CVE-2026-87263

A vulnerability exists in the Analytics Server component of Oracle Business Intelligence Enterprise Edition . The affected versions are 8.2.0.0.0 and 26.01.0.0.0 . A low-privileged attacker with network access via HTTP can easily exploit this flaw to compromise the system, potentially leading to ...

CVE-2026-83427

A vulnerability exists in the Multichannel Framework component of Oracle PeopleSoft Enterprise PeopleTools (versions 8.61-8.63 ). A high-privileged attacker with network access via HTTP can exploit this difficult-to-exploit vulnerability to compromise the system. Successful exploitation may resul...

CVE-2026-83426

A vulnerability exists in the Authentication Engine component of Oracle Access Manager (part of Oracle Fusion Middleware) affecting versions 12.2.1.4.0 and 14.1.2.1.0 . An unauthenticated attacker with network access via HTTP can exploit this difficult-to-exploit vulnerability to compromise the s...

CVE-2026-83407

A vulnerability exists in the Authentication Engine component of Oracle Access Manager (part of Oracle Fusion Middleware). The issue affects supported versions 12.2.1.4.0 and 14.1.2.0.0 . An unauthenticated attacker with network access via HTTP can easily exploit this flaw to compromise the produ...

CVE-2026-83403

A vulnerability exists in the Oracle Identity Manager product of Oracle Fusion Middleware , specifically within the OIM Legacy UI component. Affected versions include 12.2.1.4.0 and 14.1.2.1.0 . A low-privileged attacker with network access via HTTP can easily exploit this flaw to compromise the ...

CVE-2026-83401

The Oracle Identity Manager product within Oracle Fusion Middleware is affected by a vulnerability in the OIM Legacy UI component, specifically in versions 12.2.1.4.0 and 14.1.2.1.0 . An unauthenticated attacker with network access via HTTP can compromise the system, provided they can elicit nece...

CVE-2026-83398

A vulnerability exists in the Oracle Data Integrator product within Oracle Fusion Middleware (specifically the Data Transforms component). Affected versions include 12.2.1.4.0 and 14.1.2.0.0 . This easily exploitable vulnerability allows an unauthenticated attacker with network access via HTTP to...

CVE-2026-83397

A vulnerability exists in the Oracle Data Integrator product of Oracle Fusion Middleware , specifically affecting the Console / Repository Explorer component in versions 12.2.1.4.0 and 14.1.2.0.0 . This easily exploitable vulnerability allows an unauthenticated attacker with network access via HT...

CVE-2026-83394

A vulnerability exists in the Internal Operations component of the Oracle Demand Planning product within Oracle Supply Chain. Affected versions include 12.1 and 12.2 . A low-privileged attacker with network access via HTTP can compromise Oracle Demand Planning, though the attack requires human in...

CVE-2026-83392

The Oracle Applications Manager product within Oracle E-Business Suite (specifically the Diagnostics component) is affected by a vulnerability in supported versions 12.2.3-12.2.15 . A low-privileged attacker with network access via HTTP can exploit this difficult-to-exploit vulnerability to compr...

CVE-2026-83393

A vulnerability exists in the Oracle Product Hub component (Internal Operations ) of Oracle E-Business Suite versions 12.2.3-12.2.15 . This high-complexity vulnerability allows a low-privileged attacker with network access via HTTP to compromise Oracle Product Hub, potentially resulting in a take...

CVE-2026-83391

The Oracle E-Business Suite product Oracle HRMS (US) , specifically within the US Payroll Year End component, is affected by a vulnerability in versions 12.2.3-12.2.15 . A low-privileged attacker with network access via HTTP can exploit this flaw to compromise the system, though it requires human...

CVE-2026-83390

A vulnerability exists in the Diagnostics component of the Oracle Applications Manager product within Oracle E-Business Suite , affecting supported versions 12.2.3-12.2.15 . A low-privileged attacker with network access via HTTP can exploit this difficult-to-exploit vulnerability to compromise Or...

CVE-2026-83388

A vulnerability exists in the Diagnostics component of the Oracle Applications Manager product within Oracle E-Business Suite (affected versions 12.2.3-12.2.15 ). A high-privileged attacker with network access via HTTP can exploit this difficulty-to-exploit flaw to compromise Oracle Applications ...

CVE-2026-83389

The Oracle E-Business Suite product Oracle HRMS (UK) (component: Internal Operations ) is vulnerable in supported versions 12.2.3-12.2.15 . A low-privileged attacker with network access via HTTP can exploit this vulnerability to compromise the system. Successful exploitation requires human intera...

CVE-2026-83386

A vulnerability exists in the Internal Operations component of the Oracle HRMS (US) product within Oracle E-Business Suite . Affected versions range from 12.2.3 to 12.2.15 . A low-privileged attacker with network access via HTTP can easily exploit this flaw to compromise the product. Successful e...

CVE-2026-83384

A vulnerability exists in the Internal Operations component of Oracle HRMS (US) within the Oracle E-Business Suite. Affected versions range from 12.2.3 to 12.2.15 . A low-privileged attacker with network access can exploit this via HTTP to compromise the system, potentially leading to unauthorize...

CVE-2026-83385

The Oracle HRMS (US) product within the Oracle E-Business Suite (specifically the Internal Operations component) is vulnerable in versions 12.2.3-12.2.15 . An attacker with low privileges and network access via HTTP can exploit this vulnerability to compromise the system. Successful exploitation ...

CVE-2026-83383

A vulnerability exists in the Oracle HRMS (US) product within Oracle E-Business Suite (component: Internal Operations ) affecting versions 12.2.3-12.2.15 . A low-privileged attacker with network access via HTTP can easily exploit this flaw to compromise the product, potentially resulting in unaut...

CVE-2026-83379

The Oracle Weblogic Server Proxy Plug-in (component: WebLogic Server Proxy Plug-In for Third-Party Web Servers) is affected by a vulnerability in supported versions 12.2.1.4.0 , 14.1.1.0.0 , and 14.1.2.0.0 . This difficult-to-exploit vulnerability allows an unauthenticated attacker with network a...