CVE-2026-87309

A vulnerability exists in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards , specifically affecting the Package Build SEC component in versions 9.2.0.0-9.2.26.5 . A low-privileged attacker with network access via HTTP can exploit this flaw to compromise the tools. Successful exploi...

CVE-2026-87306

A vulnerability exists in the Interoperability SEC component of Oracle JD Edwards EnterpriseOne Tools (versions 9.2.0.0-9.2.26.5 ). A low-privileged attacker with network access via JDENET can exploit this flaw to compromise the system, potentially gaining unauthorized access to, or performing un...

CVE-2026-87304

The Oracle Outside In Technology product within Oracle Fusion Middleware (component: Outside In Core ) is affected by a high-severity vulnerability in version 8.5.8 . An unauthenticated attacker with network access via HTTP can easily exploit this flaw to compromise the system. Successful exploit...

CVE-2026-87300

A vulnerability exists in the Oracle Weblogic Server Proxy Plug-in (component: WebLogic Server Proxy Plug-In for Third-Party Web Servers) within Oracle Fusion Middleware. Affected versions include 12.2.1.4.0 , 14.1.1.0.0 , and 14.1.2.0.0 . This difficult-to-exploit flaw allows an unauthenticated ...

CVE-2026-87302

A critical vulnerability in the Oracle WebLogic Server product (component: Core ) allows an unauthenticated attacker with network access via HTTP to compromise the server. Affected versions include 12.2.1.4.0 , 14.1.1.0.0 , 14.1.2.0.0 , and 15.1.1.0.0 . Successful exploitation can lead to unautho...

CVE-2026-87299

A vulnerability exists in the Oracle WebCenter Content product (component: Content Server ) within Oracle Fusion Middleware . Affected versions include 12.2.1.4.0 and 14.1.2.0.0 . An unauthenticated attacker with network access via HTTP can exploit this vulnerability to compromise the system, pro...

CVE-2026-87295

A vulnerability exists in the Oracle HRMS (India) product within the Oracle E-Business Suite (specifically the Indian Payroll component). Affected versions include 12.2.3-12.2.15 . A low-privileged attacker with access to the infrastructure where the product executes can exploit this vulnerabilit...

CVE-2026-87296

A vulnerability exists in the Authentication Engine component of Oracle Access Manager within Oracle Fusion Middleware . Affected versions include 12.2.1.4.0 and 14.1.2.1.0 . An unauthenticated attacker with network access via HTTP can exploit this vulnerability to compromise Oracle Access Manage...

CVE-2026-87293

A vulnerability exists in the RMI component of Oracle Java SE (specifically versions 8u503 and 8u503-perf ) and Oracle GraalVM Enterprise Edition (version 21.3.19.1.1 ). An unauthenticated attacker with network access can exploit this vulnerability by supplying data to APIs within the RMI compone...

CVE-2026-87292

A vulnerability exists in the Networking component of Oracle Java SE , Oracle GraalVM for JDK , and Oracle GraalVM Enterprise Edition . Affected versions include Oracle Java SE (8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27), Oracle GraalVM for JDK (17.0.20.1, 21.0.12.1), and O...

CVE-2026-87294

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Security. Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20....

CVE-2026-87294

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Security. Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20....

CVE-2026-83426

A vulnerability exists in the Authentication Engine component of Oracle Access Manager (part of Oracle Fusion Middleware) affecting versions 12.2.1.4.0 and 14.1.2.1.0 . An unauthenticated attacker with network access via HTTP can exploit this difficult-to-exploit vulnerability to compromise the s...

CVE-2026-83404

Vulnerability in the MySQL Connectors product of Oracle MySQL component: Connector/Python. The supported version that is affected is 26.7.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Connectors. Successful attac...

CVE-2026-83407

A vulnerability exists in the Authentication Engine component of Oracle Access Manager (part of Oracle Fusion Middleware). The issue affects supported versions 12.2.1.4.0 and 14.1.2.0.0 . An unauthenticated attacker with network access via HTTP can easily exploit this flaw to compromise the produ...

CVE-2026-83404

Vulnerability in the MySQL Connectors product of Oracle MySQL component: Connector/Python. The supported version that is affected is 26.7.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Connectors. Successful attac...

CVE-2026-83404

A vulnerability exists in the Connector/Python component of the Oracle MySQL Connectors product (affected version 26.7.0 ). This easily exploitable flaw allows an unauthenticated attacker with network access via multiple protocols to compromise the connectors. Successful exploitation can lead to ...

CVE-2026-83401

The Oracle Identity Manager product within Oracle Fusion Middleware is affected by a vulnerability in the OIM Legacy UI component, specifically in versions 12.2.1.4.0 and 14.1.2.1.0 . An unauthenticated attacker with network access via HTTP can compromise the system, provided they can elicit nece...

CVE-2026-83396

The Oracle Data Integrator product of Oracle Fusion Middleware (specifically the Console / Repository Explorer component) is affected by CVE-2026-83396 in versions 12.2.1.4.0 and 14.1.2.0.0 . An unauthenticated attacker with network access via RMI can easily exploit this vulnerability to compromi...

CVE-2026-83398

A vulnerability exists in the Oracle Data Integrator product within Oracle Fusion Middleware (specifically the Data Transforms component). Affected versions include 12.2.1.4.0 and 14.1.2.0.0 . This easily exploitable vulnerability allows an unauthenticated attacker with network access via HTTP to...