CVE-2026-87319

A vulnerability exists in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards , specifically within the Enterprise Infrastructure SEC component. Affected versions include 9.2.0.0-9.2.26.5 . A low privileged attacker with logon access to the infrastructure where the tools execute can e...

CVE-2026-87318

The JD Edwards EnterpriseOne Tools product by Oracle JD Edwards (specifically the Enterprise Infrastructure SEC component) is vulnerable in versions 9.2.0.0-9.2.26.5 . A low-privileged attacker with local access to the infrastructure where the tools execute can exploit this difficult-to-exploit v...

CVE-2026-87316

A vulnerability exists in the Enterprise Infrastructure SEC component of Oracle JD Edwards EnterpriseOne Tools (versions 9.2.0.0-9.2.26.5 ). An attacker with low privileges and local access to the infrastructure can exploit this flaw to compromise the tool, potentially leading to a full takeover ...

CVE-2026-87311

A vulnerability exists in the Core component of Oracle VM VirtualBox (specifically affecting version 7.2.16 ). A low-privileged attacker with local access to the infrastructure can exploit this difficult-to-exploit flaw to compromise the software. Successful exploitation can lead to a complete De...

CVE-2026-87308

A vulnerability exists in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards, specifically within the Enterprise Infrastructure SEC component. Affected versions range from 9.2.0.0 to 9.2.26.5 . A low-privileged attacker with logon access to the infrastructure where the tools execute ...

CVE-2026-87303

A vulnerability exists in the Core component of Oracle VM VirtualBox version 7.2.16 . This easily exploitable flaw allows a low-privileged attacker with access to the infrastructure where the software executes to compromise the product. Successful exploitation requires human interaction from a pe...

CVE-2026-87301

A vulnerability exists in the Core component of Oracle VM VirtualBox version 7.2.16 . A low-privileged attacker with local access to the infrastructure can easily exploit this flaw to compromise the software, potentially leading to unauthorized access to critical data or a complete Denial of Serv...

CVE-2026-83400

A vulnerability exists in the JAXP component of Oracle Java SE , Oracle GraalVM for JDK , and Oracle GraalVM Enterprise Edition . Affected versions include Oracle Java SE (8u503, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27), Oracle GraalVM for JDK (17.0.20.1, 21.0.12.1), and Oracle GraalVM Ente...

CVE-2026-83400

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: JAXP. Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 an...

CVE-2026-60968

A vulnerability exists in the Updates Environment Mgmt component of Oracle PeopleSoft Enterprise PeopleTools (affected versions 8.61-8.63 ). A high privileged attacker with access to the underlying infrastructure can exploit this issue to compromise the software. Successful exploitation may lead ...

CVE-2026-101793

A vulnerability exists in the Core component of Oracle Communications BRM - Elastic Charging Engine affecting versions 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0, and 15.2.0.0.0 . A low privileged attacker with local access to the infrastructure can exploit this issue to compromise the product, potential...

CVE-2026-101764

The Oracle Communications Billing and Revenue Management product is affected by a vulnerability in the BRM Server component, specifically in versions 15.0.0.0.0 , 15.0.1.0.0 , 15.1.0.0.0 , and 15.2.0.0.0 . A low-privileged attacker with logon access to the underlying infrastructure can easily exp...

CVE-2026-101757

A vulnerability exists in the Oracle Application Object Library product of Oracle E-Business Suite (specifically the DB Privileges component) in supported versions 12.2.3-12.2.15 . A low privileged attacker with local access to the infrastructure where the library executes can exploit this vulner...

CVE-2026-101739

A vulnerability exists in the Engineering Communication Interface component of Oracle Agile Engineering Data Management (version 6.2.1 ). This high-complexity vulnerability allows a low-privileged attacker with access to the underlying infrastructure to compromise the application. Successful expl...

CVE-2026-101723

The Oracle Agile PLM MCAD Connector product (Oracle Supply Chain), specifically the CAX Client component in version 3.6 , is vulnerable to a security flaw. A low-privileged attacker with logon access to the underlying infrastructure can compromise the connector, potentially leading to a full take...

CVE-2026-101717

A vulnerability exists in the Security component of the Oracle Agile PLM product (version 9.3.6). A low-privileged attacker with local access to the infrastructure where the application executes can exploit this high-complexity vulnerability to compromise the system. Successful exploitation may l...

CVE-2026-101701

A vulnerability exists in the Oracle Concurrent Processing product of Oracle E-Business Suite (component: Request Submission and Scheduling ) affecting versions 12.2.3-12.2.15 . A high privileged attacker with logon access to the infrastructure where the product executes can easily exploit this f...

CVE-2026-101683

A vulnerability exists in the Applications DBA product of Oracle E-Business Suite , specifically within the AD Utilities component. Affected supported versions include 12.2.3-12.2.15 . A low privileged attacker with logon access to the infrastructure where Applications DBA executes can exploit th...

CVE-2026-101681

A vulnerability exists in the Applications DBA product of Oracle E-Business Suite (component: AD Utilities ) affecting versions 12.2.3-12.2.15 . A low-privileged attacker with local access to the infrastructure where Applications DBA executes can exploit this difficult-to-trigger vulnerability to...

CVE-2026-101676

A vulnerability exists in the Oracle Concurrent Processing product of Oracle E-Business Suite (component: Other Issues ) affecting versions 12.2.3-12.2.15 . A low-privileged attacker with logon access to the infrastructure where Oracle Concurrent Processing executes can exploit this vulnerability...