle E-Business Suite , specifically affecting the General Ledger Update Transform and Reports components in versions 12.2.3-12.2.15 . A high-privileged attacker with network access via HTTP can exploit this flaw to compromise Oracle iS...