CVE-2026-83394

A vulnerability exists in the Internal Operations component of the Oracle Demand Planning product within Oracle Supply Chain. Affected versions include 12.1 and 12.2 . A low-privileged attacker with network access via HTTP can compromise Oracle Demand Planning, though the attack requires human in...

CVE-2026-83390

A vulnerability exists in the Diagnostics component of the Oracle Applications Manager product within Oracle E-Business Suite , affecting supported versions 12.2.3-12.2.15 . A low-privileged attacker with network access via HTTP can exploit this difficult-to-exploit vulnerability to compromise Or...

CVE-2026-83386

A vulnerability exists in the Internal Operations component of the Oracle HRMS (US) product within Oracle E-Business Suite . Affected versions range from 12.2.3 to 12.2.15 . A low-privileged attacker with network access via HTTP can easily exploit this flaw to compromise the product. Successful e...

CVE-2026-83387

A vulnerability exists in the JDBC component of Oracle Java SE , Oracle GraalVM for JDK , and Oracle GraalVM Enterprise Edition . Affected versions include Oracle Java SE 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, and 27 ; Oracle GraalVM for JDK 17.0.20.1 and 21.0.12.1 ; and Or...

CVE-2026-83384

A vulnerability exists in the Internal Operations component of Oracle HRMS (US) within the Oracle E-Business Suite. Affected versions range from 12.2.3 to 12.2.15 . A low-privileged attacker with network access can exploit this via HTTP to compromise the system, potentially leading to unauthorize...

CVE-2026-83385

The Oracle HRMS (US) product within the Oracle E-Business Suite (specifically the Internal Operations component) is vulnerable in versions 12.2.3-12.2.15 . An attacker with low privileges and network access via HTTP can exploit this vulnerability to compromise the system. Successful exploitation ...

CVE-2026-83382

A vulnerability exists in the Internal Operations component of the Oracle Report Manager product within Oracle E-Business Suite , affecting supported versions 12.2.3-12.2.15 . An attacker with low privileges and network access via HTTPS can exploit this flaw to compromise the product. Successful ...

CVE-2026-83383

A vulnerability exists in the Oracle HRMS (US) product within Oracle E-Business Suite (component: Internal Operations ) affecting versions 12.2.3-12.2.15 . A low-privileged attacker with network access via HTTP can easily exploit this flaw to compromise the product, potentially resulting in unaut...

CVE-2026-83381

A vulnerability exists in the Security component of Oracle Java SE , affecting versions including 8u503, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, and 27, as well as specific Oracle GraalVM versions. It also impacts Oracle GraalVM Enterprise Edition 21.3.19.1.1. This high-complexity vulnerabilit...

CVE-2026-83380

A vulnerability exists in the JAAS component of Oracle Java SE , Oracle GraalVM for JDK , and Oracle GraalVM Enterprise Edition . Affected versions include Oracle Java SE (8u503, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27), Oracle GraalVM for JDK (17.0.20.1, 21.0.12.1), and Oracle GraalVM Ente...

CVE-2026-83378

A vulnerability exists in the Compiler component of Oracle Java SE affecting versions 21.0.12.1 , 25.0.4.1 , and 27 . An unauthenticated attacker with network access via multiple protocols can exploit this high-complexity vulnerability by supplying data to APIs, specifically without using Untrust...

CVE-2026-83374

A vulnerability exists in the Security component of Oracle Java SE , Oracle GraalVM for JDK , and Oracle GraalVM Enterprise Edition . Affected versions include Oracle Java SE 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27 ; Oracle GraalVM for JDK 17.0.20.1 and 21.0.12.1 ; and Or...

CVE-2026-83358

The Oracle HRMS (Norway) product, specifically within the Internal Operations component of Oracle E-Business Suite , is affected by CVE-2026-83358 in versions 12.2.3-12.2.15 . A low-privileged attacker with network access via HTTP can easily exploit this vulnerability to compromise the system. Su...

CVE-2026-60743

A vulnerability exists in the Weblogic component of Oracle PeopleSoft Enterprise PeopleTools (versions 8.61-8.63). An unauthenticated attacker with network access via TLS can exploit this difficult-to-exploit vulnerability to compromise the system. Successful exploitation may result in unauthoriz...

CVE-2026-47025

A vulnerability exists in the Utility component of Oracle Solaris (affected versions 11.3 and 11.4 ). A low privileged attacker with network access via HTTP can easily exploit this flaw to compromise the system, potentially leading to a complete takeover of Oracle Solaris. The vulnerability is as...

CVE-2026-101856

A vulnerability exists in the Product Diagnostic Tools component of the Oracle Order Management product within Oracle E-Business Suite , affecting supported versions 12.2.3-12.2.15 . A low-privileged attacker with network access via HTTP can easily exploit this flaw to compromise the system. Succ...

CVE-2026-101842

A vulnerability exists in the Strategic Network Optimization product of Oracle E-Business Suite (component: Installation of SNO) affecting versions 12.2.3-12.2.15 . An unauthenticated attacker with network access via HTTP can compromise the product, potentially leading to a takeover , provided th...

CVE-2026-101840

A vulnerability exists in the Oracle Contract Lifecycle Management for Public Sector product of Oracle E-Business Suite within the Award/PO component. Affected supported versions range from 12.2.3 to 12.2.15 . A high-privileged attacker with network access via HTTP can easily exploit this vulnera...

CVE-2026-101832

A vulnerability exists in the Product Diagnostic Tools component of the Oracle Order Management product within Oracle E-Business Suite (affected versions 12.2.3-12.2.15 ). A low-privileged attacker with network access via HTTP can easily exploit this flaw to compromise the system. Successful expl...

CVE-2026-101830

A vulnerability exists in the Internal Operations component of the Oracle Project Contracts product within Oracle E-Business Suite (versions 12.2.3-12.2.15 ). A low privileged attacker with network access via HTTP can exploit this vulnerability to compromise the product, potentially leading to un...