CVE-2026-87152

Oracle Installed Base (a component of Oracle E-Business Suite , specifically the Create Item Instance feature) contains an easily exploitable vulnerability in versions 12.2.3 through 12.2.15 . A low-privileged attacker with network access via HTTP can exploit it without user interaction to achiev...

EUVD-2026-79807

Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite component: Create Item Instance. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Installed Base...

EUVD-2026-79804

Vulnerability in the Oracle Contract Lifecycle Management for Public Sector product of Oracle E-Business Suite component: Award/PO. Supported versions that are affected are 12.2.8-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise...

CVE-2026-87147

Oracle Hyperion Data Relationship Management (component: Access and security ), version 11.2.26.0.000 , is affected by a network-accessible vulnerability exploitable via HTTP. A high-privileged attacker with high attack complexity can achieve unauthorized creation, deletion, or modification of da...

CVE-2026-87146

A vulnerability in Oracle Hyperion Data Relationship Management (component: Access and security ), affecting version 11.2.26.0.000 , allows a low-privileged attacker with network access via HTTP to easily compromise the product. Successful exploitation can result in unauthorized access to critica...

EUVD-2026-79797

Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion component: Access and security. The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle...

CVE-2026-87142

Oracle Hyperion Data Relationship Management (component: Access and security ), version 11.2.26.0.000 , is affected by an easily exploitable vulnerability allowing an unauthenticated network attacker via HTTPS to compromise the product. Successful exploitation requires human interaction from a th...

CVE-2026-87143

Oracle Hyperion Data Relationship Management (component: Access and security ), version 11.2.26.0.000 , is affected by a vulnerability that allows an unauthenticated attacker with network access via TCP to compromise the product. The attack complexity is rated high (CVSS 3.1: 7.4 , AV:N/AC:H/PR:N...

EUVD-2026-79785

Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion component: Access and security. The supported version that is affected is 11.2.26.0.000. Difficult to exploit vulnerability allows unauthenticated attacker with network access via SMTP to compromise Oracl...

CVE-2026-87130

Oracle Hyperion Data Relationship Management (component: Access and security ) is affected in supported version 11.2.26.0.000 . The vulnerability allows an unauthenticated attacker with network access via SMTP to compromise the product. Successful exploitation results in unauthorized creation, de...

CVE-2026-87128

A vulnerability in the Oracle Hyperion Data Relationship Management product (component: Access and security ) affects version 11.2.26.0.000 . An unauthenticated attacker with network access via HTTP can exploit this to achieve unauthorized creation, deletion, modification, and access to critical ...

EUVD-2026-79778

Vulnerability in the Oracle iRecruitment product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows unauthenticated attacker with access to the physical communication segment attached to the...

EUVD-2026-79771

Vulnerability in the Oracle US Federal Human Resources product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle US...

CVE-2026-83484

Oracle US Federal Human Resources (component: Internal Operations ) in Oracle E-Business Suite versions 12.2.3 through 12.2.15 is affected by a network-exploitable vulnerability requiring only low-privilege access via HTTP. Successful exploitation allows an attacker to perform unauthorized creati...

EUVD-2026-79764

Vulnerability in the Oracle Mobile Application Server product of Oracle E-Business Suite component: MWA Terminal Server. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Mobi...

EUVD-2026-79765

Vulnerability in the Oracle Work in Process product of Oracle E-Business Suite component: Workbenches. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with access to the physical communication segment attached to the hardwa...

CVE-2026-83457

CVE-2026-83457 affects the Oracle Demand Signal Repository product within Oracle E-Business Suite (component: Internal Operations ), versions 12.2.3 through 12.2.15 . A low-privileged attacker with network access via HTTP can exploit this vulnerability with low complexity and no user interaction....

CVE-2026-83455

Oracle Demand Signal Repository (component: Internal Operations ) in Oracle E-Business Suite , versions 12.2.3 through 12.2.15 , is vulnerable to an easily exploitable flaw reachable via HTTP by a low-privileged network attacker. Successful exploitation can lead to unauthorized creation, deletion...

EUVD-2026-79754

Vulnerability in the Oracle Demand Signal Repository product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Demand...

CVE-2026-83446

A vulnerability in the Oracle Financials Common Modules product of Oracle E-Business Suite (component: Common Components ) affects supported versions 12.2.3 through 12.2.15 . An easily exploitable flaw allows a low-privileged attacker with network access via HTTP to compromise the module, resulti...