CVE-2026-87340

A vulnerability exists in the Portal component of Oracle PeopleSoft Enterprise PeopleTools (affected versions 8.61-8.63 ). This difficult to exploit flaw allows an unauthenticated attacker with network access via HTTP to compromise the product. Successful exploitation can result in unauthorized u...

CVE-2026-87337

A vulnerability exists in the Authentication Engine component of Oracle Access Manager (part of Oracle Fusion Middleware) affecting versions 12.2.1.4.0 and 14.1.2.1.0 . An unauthenticated attacker with network access via HTTP can easily exploit this flaw to compromise the product. Successful expl...

CVE-2026-87333

A vulnerability exists in the JD Edwards EnterpriseOne Tools product (component: Enterprise Infrastructure SEC ) from Oracle JD Edwards, affecting versions 9.2.0.0-9.2.26.5 . A low-privileged attacker with logon access to the infrastructure where the tools execute can exploit this difficult-to-ex...

CVE-2026-87331

A vulnerability exists in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards within the E1 Dev Platform Tech - UNIX component (versions 9.2.0.0-9.2.26.5 ). A high-privileged attacker with local infrastructure access can exploit this to compromise the system, potentially leading to un...

CVE-2026-87332

A vulnerability exists in Oracle JD Edwards EnterpriseOne Tools (component: E1 Dev Platform Tech - Cloud ) affecting versions 9.2.0.0-9.2.26.5 . This high-complexity vulnerability allows a high-privileged attacker with infrastructure access to compromise the product. Successful exploitation may l...

CVE-2026-87329

A vulnerability exists in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure SEC ) affecting versions 9.2.0.0-9.2.26.5 . A low-privileged attacker with local access to the infrastructure can exploit this difficult-to-exploit vulnerability to comp...

CVE-2026-87326

The JD Edwards EnterpriseOne Tools product by Oracle JD Edwards is affected by a vulnerability in the Enterprise Infrastructure SEC component. Specifically, versions 9.2.0.0 through 9.2.26.5 are impacted. A difficult-to-exploit vulnerability allows an unauthenticated attacker with network access ...

CVE-2026-87325

A vulnerability exists in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards, specifically within the Enterprise Infrastructure SEC component. Affected versions include 9.2.0.0-9.2.26.5 . This high-complexity vulnerability allows a low-privileged attacker with network access via JDEN...

CVE-2026-87324

A vulnerability exists in the Enterprise Infrastructure SEC component of JD Edwards EnterpriseOne Tools (versions 9.2.0.0-9.2.26.5 ). A low-privileged attacker with network access via JDENET can exploit this difficult-to-exploit flaw to cause a complete Denial of Service (DoS) by hanging or crash...

CVE-2026-87318

The JD Edwards EnterpriseOne Tools product by Oracle JD Edwards (specifically the Enterprise Infrastructure SEC component) is vulnerable in versions 9.2.0.0-9.2.26.5 . A low-privileged attacker with local access to the infrastructure where the tools execute can exploit this difficult-to-exploit v...

CVE-2026-87319

A vulnerability exists in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards , specifically within the Enterprise Infrastructure SEC component. Affected versions include 9.2.0.0-9.2.26.5 . A low privileged attacker with logon access to the infrastructure where the tools execute can e...

CVE-2026-87315

The Oracle JD Edwards EnterpriseOne Tools product, specifically the Enterprise Infrastructure SEC component, is affected by CVE-2026-87315 in versions 9.2.0.0-9.2.26.5 . An unauthenticated attacker with network access via HTTP can exploit this vulnerability to compromise the system. Successful ex...

CVE-2026-87314

A vulnerability exists in the Interoperability SEC component of Oracle JD Edwards EnterpriseOne Tools (versions 9.2.0.0-9.2.26.5 ). This issue allows an unauthenticated attacker with network access via TLS to compromise the product. Successful exploitation can result in unauthorized access , crea...

CVE-2026-87308

A vulnerability exists in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards, specifically within the Enterprise Infrastructure SEC component. Affected versions range from 9.2.0.0 to 9.2.26.5 . A low-privileged attacker with logon access to the infrastructure where the tools execute ...

CVE-2026-87309

A vulnerability exists in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards , specifically affecting the Package Build SEC component in versions 9.2.0.0-9.2.26.5 . A low-privileged attacker with network access via HTTP can exploit this flaw to compromise the tools. Successful exploi...

CVE-2026-87306

A vulnerability exists in the Interoperability SEC component of Oracle JD Edwards EnterpriseOne Tools (versions 9.2.0.0-9.2.26.5 ). A low-privileged attacker with network access via JDENET can exploit this flaw to compromise the system, potentially gaining unauthorized access to, or performing un...

CVE-2026-87304

The Oracle Outside In Technology product within Oracle Fusion Middleware (component: Outside In Core ) is affected by a high-severity vulnerability in version 8.5.8 . An unauthenticated attacker with network access via HTTP can easily exploit this flaw to compromise the system. Successful exploit...

CVE-2026-87300

A vulnerability exists in the Oracle Weblogic Server Proxy Plug-in (component: WebLogic Server Proxy Plug-In for Third-Party Web Servers) within Oracle Fusion Middleware. Affected versions include 12.2.1.4.0 , 14.1.1.0.0 , and 14.1.2.0.0 . This difficult-to-exploit flaw allows an unauthenticated ...

CVE-2026-87302

A critical vulnerability in the Oracle WebLogic Server product (component: Core ) allows an unauthenticated attacker with network access via HTTP to compromise the server. Affected versions include 12.2.1.4.0 , 14.1.1.0.0 , 14.1.2.0.0 , and 15.1.1.0.0 . Successful exploitation can lead to unautho...

CVE-2026-87299

A vulnerability exists in the Oracle WebCenter Content product (component: Content Server ) within Oracle Fusion Middleware . Affected versions include 12.2.1.4.0 and 14.1.2.0.0 . An unauthenticated attacker with network access via HTTP can exploit this vulnerability to compromise the system, pro...