CVE-2026-87352 is a vulnerability in Oracle PeopleSoft Enterprise PeopleTools (LDAP component) versions 8.61 through 8.63. It allows a low privileged attacker with logon access to the infrastructure to perform unauthorized read and write operations on some PeopleSoft accessible data. The vulnerability has a CVSS 3.1 base score of 4.4, indicating medium severity with impacts on confidentiality and integrity but no impact on availability.
Vulnerability in Oracle GoldenGate (component: Admin Server Executable). Supported versions that are affected are 19.1.0.0.0-19.32.0.0, 21.3-21.23 and 23.4-23.26.3.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTPS to compromise Oracle GoldenGate. Successful attacks of this vulnerability can result in takeover of Oracle GoldenGate. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).
CVE-2026-87350 is a vulnerability in Oracle PeopleSoft Enterprise PeopleTools versions 8.61 through 8.63. It allows a low privileged attacker with logon access to the infrastructure to potentially compromise PeopleSoft Enterprise PeopleTools. Successful exploitation can lead to unauthorized read, update, insert, or delete access to some accessible data and may cause a partial denial of service. The vulnerability is rated medium severity with a CVSS 3.1 base score of 4.5.
CVE-2026-87349 is a vulnerability in Oracle PeopleSoft Enterprise PeopleTools versions 8.61 through 8.63. It allows a high privileged attacker with logon access to the infrastructure to compromise PeopleSoft Enterprise PeopleTools. Exploitation requires human interaction from a user other than the attacker. Successful exploitation can lead to full takeover of the PeopleSoft Enterprise PeopleTools environment. The CVSS 3.1 base score is 6.5, indicating a medium severity with impacts on confidentiality, integrity, and availability.
CVE-2026-87348 is a vulnerability in Oracle PeopleSoft Enterprise PeopleTools (component: Updates Environment Mgmt) affecting versions 8.61 through 8.63. It allows a high privileged attacker with logon access to the infrastructure running PeopleSoft Enterprise PeopleTools to compromise the product. Successful exploitation can lead to unauthorized update, insert, or delete access to some accessible data, unauthorized read access to a subset of data, and the ability to cause a partial denial of service. The CVSS 3.1 base score is 4.2, indicating a medium severity level.
CVE-2026-87347 is a critical vulnerability in Oracle HTTP Server versions 12.2.1.4.0 and 14.1.2.0.0. It allows a low privileged attacker with network access via HTTP to compromise the server, potentially leading to unauthorized creation, deletion, or modification of critical data. The vulnerability also impacts the confidentiality and integrity of data accessible through Oracle HTTP Server and may affect additional Oracle products due to scope change. The CVSS 3.1 base score is 9.6, indicating a high severity with network attack vector, low attack complexity, and no user interaction required. Oracle has released patches addressing this vulnerability as part of their October 2026 Critical Patch Update.
CVE-2026-87346 is a high-severity vulnerability in Oracle HTTP Server versions 12.2.1.4.0 and 14.1.2.0.0, specifically in the Oracle Weblogic Server Proxy Plug-in component. It allows an unauthenticated attacker with network access via HTTP to compromise the server, potentially leading to unauthorized creation, deletion, or modification of critical data. The vulnerability has a CVSS 3.1 base score of 8.7, indicating significant confidentiality and integrity impacts. Oracle has released patches for this vulnerability as part of its October 2026 Critical Patch Update. Customers are strongly advised to apply these patches promptly to mitigate risk.
CVE-2026-87345 is a vulnerability in Oracle PeopleSoft Enterprise PeopleTools (Business Interlink component) affecting versions 8.61 through 8.63. It allows an unauthenticated attacker with network access via HTTP to potentially compromise the system. Successful exploitation requires user interaction from someone other than the attacker. The vulnerability can lead to unauthorized update, insert, or delete operations on accessible data, as well as unauthorized read access to some data. The CVSS 3.1 base score is 6.1, indicating a medium severity with confidentiality and integrity impacts. Oracle has included this vulnerability in its October 2026 Critical Patch Update, recommending patching to mitigate the risk.
CVE-2026-87344 is a vulnerability in Oracle PeopleSoft Enterprise PeopleTools LDAP component affecting versions 8.61 through 8.63. It allows an unauthenticated attacker with network access via HTTP to perform unauthorized read, update, insert, or delete operations on accessible PeopleSoft Enterprise PeopleTools data. The vulnerability has a CVSS 3.1 base score of 6.5, indicating medium severity with impacts on confidentiality and integrity but no impact on availability. Oracle has released security patches addressing this and many other vulnerabilities in their October 2026 Critical Patch Update advisory.
CVE-2026-87343 is a vulnerability in Oracle PeopleSoft Enterprise PeopleTools Portal component versions 8.61 through 8.63. It allows an unauthenticated attacker with network access via HTTP to perform unauthorized read and write operations on accessible data. The vulnerability is rated medium severity with a CVSS 3.1 base score of 4.8, reflecting limited confidentiality and integrity impacts. No known exploits are reported in the wild. Oracle has released a Critical Patch Update advisory that includes patches addressing this and many other vulnerabilities.
CVE-2026-87342 is a vulnerability in Oracle PeopleSoft Enterprise PeopleTools versions 8.61 through 8.63. It allows an unauthenticated attacker with network access via HTTP to potentially gain unauthorized access to critical data or full access to all accessible PeopleSoft Enterprise PeopleTools data. The attacker may also perform unauthorized update, insert, or delete operations on some data. The vulnerability is rated with a CVSS 3.1 base score of 6.5, indicating a medium severity level.
CVE-2026-87340 is a vulnerability in Oracle PeopleSoft Enterprise PeopleTools Portal component versions 8.61 through 8.63. It allows an unauthenticated attacker with network access via HTTP to perform unauthorized update, insert, or delete operations on accessible data. The vulnerability is rated as low severity with a CVSS 3.1 base score of 3.7, primarily impacting data integrity. Exploitation is considered difficult. Oracle has released security patches as part of their October 2026 Critical Patch Update.
CVE-2026-87339 is a low-severity vulnerability in Oracle Siebel CRM Integration (REST component) affecting versions 17.0 through 26.9. It allows an unauthenticated attacker with network access via HTTP to gain unauthorized read access to some accessible data. Exploitation is difficult and requires human interaction from a person other than the attacker.
CVE-2026-87338 is a vulnerability in Oracle Siebel CRM Integration (component: EAI) affecting versions 17.0 through 26.9. It allows an unauthenticated attacker with network access via HTTP to compromise the product. Exploitation is difficult and requires human interaction from a person other than the attacker. Successful exploitation can lead to unauthorized access to critical data and unauthorized modification (update, insert, delete) of some data accessible via Siebel CRM Integration. The vulnerability has a CVSS 3.1 base score of 6.9, indicating medium severity with significant confidentiality impact and limited integrity impact. Oracle has released security patches addressing this vulnerability as part of its October 2026 Critical Patch Update.
CVE-2026-87337 is a critical vulnerability in Oracle Access Manager versions 12.2.1.4.0 and 14.1.2.1.0. It allows an unauthenticated attacker with network access via HTTP to fully compromise Oracle Access Manager. Successful exploitation can lead to unauthorized creation, deletion, or modification of critical data, as well as unauthorized access to all data accessible by Oracle Access Manager. The vulnerability has a CVSS 3.1 base score of 10.0, indicating maximum severity. Oracle has released patches for this and many other vulnerabilities in its October 2026 Critical Patch Update advisory.
CVE-2026-87336 is a vulnerability in Oracle PeopleSoft Enterprise PeopleTools Portal component versions 8.61 through 8.63. It allows a low privileged attacker with network access via HTTP to potentially gain unauthorized access to critical or all accessible data within PeopleSoft Enterprise PeopleTools. The vulnerability is rated medium severity with a CVSS 3.1 base score of 5.3, primarily impacting confidentiality. No known exploits in the wild have been reported. Oracle has released security patches as part of their October 2026 Critical Patch Update.
CVE-2026-87335 is a vulnerability in Oracle E-Business Suite's Applications DBA component (Internal Operations) affecting versions 12.2.3 through 12.2.15. It allows a low privileged attacker with network access via HTTP to compromise the Applications DBA, potentially gaining unauthorized access to critical or all accessible data. The vulnerability has a CVSS 3.1 base score of 6.5, indicating a medium severity with high confidentiality impact but no impact on integrity or availability. Oracle has included this vulnerability in its October 2026 Critical Patch Update advisory, which provides patches for affected products.
CVE-2026-87334 is a vulnerability in Oracle JDeveloper's ADF Faces component affecting versions 12.2.1.4.0 and 14.1.2.0.0. It allows a low privileged attacker with logon access to the infrastructure running Oracle JDeveloper to compromise the application, potentially gaining unauthorized access to critical or all accessible data. The CVSS 3.1 base score is 5.5, indicating a medium severity primarily due to confidentiality impact. Oracle has addressed this vulnerability in its October 2026 Critical Patch Update.
CVE-2026-87333 is a vulnerability in Oracle JD Edwards EnterpriseOne Tools versions 9.2.0.0 through 9.2.26.5. It allows a low privileged attacker with logon access to the infrastructure where the tools execute to potentially compromise the product. Successful exploitation can lead to unauthorized read access to some data and unauthorized update, insert, or delete access to other accessible data. The vulnerability is rated as low severity with a CVSS 3.1 base score of 3.6.
CVE-2026-87332 is a vulnerability in Oracle's JD Edwards EnterpriseOne Tools (versions 9.2.0.0 through 9.2.26.5) that is difficult to exploit and requires a high privileged attacker with logon access to the infrastructure. Successful exploitation can lead to unauthorized update, insert, or delete access to some accessible data and cause a partial denial of service. The CVSS 3.1 base score is 3.0, indicating low severity with impacts on integrity and availability.