CVE-2026-83126

Vulnerability in the Oracle Sales Online product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Sales Online...

CVE-2026-83046

Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware component: Runtime Tools. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle WebCente...

CVE-2026-83047

Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware component: Runtime Tools. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebCent...

CVE-2026-83050

Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware component: Runtime Tools. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle WebCente...

CVE-2026-83052

Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware component: Runtime Tools. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle WebCent...

EUVD-2026-79914

Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain component: Engineering Communication Interface. The supported version that is affected is 6.2.1. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Orac...

CVE-2026-87261

CVE-2026-87261 affects Oracle Agile Engineering Data Management (Oracle Supply Chain), specifically the Engineering Communication Interface component in supported version 6.2.1 . A low-privileged attacker with local logon can exploit this vulnerability to achieve unauthorized access to critical d...

CVE-2026-87258

Oracle Agile PLM (Oracle Supply Chain) is affected in component Folders, Files & Attachments on supported version 9.3.6 . A low-privileged attacker with network access via HTTP can exploit this vulnerability, though successful exploitation requires human interaction from a user other than the att...

CVE-2026-87236

Oracle Hyperion Financial Management version 11.2.26.0.000 is affected by a vulnerability in its Security component. A low-privileged attacker with network access via HTTP can exploit this with low complexity and no user interaction to achieve unauthorized access to critical or all accessible dat...

EUVD-2026-79864

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion component: Security. The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hyperion Financial...

CVE-2026-87192

CVE-2026-87192 affects the Security component of Oracle Hyperion Financial Management version 11.2.26.0.000 . A low-privileged attacker with network access via HTTP can exploit this vulnerability to gain unauthorized access to critical data accessible by the application and cause a partial denial...

EUVD-2026-79846

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion component: Security. The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hyperion Financial...

CVE-2026-87177

Oracle Hyperion Financial Management version 11.2.26.0.000 is affected by a vulnerability in its Security component. A low-privileged attacker with network access via HTTP can exploit this with low complexity and no user interaction. Due to scope change , attacks may significantly impact addition...

EUVD-2026-79822

Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite component: G-Invoicing. Supported versions that are affected are 12.2.11-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Purchasing. Successful...

EUVD-2026-79821

Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite component: Other issue. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Purchasing. Successful attac...

CVE-2026-87161

Oracle HRMS (India) , a component of Oracle E-Business Suite (Internal Operations), is affected in supported versions 12.2.3 through 12.2.15 . An easily exploitable vulnerability allows a low-privileged attacker with network access via HTTP to compromise the product. Due to scope change , attacks...

CVE-2026-87158

Oracle E-Business Suite – Order Management (Enterprise Command Center) in version V16 is affected by a network-based vulnerability exploitable via HTTP by a low-privileged attacker . The attack requires no user interaction and has low complexity , making it easily exploitable. Successful exploita...

CVE-2026-87156

CVE-2026-87156 affects the Oracle Product Hub component (Internal Operations ) of Oracle E-Business Suite , versions 12.2.3 through 12.2.15 . An easily exploitable vulnerability allows a low-privileged attacker with network access via HTTP to compromise the component. Successful exploitation resu...

CVE-2026-87157

A vulnerability in the Product Diagnostic Tools component of Oracle Order Management (Oracle E-Business Suite) affects supported versions 12.2.4 through 12.2.15 . A low-privileged attacker with network access via HTTP can exploit it with low complexity and no user interaction, resulting in high c...

CVE-2026-87153

CVE-2026-87153 is a vulnerability in the Oracle Product Hub product of Oracle E-Business Suite , specifically in the Internal Operations component. Supported versions 12.2.3 through 12.2.15 are affected. An easily exploitable flaw allows a low-privileged attacker with network access via HTTP to c...