CVE-2026-83025

Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via TCP to compromise Oracle...

CVE-2026-83011

Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware component: Centralized Thirdparty Jars. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to...

CVE-2026-76692

A vulnerability in HPE Networking EdgeConnect SD-WAN Gateways could allow an unauthenticated adjacent attacker to obtain limited information from memory and disrupt the normal operation of the affected service. Successful exploitation could result in a denial of service system crash or the...

CVE-2026-73950

Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware component: Authentication Engine. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

CVE-2026-73954

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft component: Business Interlink. Supported versions that are affected are 8.61-8.63. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterpris...

CVE-2026-73958

Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware component: Authentication Engine. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

CVE-2026-73951

Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware component: Portlet Services. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

CVE-2026-73953

Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware component: Portlet Services. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

CVE-2026-73941

Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware component: Authentication Engine. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

CVE-2026-73947

Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware component: Authentication Engine. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

CVE-2026-70913

Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Identity Manager...

CVE-2026-70756

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3, IIOP to...

CVE-2026-87273

This vulnerability affects the Core component of Oracle VM VirtualBox version 7.2.16 (Oracle Virtualization). An unauthenticated attacker with local access to the host infrastructure can exploit it with low complexity, though user interaction is required. The vulnerability allows takeover of Orac...

CVE-2026-87266

Oracle Agile PLM (Oracle Supply Chain), specifically the Application Server component in version 9.3.6 , is vulnerable to an easily exploitable, unauthenticated network attack via HTTP . A successful attack can result in unauthorized access to critical data or complete access to all Agile PLM-acc...

CVE-2026-87253

Oracle Agile PLM (component: Web Client , affected version 9.3.6 ) contains a vulnerability allowing an unauthenticated attacker with network access via HTTP to compromise the product. Successful exploitation requires human interaction from a person other than the attacker and involves a scope ch...

CVE-2026-87243

Oracle Hyperion Financial Management (component: Security, version 11.2.26.0.000 ) is affected by a difficult-to-exploit vulnerability that allows an unauthenticated attacker with access to the adjacent physical communication segment to compromise the product. The vulnerability carries a scope ch...

EUVD-2026-79886

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion component: Security. The supported version that is affected is 11.2.26.0.000. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hyperion Financia...

CVE-2026-87230

CVE-2026-87230 affects the Security component of Oracle Hyperion Financial Management (version 11.2.26.0.000 ). An unauthenticated attacker with network access via HTTP can exploit this vulnerability with low complexity and no user interaction. The scope is changed , meaning attacks may significa...

CVE-2026-87228

CVE-2026-87228 affects the Security component of Oracle Hyperion Financial Management version 11.2.26.0.000 . An unauthenticated attacker with network access via HTTP can exploit this vulnerability to gain unauthorized access to critical data or complete access to all accessible data, as well as ...

CVE-2026-87222

Oracle Hyperion Financial Management (component: Security ), version 11.2.26.0.000 , is affected by an easily exploitable vulnerability that allows an unauthenticated attacker with network access via HTTP to cause a complete denial of service (hang or frequently repeatable crash) of the applicati...