CVE-2026-87393 is a vulnerability in Oracle Outside In Technology version 8.5.8 that allows an unauthenticated attacker with network access via HTTP to cause a denial of service (DoS) by triggering a hang or repeated crash. Exploitation requires human interaction from a user other than the attacker. The vulnerability impacts availability but does not affect confidentiality or integrity. The CVSS 3.1 base score is 6.5, indicating a medium severity. Oracle has released security patches as part of its October 2026 Critical Patch Update and strongly recommends applying these patches promptly.
CVE-2026-87392 is a vulnerability in Oracle WebCenter Content: Imaging version 14.1.2.0.0. It allows a low privileged attacker with network access via SOAP to perform unauthorized creation, deletion, or modification of critical data. The vulnerability has a CVSS 3.1 base score of 6.5, indicating a medium severity with high integrity impact but no confidentiality or availability impact. Oracle has released a Critical Patch Update addressing this and many other vulnerabilities.
CVE-2026-87391 is a vulnerability in Oracle WebCenter Content: Imaging affecting versions 12.2.1.4.0 and 14.1.2.0.0. It allows a high privileged attacker with logon access to the infrastructure to compromise the product, requiring human interaction from a third party. The vulnerability can lead to unauthorized access to critical data within WebCenter Content: Imaging and may impact additional products due to scope change. The CVSS 3.1 base score is 5.5, indicating medium severity with significant confidentiality impact but no integrity or availability impact.
CVE-2026-87390 is a vulnerability in Oracle WebCenter Content versions 12.2.1.4.0 and 14.1.2.0.0 that allows an unauthenticated attacker with network access via HTTP to perform unauthorized update, insert, or delete operations on accessible data. Exploitation requires human interaction from a user other than the attacker and can also cause a partial denial of service. The vulnerability has a CVSS 3.1 base score of 5.4, indicating medium severity with impacts on integrity and availability.
CVE-2026-87389 is a vulnerability in Oracle JD Edwards EnterpriseOne Human Resources Management version 9.2. It allows an unauthenticated attacker with network access via HTTP to perform unauthorized update, insert, or delete operations on some accessible data. The vulnerability is difficult to exploit and has a low CVSS score of 3.7, indicating limited impact on integrity without affecting confidentiality or availability. Oracle has addressed this vulnerability in its October 2026 Critical Patch Update.
CVE-2026-87388 is a vulnerability in Oracle JD Edwards EnterpriseOne Configurator version 9.2 that allows a low privileged attacker with network access via HTTP to compromise the configurator. The vulnerability is difficult to exploit but can lead to unauthorized creation, deletion, or modification of critical data accessible through the configurator. The CVSS 3.1 base score is 5.3, indicating a medium severity with integrity impact only.
CVE-2026-87387 is a vulnerability in Oracle JD Edwards EnterpriseOne Homebuilder version 9.2. It allows a low privileged attacker with network access via JDENET to compromise the Homebuilder component. Exploitation can lead to unauthorized creation, deletion, or modification of critical or accessible data. The CVSS 3.1 base score is 6.5, indicating a medium severity with high integrity impact but no confidentiality or availability impact. Oracle has released patches addressing this vulnerability in its October 2026 Critical Patch Update.
CVE-2026-87386 is a vulnerability in Oracle JD Edwards EnterpriseOne General Ledger version 9.2. It allows a low privileged attacker with network access via JDENET to cause a hang or frequent crashes, resulting in a denial of service (DoS). The vulnerability is difficult to exploit and does not impact confidentiality or integrity. The CVSS 3.1 base score is 5.3, indicating a medium severity focused on availability impact.
CVE-2026-87385 is a vulnerability in Oracle JD Edwards EnterpriseOne Human Resources Management version 9.2. It allows an unauthenticated attacker with network access via JDENET to perform unauthorized read and write operations on accessible data. The vulnerability has a medium severity with a CVSS 3.1 base score of 4.8, reflecting limited confidentiality and integrity impacts. Oracle has released security patches addressing this issue as part of its October 2026 Critical Patch Update.
CVE-2026-87384 is a vulnerability in Oracle JD Edwards EnterpriseOne Human Resources Management version 9.2. It allows a low privileged attacker with network access via JDENET to perform unauthorized update, insert, or delete operations on accessible data and cause a partial denial of service. The vulnerability has a CVSS 3.1 base score of 5.4, indicating medium severity with impacts on integrity and availability.
CVE-2026-87383 is a vulnerability in Oracle JD Edwards EnterpriseOne Tools (component: Package Build SEC) affecting versions 9.2.0.0 through 9.2.26.5. It allows a high privileged attacker with logon access to the infrastructure where the tools execute to compromise the product, potentially resulting in full takeover. The CVSS 3.1 base score is 6.7, indicating a medium severity with high confidentiality, integrity, and availability impacts.
CVE-2026-87382 is a vulnerability in Oracle JD Edwards EnterpriseOne Operational Sourcing version 9.2. It allows a low privileged attacker with network access via SMTP to gain unauthorized access to critical or all accessible data within the product. The vulnerability has a CVSS 3.1 base score of 6.5, indicating a medium severity with high confidentiality impact but no integrity or availability impact. Oracle has released security patches addressing this vulnerability in their October 2026 Critical Patch Update.
CVE-2026-87381 is a medium severity vulnerability in Oracle JD Edwards EnterpriseOne Tools versions 9.2.0.0 through 9.2.26.5. It allows a low privileged attacker with network access via JDENET to gain unauthorized read and write access to some data within the product. The vulnerability impacts confidentiality and integrity but does not affect availability. Oracle has released security patches addressing this issue as part of their October 2026 Critical Patch Update.
CVE-2026-87380 is a vulnerability in Oracle JD Edwards EnterpriseOne Sales Order Entry version 9.2. It allows a low privileged attacker with network access via JDENET to gain unauthorized access to critical or all accessible data within the Sales Order Entry component. The vulnerability has a CVSS 3.1 base score of 6.5, indicating a medium severity with high confidentiality impact but no impact on integrity or availability.
CVE-2026-87379 is a vulnerability in Oracle WebCenter Content: Imaging versions 12.2.1.4.0 and 14.1.2.0.0. It allows a low privileged attacker with network access via SOAP to gain unauthorized read access to some data within the product. The vulnerability has a CVSS 3.1 base score of 4.3, indicating a medium severity impact focused on confidentiality. Oracle has included this vulnerability in its October 2026 Critical Patch Update advisory.
CVE-2026-87378 is a vulnerability in Oracle WebCenter Content: Imaging affecting versions 12.2.1.4.0 and 14.1.2.0.0. It allows a low privileged attacker with network access via HTTP to gain unauthorized access to critical or all accessible data within the product. The vulnerability has a CVSS 3.1 base score of 6.5, indicating a medium severity with a high confidentiality impact but no integrity or availability impact.
CVE-2026-87377 is a vulnerability in Oracle WebCenter Content: Imaging version 14.1.2.0.0. It allows a low privileged attacker with network access via SOAP to potentially create, delete, or modify critical data, or gain unauthorized access to all data accessible by the product. The vulnerability is rated with a CVSS 3.1 base score of 6.8, indicating medium severity. The attack complexity is high, requiring specific conditions to exploit, and no user interaction is needed. Oracle has included this vulnerability in its October 2026 Critical Patch Update advisory.
CVE-2026-87376 is a vulnerability in Oracle WebCenter Content: Imaging version 14.1.2.0.0 that allows a low privileged attacker with network access via HTTP to potentially gain unauthorized creation, deletion, or modification access to critical data. The vulnerability is difficult to exploit but can lead to unauthorized access to all data accessible by WebCenter Content: Imaging. The CVSS 3.1 base score is 6.8, indicating a medium severity level.
CVE-2026-87375 is a vulnerability in Oracle WebCenter Content: Imaging versions 12.2.1.4.0 and 14.1.2.0.0. It allows a low privileged attacker with network access via HTTP to gain unauthorized access to critical or all accessible data within the product. The vulnerability has a CVSS 3.1 base score of 6.5, indicating a medium severity with a high confidentiality impact but no impact on integrity or availability.
CVE-2026-87374 is a vulnerability in Oracle WebCenter Content versions 12.2.1.4.0 and 14.1.2.0.0 that allows a low privileged attacker with network access via HTTP to potentially compromise the system. Successful exploitation can lead to unauthorized creation, deletion, or modification of critical data or complete access to all data accessible by Oracle WebCenter Content. The vulnerability has a CVSS 3.1 base score of 6.8, indicating a medium severity level.