CVE-2026-87311 is a vulnerability in Oracle VM VirtualBox version 7.2.16 that allows a low privileged attacker with logon access to the infrastructure to cause a hang or repeated crash, resulting in a complete denial of service (DoS). The vulnerability is difficult to exploit and impacts availability without compromising confidentiality or integrity. The vulnerability has a CVSS 3.1 base score of 5.6, indicating medium severity. Oracle has included this vulnerability in its October 2026 Critical Patch Update advisory.
CVE-2026-87310 is a high-severity vulnerability in Oracle JD Edwards EnterpriseOne Tools (component: Database and Comm SEC) affecting versions 9.2.0.0 through 9.2.26.5. It allows a low privileged attacker with network access via JDENET to compromise the product, potentially leading to complete takeover. The vulnerability has a CVSS 3.1 base score of 8.8, indicating high impact on confidentiality, integrity, and availability. Oracle has released patches for this vulnerability as part of its October 2026 Critical Patch Update.
CVE-2026-87309 is a high-severity vulnerability in Oracle JD Edwards EnterpriseOne Tools (component: Package Build SEC) affecting versions 9.2.0.0 through 9.2.26.5. It allows a low privileged attacker with network access via HTTP to compromise the product, leading to unauthorized creation, deletion, or modification of critical data, and the ability to cause a hang or repeated crash resulting in denial of service. The vulnerability has a CVSS 3.1 base score of 8.1, reflecting significant integrity and availability impacts. Oracle has released patches for this vulnerability as part of its October 2026 Critical Patch Update. Customers are strongly advised to apply these patches promptly to mitigate risk.
CVE-2026-87308 is a vulnerability in Oracle JD Edwards EnterpriseOne Tools versions 9.2.0.0 through 9.2.26.5. It allows a low privileged attacker with logon access to the infrastructure where the tools execute to compromise the product. Successful exploitation can lead to unauthorized creation, deletion, or modification of critical data or all data accessible by JD Edwards EnterpriseOne Tools, resulting in high confidentiality and integrity impacts. The vulnerability has a CVSS 3.1 base score of 7.1, indicating high severity.
CVE-2026-87307 is a high-severity vulnerability in Oracle JD Edwards EnterpriseOne Tools (Interoperability SEC component) versions 9.2.0.0 through 9.2.26.5. It allows a low privileged attacker with network access via HTTP to gain unauthorized access to critical or all accessible data within JD Edwards EnterpriseOne Tools and to cause a partial denial of service. The vulnerability has a CVSS 3.1 base score of 7.1, reflecting high confidentiality impact and low availability impact. Oracle has released patches for this vulnerability as part of its October 2026 Critical Patch Update. Users are strongly advised to apply these patches promptly to mitigate the risk.
CVE-2026-87306 is a high-severity vulnerability in Oracle JD Edwards EnterpriseOne Tools (Interoperability SEC component) versions 9.2.0.0 through 9.2.26.5. It allows a low-privileged attacker with network access via JDENET to compromise the product, potentially leading to unauthorized creation, deletion, or modification of critical data. The vulnerability has a CVSS 3.1 base score of 8.1, indicating significant confidentiality and integrity impacts but no availability impact. Oracle has released patches for this vulnerability as part of its October 2026 Critical Patch Update. Customers are strongly advised to apply these patches promptly to mitigate risk.
CVE-2026-87305 is a vulnerability in Oracle JD Edwards EnterpriseOne Tools versions 9.2.0.0 through 9.2.26.5. It allows an unauthenticated attacker with network access via SMTP to potentially take over the affected software. The vulnerability is rated high severity with a CVSS 3.1 base score of 8.1, impacting confidentiality, integrity, and availability.
CVE-2026-87304 is a high-severity vulnerability in Oracle Outside In Technology version 8.5.8. It allows an unauthenticated attacker with network access via HTTP to compromise the product, potentially leading to unauthorized access to critical or all accessible data. The vulnerability has a CVSS 3.1 base score of 8.6, indicating a significant confidentiality impact. Oracle has included this vulnerability in its October 2026 Critical Patch Update, which contains numerous security patches across multiple products.
CVE-2026-87303 is a vulnerability in Oracle VM VirtualBox version 7.2.16 that allows a low privileged attacker with logon access to cause a denial of service by hanging or crashing the product. Exploitation requires human interaction from a user other than the attacker. The vulnerability impacts availability and has a CVSS 3.1 base score of 5.9. The vulnerability may also affect additional products due to scope change. Oracle has published a Critical Patch Update advisory that includes security patches for multiple products, including Oracle VM VirtualBox.
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle WebLogic Server accessible data as well as unauthorized access to critical data or complete access to all Oracle WebLogic Server accessible data. CVSS 3.1 Base Score 9.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N).
CVE-2026-87301 is a high-severity vulnerability in Oracle VM VirtualBox version 7.2.16. It allows a low privileged attacker with logon access to the host infrastructure to compromise Oracle VM VirtualBox. Successful exploitation can lead to unauthorized access to critical data and cause denial of service by crashing the application. The vulnerability impacts confidentiality and availability with a CVSS 3.1 base score of 8.4. Oracle has published a Critical Patch Update advisory addressing this and other vulnerabilities.
CVE-2026-87300 is a high severity vulnerability in the Oracle Weblogic Server Proxy Plug-in that allows an unauthenticated attacker with network access via HTTP to compromise the plug-in. The vulnerability is difficult to exploit but can lead to unauthorized creation, deletion, or modification of critical data accessible through the plug-in. The vulnerability affects specific versions of Oracle Weblogic Server Proxy Plug-in and may impact additional Oracle products due to scope change. The CVSS 3.1 base score is 8.7, indicating high confidentiality and integrity impact without availability impact.
CVE-2026-87299 is a vulnerability in Oracle WebCenter Content versions 12.2.1.4.0 and 14.1.2.0.0. It allows an unauthenticated attacker with network access via HTTP to perform unauthorized update, insert, or delete operations on accessible data. Successful exploitation requires human interaction from a user other than the attacker and can impact additional Oracle products beyond WebCenter Content. The vulnerability has a CVSS 3.1 base score of 6.1, indicating medium severity with confidentiality and integrity impacts.
CVE-2026-87298 is a vulnerability in Oracle WebCenter Content versions 12.2.1.4.0 and 14.1.2.0.0. It allows a low privileged attacker with network access via HTTP to gain unauthorized access to critical or all accessible data within Oracle WebCenter Content. The vulnerability has a CVSS 3.1 base score of 6.5, indicating a medium severity with high confidentiality impact but no impact on integrity or availability.
CVE-2026-87297 is a vulnerability in Oracle Communications Billing and Revenue Management versions 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0, and 15.2.0.0.0. It allows a high privileged attacker with logon access to the infrastructure to compromise the product, potentially resulting in full takeover. The vulnerability has a CVSS 3.1 base score of 6.7, indicating medium severity with high impact on confidentiality, integrity, and availability.
CVE-2026-87296 is a high-severity vulnerability in Oracle Access Manager versions 12.2.1.4.0 and 14.1.2.1.0. It allows an unauthenticated attacker with network access via HTTP to compromise the product, potentially gaining unauthorized access to critical or all accessible data. The vulnerability has a CVSS 3.1 base score of 7.5, indicating a significant confidentiality impact without requiring user interaction or privileges. Oracle has released patches for this vulnerability as part of its October 2026 Critical Patch Update.
CVE-2026-87295 is a vulnerability in Oracle HRMS (India) component of Oracle E-Business Suite versions 12.2.3 through 12.2.15. It allows a low privileged attacker with logon access to the infrastructure where Oracle HRMS (India) runs to compromise the product. Successful exploitation can lead to unauthorized access to critical or all accessible data within Oracle HRMS (India). The vulnerability has a CVSS 3.1 base score of 6.5, indicating a medium severity with significant confidentiality impact but no integrity or availability impact. Oracle has included this vulnerability in its October 2026 Critical Patch Update, which contains numerous security patches across multiple products. Customers are strongly advised to apply the available patches promptly.
CVE-2026-87294 is a medium severity vulnerability in Oracle Java SE, Oracle GraalVM for JDK, and Oracle GraalVM Enterprise Edition. It allows an unauthenticated attacker with network access via multiple protocols to gain unauthorized read and write access to certain accessible data. The vulnerability affects specific versions of Oracle Java SE, Oracle GraalVM for JDK, and Oracle GraalVM Enterprise Edition. Exploitation can occur through APIs, including web services, and also applies to sandboxed Java Web Start applications or applets that run untrusted code relying on the Java sandbox for security. The CVSS 3.1 base score is 6.5, indicating a moderate impact on confidentiality and integrity without availability impact. Oracle has released patches for this vulnerability as part of their October 2026 Critical Patch Update.
CVE-2026-87293 is a vulnerability in Oracle Java SE's RMI component affecting versions 8u503 and 8u503-perf, as well as Oracle GraalVM Enterprise Edition 21.3.19.1.1. It allows an unauthenticated attacker with network access via multiple protocols to perform unauthorized read and write operations on accessible data. The vulnerability is difficult to exploit and does not require user interaction. It may also impact additional Oracle products beyond Java SE. The CVSS 3.1 base score is 5.4, indicating medium severity.
CVE-2026-87292 is a vulnerability in Oracle Java SE, Oracle GraalVM for JDK, and Oracle GraalVM Enterprise Edition affecting the Networking component. It allows an unauthenticated attacker with network access via multiple protocols to perform unauthorized update, insert, or delete operations on accessible data. The vulnerability can be exploited through APIs, including web services supplying data to these APIs, and affects sandboxed Java Web Start applications or applets running untrusted code. The CVSS 3.1 base score is 3.7, indicating a low severity with integrity impact only.