CVE-2026-87342

A vulnerability exists in the Security component of Oracle PeopleSoft Enterprise PeopleTools (affected versions 8.61-8.63 ). A difficult-to-exploit flaw allows an unauthenticated attacker with network access via HTTP to compromise the system. Successful exploitation can result in unauthorized acc...

CVE-2026-87339

A vulnerability exists in the REST component of the Siebel CRM Integration product within Oracle Siebel CRM , affecting versions 17.0-26.9 . An unauthenticated attacker with network access via HTTP can exploit this difficult-to-execute vulnerability to gain unauthorized read access to a subset of...

CVE-2026-87336

The PeopleSoft Enterprise PeopleTools product (component: Portal ) is affected by a vulnerability in versions 8.61-8.63 . This difficult to exploit vulnerability allows a low privileged attacker with network access via HTTP to compromise the system. Successful exploitation can result in unauthori...

CVE-2026-87337

A vulnerability exists in the Authentication Engine component of Oracle Access Manager (part of Oracle Fusion Middleware) affecting versions 12.2.1.4.0 and 14.1.2.1.0 . An unauthenticated attacker with network access via HTTP can easily exploit this flaw to compromise the product. Successful expl...

CVE-2026-87338

A vulnerability exists in the Siebel CRM Integration product of Oracle Siebel CRM (component: EAI ) affecting supported versions 17.0-26.9 . This difficult to exploit vulnerability allows an unauthenticated attacker with network access via HTTP to compromise the integration. Exploitation requires...

CVE-2026-87335

A vulnerability exists in the Applications DBA product of Oracle E-Business Suite (component: Internal Operations ) affecting versions 12.2.3-12.2.15 . An attacker with low privileges and network access via HTTP can easily exploit this flaw to compromise Applications DBA. Successful exploitation ...

CVE-2026-87326

The JD Edwards EnterpriseOne Tools product by Oracle JD Edwards is affected by a vulnerability in the Enterprise Infrastructure SEC component. Specifically, versions 9.2.0.0 through 9.2.26.5 are impacted. A difficult-to-exploit vulnerability allows an unauthenticated attacker with network access ...

CVE-2026-87315

The Oracle JD Edwards EnterpriseOne Tools product, specifically the Enterprise Infrastructure SEC component, is affected by CVE-2026-87315 in versions 9.2.0.0-9.2.26.5 . An unauthenticated attacker with network access via HTTP can exploit this vulnerability to compromise the system. Successful ex...

CVE-2026-87309

A vulnerability exists in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards , specifically affecting the Package Build SEC component in versions 9.2.0.0-9.2.26.5 . A low-privileged attacker with network access via HTTP can exploit this flaw to compromise the tools. Successful exploi...

CVE-2026-87307

A vulnerability exists in the Interoperability SEC component of Oracle JD Edwards EnterpriseOne Tools (affected versions 9.2.0.0-9.2.26.5). A low-privileged attacker with network access via HTTP can exploit this flaw to compromise the system. Successful exploitation may lead to unauthorized acces...

CVE-2026-87304

The Oracle Outside In Technology product within Oracle Fusion Middleware (component: Outside In Core ) is affected by a high-severity vulnerability in version 8.5.8 . An unauthenticated attacker with network access via HTTP can easily exploit this flaw to compromise the system. Successful exploit...

CVE-2026-87300

A vulnerability exists in the Oracle Weblogic Server Proxy Plug-in (component: WebLogic Server Proxy Plug-In for Third-Party Web Servers) within Oracle Fusion Middleware. Affected versions include 12.2.1.4.0 , 14.1.1.0.0 , and 14.1.2.0.0 . This difficult-to-exploit flaw allows an unauthenticated ...

CVE-2026-87302

A critical vulnerability in the Oracle WebLogic Server product (component: Core ) allows an unauthenticated attacker with network access via HTTP to compromise the server. Affected versions include 12.2.1.4.0 , 14.1.1.0.0 , 14.1.2.0.0 , and 15.1.1.0.0 . Successful exploitation can lead to unautho...

CVE-2026-87299

A vulnerability exists in the Oracle WebCenter Content product (component: Content Server ) within Oracle Fusion Middleware . Affected versions include 12.2.1.4.0 and 14.1.2.0.0 . An unauthenticated attacker with network access via HTTP can exploit this vulnerability to compromise the system, pro...

CVE-2026-87298

A vulnerability exists in the Content Server component of the Oracle WebCenter Content product within Oracle Fusion Middleware. Affected versions include 12.2.1.4.0 and 14.1.2.0.0 . A low-privileged attacker with network access via HTTP can easily exploit this flaw to compromise the product, pote...

CVE-2026-87296

A vulnerability exists in the Authentication Engine component of Oracle Access Manager within Oracle Fusion Middleware . Affected versions include 12.2.1.4.0 and 14.1.2.1.0 . An unauthenticated attacker with network access via HTTP can exploit this vulnerability to compromise Oracle Access Manage...

CVE-2026-87263

A vulnerability exists in the Analytics Server component of Oracle Business Intelligence Enterprise Edition . The affected versions are 8.2.0.0.0 and 26.01.0.0.0 . A low-privileged attacker with network access via HTTP can easily exploit this flaw to compromise the system, potentially leading to ...

CVE-2026-83427

A vulnerability exists in the Multichannel Framework component of Oracle PeopleSoft Enterprise PeopleTools (versions 8.61-8.63 ). A high-privileged attacker with network access via HTTP can exploit this difficult-to-exploit vulnerability to compromise the system. Successful exploitation may resul...

CVE-2026-83426

A vulnerability exists in the Authentication Engine component of Oracle Access Manager (part of Oracle Fusion Middleware) affecting versions 12.2.1.4.0 and 14.1.2.1.0 . An unauthenticated attacker with network access via HTTP can exploit this difficult-to-exploit vulnerability to compromise the s...

CVE-2026-83407

A vulnerability exists in the Authentication Engine component of Oracle Access Manager (part of Oracle Fusion Middleware). The issue affects supported versions 12.2.1.4.0 and 14.1.2.0.0 . An unauthenticated attacker with network access via HTTP can easily exploit this flaw to compromise the produ...