CVE-2026-87374

A vulnerability exists in the Content Server component of Oracle WebCenter Content (part of Oracle Fusion Middleware) affecting versions 12.2.1.4.0 and 14.1.2.0.0 . A low-privileged attacker with network access via HTTP can exploit this difficulty-to-exploit flaw to compromise the product. Succes...

CVE-2026-87373

A vulnerability exists in the Content Server component of the Oracle WebCenter Content product, specifically affecting versions 12.2.1.4.0 and 14.1.2.0.0 . This difficult-to-exploit flaw allows an unauthenticated attacker with network access via HTTP to compromise the system. Successful exploitat...

CVE-2026-87369

A vulnerability exists in the Oracle Service Bus product of Oracle Fusion Middleware (component: Core ), affecting supported versions 12.2.1.4.0 and 14.1.2.0.0 . An unauthenticated attacker with network access via HTTP can easily exploit this flaw to cause a hang or a frequently repeatable crash,...

CVE-2026-87370

A vulnerability exists in the Oracle WebCenter Content product (component: Content Server ) within Oracle Fusion Middleware , specifically affecting versions 12.2.1.4.0 and 14.1.2.0.0 . A low-privileged attacker with network access via HTTP can exploit this difficult-to-exploit vulnerability to c...

CVE-2026-87365

A vulnerability exists in the Content Server component of Oracle WebCenter Content (part of Oracle Fusion Middleware) affecting versions 12.2.1.4.0 and 14.1.2.0.0 . A low-privileged attacker with network access via HTTP can easily exploit this flaw to compromise the product. Successful exploitati...

CVE-2026-87366

A vulnerability exists in the Web Utilities component of the Oracle Applications Framework product within Oracle E-Business Suite , affecting supported versions 12.2.3-12.2.15 . A high-privileged attacker with network access via HTTP can exploit this flaw to compromise the Oracle Applications Fra...

CVE-2026-87362

The Oracle Agile PLM product (Oracle Supply Chain) is affected by a vulnerability in the Folders, Files & Attachments component in version 9.3.6 . A low-privileged attacker with network access via HTTP can easily exploit this flaw to compromise the system. Successful exploitation may lead to unau...

CVE-2026-87363

A vulnerability exists in the Internal Operations component of the Oracle Payroll product within Oracle E-Business Suite (affected versions 12.2.3-12.2.15 ). A low-privileged attacker with network access via HTTP can exploit this difficult-to-exploit vulnerability to compromise the Oracle Payroll...

CVE-2026-87364

A vulnerability exists in the Core component of the Oracle Service Bus product within Oracle Fusion Middleware , specifically affecting versions 12.2.1.4.0 and 14.1.2.0.0 . A low-privileged attacker with network access via HTTP can exploit this vulnerability to compromise the service, potentially...

CVE-2026-87361

The Oracle WebCenter Content product (component: Content Server ) of Oracle Fusion Middleware is affected by this vulnerability in version 12.2.1.4.0 . A low-privileged attacker with network access via HTTP can exploit this issue to compromise the product. Successful exploitation may lead to unau...

CVE-2026-87360

A vulnerability exists in the Oracle WebCenter Content product (component: Content Server ) within Oracle Fusion Middleware, specifically affecting versions 12.2.1.4.0 and 14.1.2.0.0 . An unauthenticated attacker with network access via HTTP can exploit this difficult to exploit vulnerability to ...

CVE-2026-87358

A vulnerability exists in the Oracle General Ledger product of Oracle E-Business Suite (component: Internal Operations ) affecting supported versions 12.2.3-12.2.15 . A low privileged attacker with network access via HTTP can exploit this difficult-to-exploit vulnerability to compromise the produ...

CVE-2026-87357

A vulnerability exists in the Order Capture product of Oracle E-Business Suite within the Internal Operations component. Affected versions include 12.2.3-12.2.15 . A high-privileged attacker with network access via HTTP can easily exploit this vulnerability to compromise Order Capture, potentiall...

CVE-2026-87359

A vulnerability exists in the Oracle Service Bus product of Oracle Fusion Middleware (component: Core ), specifically affecting versions 12.2.1.4.0 and 14.1.2.0.0 . A low-privileged attacker with network access via HTTP can easily exploit this vulnerability to compromise the Oracle Service Bus, p...

CVE-2026-87355

A vulnerability exists in the Panel Processor component of Oracle PeopleSoft Enterprise PeopleTools (versions 8.61-8.63 ). This difficult-to-exploit flaw allows a low-privileged attacker with network access via HTTP to compromise the system, provided they can obtain human interaction from another...

CVE-2026-87345

A vulnerability exists in the Business Interlink component of Oracle PeopleSoft Enterprise PeopleTools (affected versions 8.61-8.63 ). An unauthenticated attacker with network access via HTTP can exploit this flaw to compromise the product, provided there is human interaction from a user other th...

CVE-2026-87346

The Oracle HTTP Server product within Oracle Fusion Middleware (specifically the Oracle Weblogic Server Proxy Plug-in for Oracle HTTP Server component) is vulnerable in versions 12.2.1.4.0 and 14.1.2.0.0 . A difficult-to-exploit vulnerability allows an unauthenticated attacker with network access...

CVE-2026-87347

A vulnerability exists in the Oracle HTTP Server product of Oracle Fusion Middleware , specifically within the OSSL Module . Affected versions include 12.2.1.4.0 and 14.1.2.0.0 . A low-privileged attacker with network access via HTTP can exploit this flaw to compromise the server, potentially gai...

CVE-2026-87343

The PeopleSoft Enterprise PeopleTools product (component: Portal ) is affected by a vulnerability in versions 8.61-8.63 . A difficult-to-exploit vulnerability allows an unauthenticated attacker with network access via HTTP to compromise the system. Successful exploitation can lead to unauthorized...

CVE-2026-87344

A vulnerability exists in the LDAP component of Oracle PeopleSoft Enterprise PeopleTools (affected versions 8.61-8.63 ). This easily exploitable flaw allows an unauthenticated attacker with network access via HTTP to compromise the system. Successful exploitation can lead to unauthorized read acc...