CVE-2026-83359

The Oracle HRMS (India) product, specifically the Indian Payroll component, is affected by a vulnerability in versions 12.2.3-12.2.15 . A low-privileged attacker with network access via HTTP can easily exploit this flaw to compromise the system. Successful exploitation may lead to unauthorized ac...

CVE-2026-83139

The Oracle Order Management product within Oracle E-Business Suite is affected by a vulnerability in the Product Diagnostic Tools component (versions 12.2.3-12.2.15 ). A low-privileged attacker with network access via HTTP can easily exploit this flaw to compromise the system. Successful exploita...

CVE-2026-70869

A vulnerability exists in the Integration Broker component of Oracle PeopleSoft (PeopleSoft Enterprise PeopleTools), affecting supported versions 8.61-8.63 . This flaw allows an unauthenticated attacker with network access via HTTP to compromise the system. While the vulnerability is difficult to...

CVE-2026-70860

Oracle PeopleSoft PeopleSoft Enterprise FIN Common Objects Argentina (specifically the eProcurement component) version 9.1 is affected by a difficult to exploit vulnerability. A low-privileged attacker with network access via HTTP could compromise the system, potentially gaining unauthorized crea...

CVE-2026-60878

A vulnerability in the Process Scheduler component of Oracle PeopleSoft Enterprise PeopleTools (versions 8.61 and 8.62 ) allows a low-privileged attacker with network access via HTTP to compromise the system. Exploitation is difficult and requires human interaction from a user other than the atta...

CVE-2026-60881

Oracle PeopleSoft PeopleTools (component: Meta Data ) is affected by a vulnerability in supported versions 8.61-8.63 . A high-privileged attacker with network access via HTTP can exploit this to compromise the product, potentially gaining unauthorized access to critical data or performing a compl...

CVE-2026-60876

The PeopleSoft Enterprise PeopleTools product, specifically the Search Framework component in version 8.62 , is affected by a vulnerability that allows an unauthenticated attacker with network access via HTTP to compromise the system. This is considered a difficult-to-exploit vulnerability as it ...

CVE-2026-60869

A vulnerability exists in the Application Data Sets component of Oracle PeopleSoft (Enterprise PeopleTools) affecting versions 8.61-8.63 . A low-privileged attacker with network access via HTTP can exploit this difficulty-to-exploit vulnerability to gain unauthorized access to create, delete, or ...

CVE-2026-60874

A vulnerability exists in the Portal component of Oracle PeopleSoft Enterprise PeopleTools (affected versions 8.61 and 8.62 ). A low-privileged attacker with network access via HTTP can exploit this difficult-to-exploit vulnerability to compromise the system. Successful exploitation may lead to u...

CVE-2026-60839

A vulnerability exists in the Query component of Oracle PeopleSoft Enterprise PeopleTools (affected versions 8.61 and 8.62 ). A high-privileged attacker with network access via HTTP can exploit this flaw to cause a complete denial of service (DoS) by triggering a hang or repeatable crash. Additio...

CVE-2026-60746

A vulnerability exists in the Product Diagnostic Tools component of the Oracle Order Management product within Oracle E-Business Suite, specifically affecting versions 12.2.3-12.2.15 . A low-privileged attacker with network access via HTTP can exploit this flaw, which is considered difficult to e...

CVE-2026-60500

A vulnerability exists in the Web Server component of Oracle PeopleSoft Enterprise PeopleTools affecting supported versions 8.61-8.63 . An unauthenticated attacker with network access via HTTP can easily exploit this flaw to compromise the system, potentially resulting in unauthorized read access...

CVE-2026-47025

A vulnerability exists in the Utility component of Oracle Solaris (affected versions 11.3 and 11.4 ). A low privileged attacker with network access via HTTP can easily exploit this flaw to compromise the system, potentially leading to a complete takeover of Oracle Solaris. The vulnerability is as...

CVE-2026-60432

A vulnerability exists in the Image Packaging System component of Oracle Solaris versions 11.3 and 11.4 . An unauthenticated attacker with network access via HTTP can easily exploit this flaw to compromise the system. Successful exploitation can lead to a complete takeover of Oracle Solaris . Whi...

CVE-2026-101857

A vulnerability exists in the Product Diagnostic Tools component of the Oracle Order Management product within Oracle E-Business Suite (versions 12.2.3-12.2.15 ). A low-privileged attacker with network access via HTTP can exploit this flaw to compromise Oracle Order Management, potentially gainin...

CVE-2026-101856

A vulnerability exists in the Product Diagnostic Tools component of the Oracle Order Management product within Oracle E-Business Suite , affecting supported versions 12.2.3-12.2.15 . A low-privileged attacker with network access via HTTP can easily exploit this flaw to compromise the system. Succ...

CVE-2026-101855

A vulnerability exists in the Internal Operations component of the Oracle Product Hub product within Oracle E-Business Suite (versions 12.2.3-12.2.15 ). A low-privileged attacker with network access via HTTP can easily exploit this flaw to compromise the Oracle Product Hub. Successful exploitatio...

CVE-2026-101854

A vulnerability exists in the Internal Operations component of the Oracle Product Hub product within Oracle E-Business Suite . Affected supported versions include 12.2.3-12.2.15 . A low-privileged attacker with network access via HTTP can easily exploit this flaw to compromise the Oracle Product ...

CVE-2026-101853

A vulnerability exists in the Oracle Product Hub product of Oracle E-Business Suite (component: Internal Operations ) in supported versions 12.2.3-12.2.15 . A low-privileged attacker with network access via HTTP can easily exploit this vulnerability to compromise the Oracle Product Hub, potential...

CVE-2026-101852

A vulnerability exists in the Internal Operations component of the Oracle Product Hub product within Oracle E-Business Suite . The affected versions are 12.2.3-12.2.15 . A low-privileged attacker with network access via HTTP can easily exploit this vulnerability to compromise the Oracle Product H...