CVE-2026-87265

CVE-2026-87265 affects the Oracle Purchasing product of Oracle E-Business Suite (component: Other issue ), versions 12.2.3 through 12.2.15 . A low-privileged attacker with network access via HTTP can exploit this vulnerability to compromise Oracle Purchasing, resulting in unauthorized creation, d...

CVE-2026-87264

CVE-2026-87264 affects the Integration Broker component of Oracle PeopleSoft Enterprise PeopleTools , versions 8.61 through 8.63 . The vulnerability is exploitable over the network via HTTP by a low-privileged attacker without user interaction, resulting in unauthorized creation, deletion, or mod...

CVE-2026-87261

CVE-2026-87261 affects Oracle Agile Engineering Data Management (Oracle Supply Chain), specifically the Engineering Communication Interface component in supported version 6.2.1 . A low-privileged attacker with local logon can exploit this vulnerability to achieve unauthorized access to critical d...

CVE-2026-87260

Oracle Agile Engineering Data Management (Oracle Supply Chain), component Engineering Communication Interface , version 6.2.1 is affected by an easily exploitable vulnerability (CVSS 3.1: 7.3 HIGH ). An attacker with low privileges and access to the physical communication segment attached to the ...

CVE-2026-87262

CVE-2026-87262 affects the Engineering Communication Interface component of Oracle Agile Engineering Data Management (Oracle Supply Chain), version 6.2.1 . An unauthenticated attacker with access to the adjacent physical communication segment can exploit this with low complexity to achieve high c...

CVE-2026-87259

CVE-2026-87259 affects the Engineering Communication Interface component of Oracle Agile Engineering Data Management (Oracle Supply Chain), version 6.2.1 . A low-privileged attacker with local logon access can exploit this vulnerability to achieve high confidentiality and integrity impacts , incl...

CVE-2026-87258

Oracle Agile PLM (Oracle Supply Chain) is affected in component Folders, Files & Attachments on supported version 9.3.6 . A low-privileged attacker with network access via HTTP can exploit this vulnerability, though successful exploitation requires human interaction from a user other than the att...

CVE-2026-87257

Oracle Agile PLM (Oracle Supply Chain), specifically the SDK component in version 9.3.6 , contains a vulnerability that a low-privileged attacker can exploit over HTTP over the network with low complexity and no user interaction. The attack achieves a scope change , meaning successful exploitatio...

CVE-2026-87256

Oracle Agile PLM version 9.3.6 (component: Application Server) is affected by an easily exploitable vulnerability that allows a low-privileged attacker with network access via HTTP to compromise the product. Due to scope change , attacks may significantly impact additional products beyond Agile P...

CVE-2026-87254

CVE-2026-87254 affects Oracle Agile PLM (product of Oracle Supply Chain), specifically the Folders, Files & Attachments component, in supported version 9.3.6 . The vulnerability is difficult to exploit but allows a low-privileged attacker with network access via HTTP (no user interaction required...

CVE-2026-87250

Oracle Hyperion Financial Management (component: Security ), version 11.2.26.0.000 , is affected by an easily exploitable vulnerability that allows a low-privileged attacker with network access via HTTP to compromise the product. Successful exploitation requires human interaction from a person ot...

CVE-2026-87253

Oracle Agile PLM (component: Web Client , affected version 9.3.6 ) contains a vulnerability allowing an unauthenticated attacker with network access via HTTP to compromise the product. Successful exploitation requires human interaction from a person other than the attacker and involves a scope ch...

CVE-2026-87249

Oracle Hyperion Financial Management 11.2.26.0.000 (component: Security ) is affected by an easily exploitable vulnerability allowing an unauthenticated attacker with network access via HTTP to compromise the product. Successful exploitation requires user interaction from a person other than the ...

CVE-2026-87252

CVE-2026-87252 affects Oracle Agile PLM (Oracle Supply Chain, component: Application Server ), version 9.3.6 . The vulnerability allows an unauthenticated attacker with access to the physical communication segment attached to the hardware where Agile PLM executes to compromise the application. It...

CVE-2026-87248

A vulnerability in Oracle Hyperion Financial Management (component: Security ), affecting supported version 11.2.26.0.000 , allows a high-privileged attacker with local logon to the hosting infrastructure to compromise the application, resulting in a takeover with high impact on confidentiality, ...

CVE-2026-87247

Oracle Hyperion Financial Management (component: Security ), version 11.2.26.0.000 , is affected by a network-based vulnerability exploitable over HTTP by a low-privileged attacker . The vulnerability is rated difficult to exploit (high attack complexity) but allows a successful attacker to achie...

CVE-2026-87246

Oracle Hyperion Financial Management (version 11.2.26.0.000 ) contains a vulnerability in the Security component. A high-privileged attacker with network access via HTTP can exploit it with low complexity and no user interaction, resulting in full takeover of the product (high impact to confident...

CVE-2026-87245

Oracle Hyperion Financial Management version 11.2.26.0.000 is affected by a vulnerability in the Security component. An attacker with low privileges and access to the adjacent physical communication segment can exploit this with low complexity and no user interaction to achieve full takeover (hig...

CVE-2026-87243

Oracle Hyperion Financial Management (component: Security, version 11.2.26.0.000 ) is affected by a difficult-to-exploit vulnerability that allows an unauthenticated attacker with access to the adjacent physical communication segment to compromise the product. The vulnerability carries a scope ch...

CVE-2026-87244

Oracle Hyperion Financial Management (component: Security ) version 11.2.26.0.000 is affected by an easily exploitable vulnerability that allows a high-privileged attacker with network access via HTTP to achieve takeover of the product. The CVSS 3.1 base score is 7.2 (HIGH) , reflecting high impa...