CVE-2026-83391

The Oracle E-Business Suite product Oracle HRMS (US) , specifically within the US Payroll Year End component, is affected by a vulnerability in versions 12.2.3-12.2.15 . A low-privileged attacker with network access via HTTP can exploit this flaw to compromise the system, though it requires human...

CVE-2026-83390

A vulnerability exists in the Diagnostics component of the Oracle Applications Manager product within Oracle E-Business Suite , affecting supported versions 12.2.3-12.2.15 . A low-privileged attacker with network access via HTTP can exploit this difficult-to-exploit vulnerability to compromise Or...

CVE-2026-83388

A vulnerability exists in the Diagnostics component of the Oracle Applications Manager product within Oracle E-Business Suite (affected versions 12.2.3-12.2.15 ). A high-privileged attacker with network access via HTTP can exploit this difficulty-to-exploit flaw to compromise Oracle Applications ...

CVE-2026-83389

The Oracle E-Business Suite product Oracle HRMS (UK) (component: Internal Operations ) is vulnerable in supported versions 12.2.3-12.2.15 . A low-privileged attacker with network access via HTTP can exploit this vulnerability to compromise the system. Successful exploitation requires human intera...

CVE-2026-83386

A vulnerability exists in the Internal Operations component of the Oracle HRMS (US) product within Oracle E-Business Suite . Affected versions range from 12.2.3 to 12.2.15 . A low-privileged attacker with network access via HTTP can easily exploit this flaw to compromise the product. Successful e...

CVE-2026-83384

A vulnerability exists in the Internal Operations component of Oracle HRMS (US) within the Oracle E-Business Suite. Affected versions range from 12.2.3 to 12.2.15 . A low-privileged attacker with network access can exploit this via HTTP to compromise the system, potentially leading to unauthorize...

CVE-2026-83385

The Oracle HRMS (US) product within the Oracle E-Business Suite (specifically the Internal Operations component) is vulnerable in versions 12.2.3-12.2.15 . An attacker with low privileges and network access via HTTP can exploit this vulnerability to compromise the system. Successful exploitation ...

CVE-2026-83383

A vulnerability exists in the Oracle HRMS (US) product within Oracle E-Business Suite (component: Internal Operations ) affecting versions 12.2.3-12.2.15 . A low-privileged attacker with network access via HTTP can easily exploit this flaw to compromise the product, potentially resulting in unaut...

CVE-2026-83379

The Oracle Weblogic Server Proxy Plug-in (component: WebLogic Server Proxy Plug-In for Third-Party Web Servers) is affected by a vulnerability in supported versions 12.2.1.4.0 , 14.1.1.0.0 , and 14.1.2.0.0 . This difficult-to-exploit vulnerability allows an unauthenticated attacker with network a...

CVE-2026-83377

A vulnerability exists in the Mobile Applications component of Oracle HRMS (US) , part of the Oracle E-Business Suite, affecting versions 12.2.3-12.2.15 . A low-privileged attacker with network access via HTTP can exploit this issue to compromise the product, though the attack requires human inte...

CVE-2026-83375

The Oracle PeopleSoft Enterprise HCM Human Resources product (component: Administer Workforce ) is affected by a high-complexity vulnerability in version 9.2 . A high-privileged attacker with network access via HTTP can compromise the system, but the attack requires human interaction from a third...

CVE-2026-83373

A vulnerability exists in the Portal component of Oracle PeopleSoft Enterprise PeopleTools (affected versions 8.61-8.63 ). A low-privileged attacker with network access via HTTP can exploit this difficult-to-exploit flaw to gain unauthorized read access to a subset of accessible data. Successful ...

CVE-2026-83372

A vulnerability in the Portal component of Oracle PeopleSoft Enterprise PeopleTools (versions 8.61-8.63) allows a low-privileged attacker with network access via HTTP to compromise the system. The attack is easily exploitable but requires human interaction from a third party. Successful exploitat...

CVE-2026-83371

A vulnerability exists in the Internal Operations component of the Oracle HRMS (UK) product within Oracle E-Business Suite (affected versions 12.2.3-12.2.15 ). A low-privileged attacker with network access via HTTP can exploit this issue to compromise the system, provided there is human interacti...

CVE-2026-83370

A vulnerability exists in the Sourcing product of Oracle E-Business Suite (component: Auctions ) affecting versions 12.2.3-12.2.15 . A low-privileged attacker with network access via HTTP can exploit this high-complexity vulnerability to compromise the Sourcing product, potentially leading to a f...

CVE-2026-83366

A vulnerability exists in the Workflow Events component of the Oracle Shipping Execution product within Oracle E-Business Suite (versions 12.2.3-12.2.15 ). An unauthenticated attacker with network access via HTTP can exploit this difficult-to-exploit vulnerability to compromise Oracle Shipping Ex...

CVE-2026-83361

A vulnerability exists in the Award/PO component of Oracle Contract Lifecycle Management for Public Sector (Oracle E-Business Suite) affecting versions 12.2.3-12.2.15 . An attacker with low privileges and network access via HTTP can exploit this vulnerability to gain unauthorized access to critic...

CVE-2026-83360

The Oracle HRMS (Republic of Korea) product, specifically the Korean Payroll component within Oracle E-Business Suite , is affected by a vulnerability in versions 12.2.3-12.2.15 . A low-privileged attacker with network access via HTTP can exploit this flaw to compromise the system, potentially le...

CVE-2026-83363

A vulnerability exists in the Award/PO component of Oracle Contract Lifecycle Management for Public Sector (part of Oracle E-Business Suite) affecting versions 12.2.3-12.2.15 . A low-privileged attacker with network access via HTTP can easily exploit this flaw to compromise the system, potentiall...

CVE-2026-83358

The Oracle HRMS (Norway) product, specifically within the Internal Operations component of Oracle E-Business Suite , is affected by CVE-2026-83358 in versions 12.2.3-12.2.15 . A low-privileged attacker with network access via HTTP can easily exploit this vulnerability to compromise the system. Su...