CVE-2026-87340

A vulnerability exists in the Portal component of Oracle PeopleSoft Enterprise PeopleTools (affected versions 8.61-8.63 ). This difficult to exploit flaw allows an unauthenticated attacker with network access via HTTP to compromise the product. Successful exploitation can result in unauthorized u...

CVE-2026-87332

A vulnerability exists in Oracle JD Edwards EnterpriseOne Tools (component: E1 Dev Platform Tech - Cloud ) affecting versions 9.2.0.0-9.2.26.5 . This high-complexity vulnerability allows a high-privileged attacker with infrastructure access to compromise the product. Successful exploitation may l...

CVE-2026-87333

A vulnerability exists in the JD Edwards EnterpriseOne Tools product (component: Enterprise Infrastructure SEC ) from Oracle JD Edwards, affecting versions 9.2.0.0-9.2.26.5 . A low-privileged attacker with logon access to the infrastructure where the tools execute can exploit this difficult-to-ex...

CVE-2026-87331

A vulnerability exists in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards within the E1 Dev Platform Tech - UNIX component (versions 9.2.0.0-9.2.26.5 ). A high-privileged attacker with local infrastructure access can exploit this to compromise the system, potentially leading to un...

CVE-2026-87329

A vulnerability exists in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure SEC ) affecting versions 9.2.0.0-9.2.26.5 . A low-privileged attacker with local access to the infrastructure can exploit this difficult-to-exploit vulnerability to comp...

CVE-2026-87325

A vulnerability exists in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards, specifically within the Enterprise Infrastructure SEC component. Affected versions include 9.2.0.0-9.2.26.5 . This high-complexity vulnerability allows a low-privileged attacker with network access via JDEN...

CVE-2026-87324

A vulnerability exists in the Enterprise Infrastructure SEC component of JD Edwards EnterpriseOne Tools (versions 9.2.0.0-9.2.26.5 ). A low-privileged attacker with network access via JDENET can exploit this difficult-to-exploit flaw to cause a complete Denial of Service (DoS) by hanging or crash...

CVE-2026-87314

A vulnerability exists in the Interoperability SEC component of Oracle JD Edwards EnterpriseOne Tools (versions 9.2.0.0-9.2.26.5 ). This issue allows an unauthenticated attacker with network access via TLS to compromise the product. Successful exploitation can result in unauthorized access , crea...

CVE-2026-87309

A vulnerability exists in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards , specifically affecting the Package Build SEC component in versions 9.2.0.0-9.2.26.5 . A low-privileged attacker with network access via HTTP can exploit this flaw to compromise the tools. Successful exploi...

CVE-2026-87306

A vulnerability exists in the Interoperability SEC component of Oracle JD Edwards EnterpriseOne Tools (versions 9.2.0.0-9.2.26.5 ). A low-privileged attacker with network access via JDENET can exploit this flaw to compromise the system, potentially gaining unauthorized access to, or performing un...

CVE-2026-87299

A vulnerability exists in the Oracle WebCenter Content product (component: Content Server ) within Oracle Fusion Middleware . Affected versions include 12.2.1.4.0 and 14.1.2.0.0 . An unauthenticated attacker with network access via HTTP can exploit this vulnerability to compromise the system, pro...

CVE-2026-87292

A vulnerability exists in the Networking component of Oracle Java SE , Oracle GraalVM for JDK , and Oracle GraalVM Enterprise Edition . Affected versions include Oracle Java SE (8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27), Oracle GraalVM for JDK (17.0.20.1, 21.0.12.1), and O...

CVE-2026-83401

The Oracle Identity Manager product within Oracle Fusion Middleware is affected by a vulnerability in the OIM Legacy UI component, specifically in versions 12.2.1.4.0 and 14.1.2.1.0 . An unauthenticated attacker with network access via HTTP can compromise the system, provided they can elicit nece...

CVE-2026-83381

A vulnerability exists in the Security component of Oracle Java SE , affecting versions including 8u503, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, and 27, as well as specific Oracle GraalVM versions. It also impacts Oracle GraalVM Enterprise Edition 21.3.19.1.1. This high-complexity vulnerabilit...

CVE-2026-83376

A vulnerability exists in the JSSE component of Oracle Java SE , Oracle GraalVM for JDK , and Oracle GraalVM Enterprise Edition . Affected versions include Oracle Java SE 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, and 27; Oracle GraalVM for JDK 17.0.20.1 and 21.0.12.1; and Orac...

CVE-2026-83377

A vulnerability exists in the Mobile Applications component of Oracle HRMS (US) , part of the Oracle E-Business Suite, affecting versions 12.2.3-12.2.15 . A low-privileged attacker with network access via HTTP can exploit this issue to compromise the product, though the attack requires human inte...

CVE-2026-83375

The Oracle PeopleSoft Enterprise HCM Human Resources product (component: Administer Workforce ) is affected by a high-complexity vulnerability in version 9.2 . A high-privileged attacker with network access via HTTP can compromise the system, but the attack requires human interaction from a third...

CVE-2026-70869

A vulnerability exists in the Integration Broker component of Oracle PeopleSoft (PeopleSoft Enterprise PeopleTools), affecting supported versions 8.61-8.63 . This flaw allows an unauthenticated attacker with network access via HTTP to compromise the system. While the vulnerability is difficult to...

CVE-2026-60968

A vulnerability exists in the Updates Environment Mgmt component of Oracle PeopleSoft Enterprise PeopleTools (affected versions 8.61-8.63 ). A high privileged attacker with access to the underlying infrastructure can exploit this issue to compromise the software. Successful exploitation may lead ...

CVE-2026-70860

Oracle PeopleSoft PeopleSoft Enterprise FIN Common Objects Argentina (specifically the eProcurement component) version 9.1 is affected by a difficult to exploit vulnerability. A low-privileged attacker with network access via HTTP could compromise the system, potentially gaining unauthorized crea...