CVE-2026-91294

A vulnerability exists in the Business Logic Infra SEC component of Oracle JD Edwards EnterpriseOne Tools (versions 9.2.0.0-9.2.26.5 ). A low privileged attacker with network access via JDENET can exploit this issue to cause a partial denial of service (partial DOS) . No specific exploit details ...

CVE-2026-91284

The Oracle JD Edwards EnterpriseOne Tools product (specifically the E1 Dev Platform Tech - UNIX component) is vulnerable in versions 9.2.0.0-9.2.26.5 . A low-privileged attacker with network access via JDENET can exploit this vulnerability to cause a hang or a frequently repeatable crash, resulti...

CVE-2026-91260

The iProcurement product of Oracle E-Business Suite is affected by a vulnerability in the E-Content Manager Catalog component, specifically in supported versions 12.2.3-12.2.15 . A high-privileged attacker with network access via HTTP can easily exploit this flaw to compromise the system, potenti...

CVE-2026-87412

A vulnerability exists in the Report Distribution component of Oracle PeopleSoft Enterprise PeopleTools (affected versions 8.61-8.63 ). A high-privileged attacker with network access via HTTP can easily exploit this flaw to gain unauthorized read access to a subset of accessible data. No specific...

CVE-2026-87387

A vulnerability exists in the JD Edwards EnterpriseOne Homebuilder product of Oracle JD Edwards (specifically the Homebuilder Management component) affecting version 9.2 . A low-privileged attacker with network access via JDENET can easily exploit this flaw to compromise the system. Successful ex...

CVE-2026-87386

The JD Edwards EnterpriseOne General Ledger product by Oracle JD Edwards (specifically the E1 Foundation component) is affected by a vulnerability in version 9.2 . A low-privileged attacker with network access via JDENET can exploit this difficulty-to-exploit vulnerability to cause a hang or a fr...

CVE-2026-87388

A vulnerability exists in the Configuration Management component of JD Edwards EnterpriseOne Configurator (version 9.2) from Oracle JD Edwards. A low-privileged attacker with network access via HTTP can exploit this difficult-to-exploit vulnerability to compromise the product. Successful exploita...

CVE-2026-87357

A vulnerability exists in the Order Capture product of Oracle E-Business Suite within the Internal Operations component. Affected versions include 12.2.3-12.2.15 . A high-privileged attacker with network access via HTTP can easily exploit this vulnerability to compromise Order Capture, potentiall...

CVE-2026-87354

A vulnerability exists in the Kubernetes Operator component of the Oracle TimesTen In-Memory Database (affected versions 22.1-22.1.40.0 and 26.1-26.1.1.2.0 ). A low-privileged attacker with network access via HTTPS can exploit this flaw to compromise the database, potentially leading to unauthori...

CVE-2026-87332

A vulnerability exists in Oracle JD Edwards EnterpriseOne Tools (component: E1 Dev Platform Tech - Cloud ) affecting versions 9.2.0.0-9.2.26.5 . This high-complexity vulnerability allows a high-privileged attacker with infrastructure access to compromise the product. Successful exploitation may l...

CVE-2026-87320

A vulnerability exists in the JD Edwards EnterpriseOne Tools product (specifically the E1 Dev Platform Tech - UNIX component) from Oracle JD Edwards in versions 9.2.0.0-9.2.26.5 . This difficult-to-exploit flaw allows a low-privileged attacker with infrastructure access to compromise the system, ...

CVE-2026-87312

A vulnerability exists in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards, specifically within the Enterprise Infrastructure SEC component. Affected supported versions range from 9.2.0.0 to 9.2.26.5 . A low privileged attacker with network access via JDENET could exploit this diff...

CVE-2026-87297

A vulnerability exists in the Platform component of Oracle Communications Billing and Revenue Management (versions 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0, and 15.2.0.0.0). A high-privileged attacker with access to the infrastructure where the software executes can exploit this vulnerability to compro...

CVE-2026-83427

A vulnerability exists in the Multichannel Framework component of Oracle PeopleSoft Enterprise PeopleTools (versions 8.61-8.63 ). A high-privileged attacker with network access via HTTP can exploit this difficult-to-exploit vulnerability to compromise the system. Successful exploitation may resul...

CVE-2026-83406

A vulnerability exists in the Platform component of Oracle Communications Billing and Revenue Management affecting versions 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0, and 15.2.0.0.0 . A high-privileged attacker with access to the infrastructure where the software executes can exploit this vulnerability ...

CVE-2026-83392

The Oracle Applications Manager product within Oracle E-Business Suite (specifically the Diagnostics component) is affected by a vulnerability in supported versions 12.2.3-12.2.15 . A low-privileged attacker with network access via HTTP can exploit this difficult-to-exploit vulnerability to compr...

CVE-2026-83388

A vulnerability exists in the Diagnostics component of the Oracle Applications Manager product within Oracle E-Business Suite (affected versions 12.2.3-12.2.15 ). A high-privileged attacker with network access via HTTP can exploit this difficulty-to-exploit flaw to compromise Oracle Applications ...

CVE-2026-60964

A vulnerability exists in the Open Query component of Oracle PeopleSoft Enterprise PeopleTools (versions 8.61 and 8.62 ). A high-privileged attacker with access to the underlying infrastructure can exploit this difficult-to-exploit flaw to compromise the product, potentially resulting in unauthor...

CVE-2026-70860

Oracle PeopleSoft PeopleSoft Enterprise FIN Common Objects Argentina (specifically the eProcurement component) version 9.1 is affected by a difficult to exploit vulnerability. A low-privileged attacker with network access via HTTP could compromise the system, potentially gaining unauthorized crea...

CVE-2026-60887

A vulnerability exists in the Data Mover component of Oracle PeopleSoft Enterprise PeopleTools (affected versions 8.61-8.63 ). A high-privileged attacker with access to the infrastructure can exploit this issue, though it is difficult to execute and requires human interaction from another person....