CVE-2026-87173

CVE-2026-87173 affects the Security component of Oracle Hyperion Financial Management (version 11.2.26.0.000 ). An unauthenticated attacker with network access via TCP can exploit this vulnerability with low complexity to compromise the product. Successful exploitation results in unauthorized cre...

CVE-2026-87167

CVE-2026-87167 affects Oracle Purchasing (component: G-Invoicing ) in Oracle E-Business Suite , versions 12.2.11 through 12.2.15 . The vulnerability is exploitable over the network via HTTP by a low-privileged attacker with no user interaction, allowing unauthorized creation, deletion, or modific...

CVE-2026-87168

A vulnerability in the Oracle Purchasing product of Oracle E-Business Suite (component: G-Invoicing ) affects supported versions 12.2.10 through 12.2.15 . A low-privileged attacker with network access via HTTP can exploit this vulnerability with low complexity and no user interaction. Successful ...

EUVD-2026-79823

Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite component: G-Invoicing. Supported versions that are affected are 12.2.10-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Purchasing. Successful...

CVE-2026-87166

Oracle Purchasing in Oracle E-Business Suite (component: "Other issue") is affected by a vulnerability in supported versions 12.2.3 through 12.2.15 . The flaw allows a low-privileged attacker with network access via HTTP and no user interaction to compromise the product. Successful exploitation c...

EUVD-2026-79814

Vulnerability in the Oracle HRMS India product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle HRMS India. Successf...

EUVD-2026-79815

Vulnerability in the Oracle HRMS India product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTPS to compromise Oracle HRMS India...

CVE-2026-87156

CVE-2026-87156 affects the Oracle Product Hub component (Internal Operations ) of Oracle E-Business Suite , versions 12.2.3 through 12.2.15 . An easily exploitable vulnerability allows a low-privileged attacker with network access via HTTP to compromise the component. Successful exploitation resu...

EUVD-2026-79812

Vulnerability in the Oracle Order Management product of Oracle E-Business Suite component: Product Diagnostic Tools. Supported versions that are affected are 12.2.4-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Order...

EUVD-2026-79809

Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Product Hub...

EUVD-2026-79811

Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Product Hub...

CVE-2026-87152

Oracle Installed Base (a component of Oracle E-Business Suite , specifically the Create Item Instance feature) contains an easily exploitable vulnerability in versions 12.2.3 through 12.2.15 . A low-privileged attacker with network access via HTTP can exploit it without user interaction to achiev...

EUVD-2026-79808

Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Product Hub...

EUVD-2026-79807

Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite component: Create Item Instance. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Installed Base...

EUVD-2026-79804

Vulnerability in the Oracle Contract Lifecycle Management for Public Sector product of Oracle E-Business Suite component: Award/PO. Supported versions that are affected are 12.2.8-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise...

CVE-2026-87146

A vulnerability in Oracle Hyperion Data Relationship Management (component: Access and security ), affecting version 11.2.26.0.000 , allows a low-privileged attacker with network access via HTTP to easily compromise the product. Successful exploitation can result in unauthorized access to critica...

CVE-2026-87147

Oracle Hyperion Data Relationship Management (component: Access and security ), version 11.2.26.0.000 , is affected by a network-accessible vulnerability exploitable via HTTP. A high-privileged attacker with high attack complexity can achieve unauthorized creation, deletion, or modification of da...

CVE-2026-87143

Oracle Hyperion Data Relationship Management (component: Access and security ), version 11.2.26.0.000 , is affected by a vulnerability that allows an unauthenticated attacker with network access via TCP to compromise the product. The attack complexity is rated high (CVSS 3.1: 7.4 , AV:N/AC:H/PR:N...

CVE-2026-87142

Oracle Hyperion Data Relationship Management (component: Access and security ), version 11.2.26.0.000 , is affected by an easily exploitable vulnerability allowing an unauthenticated network attacker via HTTPS to compromise the product. Successful exploitation requires human interaction from a th...

EUVD-2026-79797

Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion component: Access and security. The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle...