CVE-2026-87124

Oracle iRecruitment (component: Internal Operations ) in Oracle E-Business Suite versions 12.2.3 through 12.2.15 is affected by a network-accessible vulnerability exploitable over HTTP by a low-privileged attacker . The vulnerability carries a scope change , meaning attacks may significantly impa...

EUVD-2026-79781

Vulnerability in the Oracle Report Manager product of Oracle E-Business Suite component: Reports Security. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Report Manager...

EUVD-2026-79777

Vulnerability in the Oracle iRecruitment product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle iRecruitment. Whil...

CVE-2026-83489

This vulnerability affects Oracle Banking Origination (Oracle Financial Services Applications), specifically the Onboarding Batch Processes component, in supported versions 14.5.0.0.0 through 14.9.0.0.0 . A low-privileged attacker with network access via HTTP can exploit this vulnerability, which...

CVE-2026-83490

CVE-2026-83490 affects the Oracle iRecruitment product (component: Internal Operations) of Oracle E-Business Suite , versions 12.2.3 through 12.2.15 . A low-privileged attacker with network access via HTTP can exploit this vulnerability, which carries a scope change —meaning the attack may signif...

EUVD-2026-79775

Vulnerability in the Helidon product of Oracle Fusion Middleware component: helidon-microprofile-security. Supported versions that are affected are 4.0.0-4.5.4. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Helidon. Successful attacks o...

EUVD-2026-79773

Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite component: Item Catalog. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Product Hub. While the...

CVE-2026-83487

Oracle Product Hub (component: Item Catalog ) in Oracle E-Business Suite versions 12.2.3 through 12.2.15 is affected by a vulnerability that allows a low-privileged attacker with network access via HTTP to gain unauthorized access to critical data or complete access to all Oracle Product Hub acce...

EUVD-2026-79774

Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite component: Item Catalog. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Product Hub. While the...

CVE-2026-83486

CVE-2026-83486 affects the Item Catalog component of Oracle Product Hub within Oracle E-Business Suite , versions 12.2.3 through 12.2.15 . A low-privileged attacker with network access via HTTP can exploit this vulnerability to gain unauthorized access to critical data or complete access to all O...

EUVD-2026-79772

Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite component: Item Catalog. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Product Hub. While the...

EUVD-2026-79771

Vulnerability in the Oracle US Federal Human Resources product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle US...

CVE-2026-83479

Oracle Contracts (component: Internal Operations) in Oracle E-Business Suite versions 12.2.14–12.2.15 contains a vulnerability that allows a low-privileged attacker with network access via HTTP to achieve a takeover of the product, with high impact on confidentiality, integrity, and availability....

EUVD-2026-79756

Vulnerability in the Oracle Demand Signal Repository product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Demand...

CVE-2026-83456

Oracle Demand Signal Repository (component: Internal Operations ) in Oracle E-Business Suite versions 12.2.3 through 12.2.15 is vulnerable to a network-based attack via HTTP . A low-privileged attacker requires no user interaction and faces low attack complexity to achieve full takeover of the co...

CVE-2026-83457

CVE-2026-83457 affects the Oracle Demand Signal Repository product within Oracle E-Business Suite (component: Internal Operations ), versions 12.2.3 through 12.2.15 . A low-privileged attacker with network access via HTTP can exploit this vulnerability with low complexity and no user interaction....

EUVD-2026-79755

Vulnerability in the Oracle Demand Signal Repository product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Demand...

EUVD-2026-79753

Vulnerability in the Oracle Document Management and Collaboration product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise...

CVE-2026-83454

A vulnerability in the Internal Operations component of Oracle Document Management and Collaboration (part of Oracle E-Business Suite) affects versions 12.2.3 through 12.2.15 . A low-privileged attacker with network access via HTTP can exploit this vulnerability with low complexity and no user in...

CVE-2026-83455

Oracle Demand Signal Repository (component: Internal Operations ) in Oracle E-Business Suite , versions 12.2.3 through 12.2.15 , is vulnerable to an easily exploitable flaw reachable via HTTP by a low-privileged network attacker. Successful exploitation can lead to unauthorized creation, deletion...