CVE-2026-87384

A vulnerability exists in the JD Edwards EnterpriseOne Human Resources Management product (component: Human Resources ) from Oracle JD Edwards affecting version 9.2 . A low-privileged attacker with network access via JDENET can easily exploit this flaw to compromise the system. Successful exploit...

CVE-2026-87382

The JD Edwards EnterpriseOne Operational Sourcing product by Oracle JD Edwards (version 9.2 ) is vulnerable to an easily exploitable flaw. A low-privileged attacker with network access via SMTP can compromise the system, potentially gaining unauthorized access to critical data or complete access ...

CVE-2026-87377

The WebCenter Content: Imaging product of Oracle Fusion Middleware (specifically the Core component) is affected by a vulnerability in version 14.1.2.0.0 . This issue allows a low-privileged attacker with network access via SOAP to compromise the product. Successful exploitation can lead to unaut...

CVE-2026-87376

The WebCenter Content: Imaging product of Oracle Fusion Middleware (component: Core ) is affected by a vulnerability in version 14.1.2.0.0 . A low-privileged attacker with network access via HTTP can exploit this difficult-to-exploit flaw to compromise the system. Successful exploitation may lead...

CVE-2026-87373

A vulnerability exists in the Content Server component of the Oracle WebCenter Content product, specifically affecting versions 12.2.1.4.0 and 14.1.2.0.0 . This difficult-to-exploit flaw allows an unauthenticated attacker with network access via HTTP to compromise the system. Successful exploitat...

CVE-2026-87374

A vulnerability exists in the Content Server component of Oracle WebCenter Content (part of Oracle Fusion Middleware) affecting versions 12.2.1.4.0 and 14.1.2.0.0 . A low-privileged attacker with network access via HTTP can exploit this difficulty-to-exploit flaw to compromise the product. Succes...

CVE-2026-87372

A vulnerability exists in the Oracle WebCenter Content product of Oracle Fusion Middleware, specifically affecting the Content Server component in versions 12.2.1.4.0 and 14.1.2.0.0 . A low-privileged attacker with local access to the infrastructure can exploit this flaw to compromise the product...

CVE-2026-87371

A vulnerability exists in the Content Server component of Oracle WebCenter Content (part of Oracle Fusion Middleware) affecting versions 12.2.1.4.0 and 14.1.2.0.0 . A difficult-to-exploit vulnerability allows an unauthenticated attacker with access to the physical communication segment attached t...

CVE-2026-87358

A vulnerability exists in the Oracle General Ledger product of Oracle E-Business Suite (component: Internal Operations ) affecting supported versions 12.2.3-12.2.15 . A low privileged attacker with network access via HTTP can exploit this difficult-to-exploit vulnerability to compromise the produ...

CVE-2026-87352

A vulnerability exists in the LDAP component of Oracle PeopleSoft Enterprise PeopleTools (affected versions 8.61-8.63 ). A low-privileged attacker with access to the infrastructure where the software executes can compromise the system. Successful exploitation may result in unauthorized read acces...

CVE-2026-87346

The Oracle HTTP Server product within Oracle Fusion Middleware (specifically the Oracle Weblogic Server Proxy Plug-in for Oracle HTTP Server component) is vulnerable in versions 12.2.1.4.0 and 14.1.2.0.0 . A difficult-to-exploit vulnerability allows an unauthenticated attacker with network access...

CVE-2026-87345

A vulnerability exists in the Business Interlink component of Oracle PeopleSoft Enterprise PeopleTools (affected versions 8.61-8.63 ). An unauthenticated attacker with network access via HTTP can exploit this flaw to compromise the product, provided there is human interaction from a user other th...

CVE-2026-87347

A vulnerability exists in the Oracle HTTP Server product of Oracle Fusion Middleware , specifically within the OSSL Module . Affected versions include 12.2.1.4.0 and 14.1.2.0.0 . A low-privileged attacker with network access via HTTP can exploit this flaw to compromise the server, potentially gai...

CVE-2026-87344

A vulnerability exists in the LDAP component of Oracle PeopleSoft Enterprise PeopleTools (affected versions 8.61-8.63 ). This easily exploitable flaw allows an unauthenticated attacker with network access via HTTP to compromise the system. Successful exploitation can lead to unauthorized read acc...

CVE-2026-87343

The PeopleSoft Enterprise PeopleTools product (component: Portal ) is affected by a vulnerability in versions 8.61-8.63 . A difficult-to-exploit vulnerability allows an unauthenticated attacker with network access via HTTP to compromise the system. Successful exploitation can lead to unauthorized...

CVE-2026-87340

A vulnerability exists in the Portal component of Oracle PeopleSoft Enterprise PeopleTools (affected versions 8.61-8.63 ). This difficult to exploit flaw allows an unauthenticated attacker with network access via HTTP to compromise the product. Successful exploitation can result in unauthorized u...

CVE-2026-87337

A vulnerability exists in the Authentication Engine component of Oracle Access Manager (part of Oracle Fusion Middleware) affecting versions 12.2.1.4.0 and 14.1.2.1.0 . An unauthenticated attacker with network access via HTTP can easily exploit this flaw to compromise the product. Successful expl...

CVE-2026-87332

A vulnerability exists in Oracle JD Edwards EnterpriseOne Tools (component: E1 Dev Platform Tech - Cloud ) affecting versions 9.2.0.0-9.2.26.5 . This high-complexity vulnerability allows a high-privileged attacker with infrastructure access to compromise the product. Successful exploitation may l...

CVE-2026-87333

A vulnerability exists in the JD Edwards EnterpriseOne Tools product (component: Enterprise Infrastructure SEC ) from Oracle JD Edwards, affecting versions 9.2.0.0-9.2.26.5 . A low-privileged attacker with logon access to the infrastructure where the tools execute can exploit this difficult-to-ex...

CVE-2026-87331

A vulnerability exists in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards within the E1 Dev Platform Tech - UNIX component (versions 9.2.0.0-9.2.26.5 ). A high-privileged attacker with local infrastructure access can exploit this to compromise the system, potentially leading to un...