CVE-2026-87409

The PeopleSoft Enterprise PeopleTools product by Oracle PeopleSoft is affected by a vulnerability in the nVision component, specifically in supported versions 8.61-8.63 . A low-privileged attacker with network access via HTTP can easily exploit this vulnerability to compromise the system. Success...

CVE-2026-87408

A vulnerability exists in the Oracle Applications Framework product of Oracle E-Business Suite , specifically within the Personalization component. Affected versions include 12.2.3-12.2.15 . A low-privileged attacker with network access via HTTP can exploit this flaw, which requires human interac...

CVE-2026-87403

A vulnerability exists in the Applications DBA product of Oracle E-Business Suite within the AD Utilities component, affecting supported versions 12.2.3-12.2.15 . A low-privileged attacker with local infrastructure access can exploit this to compromise the Applications DBA. Successful exploitatio...

CVE-2026-87399

A vulnerability exists in the Oracle WebCenter Content product (component: Content Server ) within Oracle Fusion Middleware, specifically affecting version 14.1.2.0.0 . A low-privileged attacker with network access via HTTP can exploit this vulnerability to compromise the system, provided there i...

CVE-2026-87396

A vulnerability exists in the Outside In Core component of Oracle Outside In Technology (part of Oracle Fusion Middleware) affecting version 8.5.8 . An unauthenticated attacker with network access via HTTP can exploit this vulnerability to compromise the system, provided they can induce human int...

CVE-2026-87392

A vulnerability exists in the WebCenter Content: Imaging product of Oracle Fusion Middleware (component: Core ), specifically affecting version 14.1.2.0.0 . A low-privileged attacker with network access via SOAP can easily exploit this flaw to compromise the system. Successful exploitation may re...

CVE-2026-87394

A vulnerability exists in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Core ), specifically affecting version 8.5.8 . An unauthenticated attacker with network access via HTTP can easily exploit this flaw to compromise the product. Successful exploita...

CVE-2026-87391

The Oracle Fusion Middleware product WebCenter Content: Imaging (specifically the Core component) is affected by a vulnerability in versions 12.2.1.4.0 and 14.1.2.0.0 . A high privileged attacker with local access to the infrastructure can exploit this flaw to compromise the product, provided the...

CVE-2026-87387

A vulnerability exists in the JD Edwards EnterpriseOne Homebuilder product of Oracle JD Edwards (specifically the Homebuilder Management component) affecting version 9.2 . A low-privileged attacker with network access via JDENET can easily exploit this flaw to compromise the system. Successful ex...

CVE-2026-87388

A vulnerability exists in the Configuration Management component of JD Edwards EnterpriseOne Configurator (version 9.2) from Oracle JD Edwards. A low-privileged attacker with network access via HTTP can exploit this difficult-to-exploit vulnerability to compromise the product. Successful exploita...

CVE-2026-87384

A vulnerability exists in the JD Edwards EnterpriseOne Human Resources Management product (component: Human Resources ) from Oracle JD Edwards affecting version 9.2 . A low-privileged attacker with network access via JDENET can easily exploit this flaw to compromise the system. Successful exploit...

CVE-2026-87382

The JD Edwards EnterpriseOne Operational Sourcing product by Oracle JD Edwards (version 9.2 ) is vulnerable to an easily exploitable flaw. A low-privileged attacker with network access via SMTP can compromise the system, potentially gaining unauthorized access to critical data or complete access ...

CVE-2026-87376

The WebCenter Content: Imaging product of Oracle Fusion Middleware (component: Core ) is affected by a vulnerability in version 14.1.2.0.0 . A low-privileged attacker with network access via HTTP can exploit this difficult-to-exploit flaw to compromise the system. Successful exploitation may lead...

CVE-2026-87377

The WebCenter Content: Imaging product of Oracle Fusion Middleware (specifically the Core component) is affected by a vulnerability in version 14.1.2.0.0 . This issue allows a low-privileged attacker with network access via SOAP to compromise the product. Successful exploitation can lead to unaut...

CVE-2026-87374

A vulnerability exists in the Content Server component of Oracle WebCenter Content (part of Oracle Fusion Middleware) affecting versions 12.2.1.4.0 and 14.1.2.0.0 . A low-privileged attacker with network access via HTTP can exploit this difficulty-to-exploit flaw to compromise the product. Succes...

CVE-2026-87373

A vulnerability exists in the Content Server component of the Oracle WebCenter Content product, specifically affecting versions 12.2.1.4.0 and 14.1.2.0.0 . This difficult-to-exploit flaw allows an unauthenticated attacker with network access via HTTP to compromise the system. Successful exploitat...

CVE-2026-87372

A vulnerability exists in the Oracle WebCenter Content product of Oracle Fusion Middleware, specifically affecting the Content Server component in versions 12.2.1.4.0 and 14.1.2.0.0 . A low-privileged attacker with local access to the infrastructure can exploit this flaw to compromise the product...

CVE-2026-87371

A vulnerability exists in the Content Server component of Oracle WebCenter Content (part of Oracle Fusion Middleware) affecting versions 12.2.1.4.0 and 14.1.2.0.0 . A difficult-to-exploit vulnerability allows an unauthenticated attacker with access to the physical communication segment attached t...

CVE-2026-87367

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: JAXP. Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 an...

CVE-2026-87358

A vulnerability exists in the Oracle General Ledger product of Oracle E-Business Suite (component: Internal Operations ) affecting supported versions 12.2.3-12.2.15 . A low privileged attacker with network access via HTTP can exploit this difficult-to-exploit vulnerability to compromise the produ...