EUVD-2026-79851

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion component: Security. The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hyperion Financial...

CVE-2026-87176

CVE-2026-87176 affects the Security component of Oracle Hyperion Financial Management (version 11.2.26.0.000 ). An unauthenticated attacker with network access via TCP and low attack complexity can exploit this vulnerability to gain high confidentiality and integrity impact —specifically, unautho...

EUVD-2026-79831

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion component: Security. The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via TCP to compromise Oracle Hyperion Financial...

CVE-2026-87175

Oracle Hyperion Financial Management version 11.2.26.0.000 has a vulnerability in its Security component. An unauthenticated attacker with network access via TCP can exploit this easily (no user interaction, low complexity) to gain unauthorized read and write access to critical data, resulting in...

CVE-2026-87173

CVE-2026-87173 affects the Security component of Oracle Hyperion Financial Management (version 11.2.26.0.000 ). An unauthenticated attacker with network access via TCP can exploit this vulnerability with low complexity to compromise the product. Successful exploitation results in unauthorized cre...

CVE-2026-87167

CVE-2026-87167 affects Oracle Purchasing (component: G-Invoicing ) in Oracle E-Business Suite , versions 12.2.11 through 12.2.15 . The vulnerability is exploitable over the network via HTTP by a low-privileged attacker with no user interaction, allowing unauthorized creation, deletion, or modific...

CVE-2026-87168

A vulnerability in the Oracle Purchasing product of Oracle E-Business Suite (component: G-Invoicing ) affects supported versions 12.2.10 through 12.2.15 . A low-privileged attacker with network access via HTTP can exploit this vulnerability with low complexity and no user interaction. Successful ...

EUVD-2026-79823

Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite component: G-Invoicing. Supported versions that are affected are 12.2.10-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Purchasing. Successful...

CVE-2026-87166

Oracle Purchasing in Oracle E-Business Suite (component: "Other issue") is affected by a vulnerability in supported versions 12.2.3 through 12.2.15 . The flaw allows a low-privileged attacker with network access via HTTP and no user interaction to compromise the product. Successful exploitation c...

EUVD-2026-79814

Vulnerability in the Oracle HRMS India product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle HRMS India. Successf...

EUVD-2026-79815

Vulnerability in the Oracle HRMS India product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTPS to compromise Oracle HRMS India...

CVE-2026-87156

CVE-2026-87156 affects the Oracle Product Hub component (Internal Operations ) of Oracle E-Business Suite , versions 12.2.3 through 12.2.15 . An easily exploitable vulnerability allows a low-privileged attacker with network access via HTTP to compromise the component. Successful exploitation resu...

EUVD-2026-79812

Vulnerability in the Oracle Order Management product of Oracle E-Business Suite component: Product Diagnostic Tools. Supported versions that are affected are 12.2.4-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Order...

EUVD-2026-79809

Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Product Hub...

EUVD-2026-79811

Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Product Hub...

CVE-2026-87152

Oracle Installed Base (a component of Oracle E-Business Suite , specifically the Create Item Instance feature) contains an easily exploitable vulnerability in versions 12.2.3 through 12.2.15 . A low-privileged attacker with network access via HTTP can exploit it without user interaction to achiev...

EUVD-2026-79808

Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Product Hub...

EUVD-2026-79807

Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite component: Create Item Instance. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Installed Base...

EUVD-2026-79804

Vulnerability in the Oracle Contract Lifecycle Management for Public Sector product of Oracle E-Business Suite component: Award/PO. Supported versions that are affected are 12.2.8-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise...

CVE-2026-87146

A vulnerability in Oracle Hyperion Data Relationship Management (component: Access and security ), affecting version 11.2.26.0.000 , allows a low-privileged attacker with network access via HTTP to easily compromise the product. Successful exploitation can result in unauthorized access to critica...