Known Exploited Vulnerabilities (KEV)

ID Title Severity CVSS EPSS Source Updated
cve-2026-87395 Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Core). The supported version that is affected is 8.5.8. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Outside In Technology. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Outside In Technology. CVSS 3.1 Base Score 7.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H). HIGH 7.5 N/A cvelistv5 2026-11-04
cve-2026-87394 Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Core). The supported version that is affected is 8.5.8. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Outside In Technology. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Outside In Technology accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Outside In Technology. CVSS 3.1 Base Score 8.2 (Confidentiality and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L). HIGH 8.2 N/A cvelistv5 2026-11-04
cve-2026-87393 Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Core). The supported version that is affected is 8.5.8. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Outside In Technology. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Outside In Technology. CVSS 3.1 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H). MEDIUM 6.5 N/A cvelistv5 2026-11-04
cve-2026-87392 cve-2026-87392 MEDIUM 6.5 N/A cvelistv5 unknown
cve-2026-87391 cve-2026-87391 MEDIUM 5.5 N/A cvelistv5 unknown
cve-2026-87390 Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server) MEDIUM 5.4 N/A cvelistv5 2026-11-03
cve-2026-87389 Vulnerability in the JD Edwards EnterpriseOne Human Resources Management product of Oracle JD Edwards (component: Hum... LOW 3.7 N/A cvelistv5 2026-10-28
cve-2026-87388 Vulnerability in the JD Edwards EnterpriseOne Configurator product of Oracle JD Edwards (component: Configuration Man... MEDIUM 5.3 N/A cvelistv5 2026-10-28
cve-2026-87387 Vulnerability in the JD Edwards EnterpriseOne Homebuilder product of Oracle JD Edwards (component: Homebuilder Manage... MEDIUM 6.5 N/A cvelistv5 2026-10-28
cve-2026-87386 Vulnerability in the JD Edwards EnterpriseOne General Ledger product of Oracle JD Edwards (component: E1 Foundation) MEDIUM 5.3 N/A cvelistv5 2026-10-28
cve-2026-87385 Vulnerability in the JD Edwards EnterpriseOne Human Resources Management product of Oracle JD Edwards (component: Hum... MEDIUM 4.8 N/A cvelistv5 2026-10-28
cve-2026-87384 Vulnerability in the JD Edwards EnterpriseOne Human Resources Management product of Oracle JD Edwards (component: Hum... MEDIUM 5.4 N/A cvelistv5 2026-10-28
cve-2026-87383 Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Package Build SEC) MEDIUM 6.7 N/A cvelistv5 2026-10-28
cve-2026-87382 Vulnerability in the JD Edwards EnterpriseOne Operational Sourcing product of Oracle JD Edwards (component: Operation... MEDIUM 6.5 N/A cvelistv5 2026-10-28
cve-2026-87381 Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Business Logic Infra SEC) MEDIUM 5.4 N/A cvelistv5 2026-10-28
cve-2026-87380 Vulnerability in the JD Edwards EnterpriseOne Sales Order Entry product of Oracle JD Edwards (component: Sales Order ... MEDIUM 6.5 N/A cvelistv5 2026-10-28
cve-2026-87379 cve-2026-87379 MEDIUM 4.3 N/A cvelistv5 unknown
cve-2026-87378 cve-2026-87378 MEDIUM 6.5 N/A cvelistv5 unknown
cve-2026-87377 cve-2026-87377 MEDIUM 6.8 N/A cvelistv5 unknown
cve-2026-87376 cve-2026-87376 MEDIUM 6.8 N/A cvelistv5 unknown
cve-2026-87375 cve-2026-87375 MEDIUM 6.5 N/A cvelistv5 unknown
cve-2026-87374 Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server) MEDIUM 6.8 N/A cvelistv5 2026-11-03
cve-2026-87373 Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server) MEDIUM 6.5 N/A cvelistv5 2026-11-03
cve-2026-87372 Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server) MEDIUM 6.5 N/A cvelistv5 2026-11-03
cve-2026-87371 Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server) MEDIUM 6.8 N/A cvelistv5 2026-11-03
cve-2026-87370 Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server) MEDIUM 6.5 N/A cvelistv5 2026-11-03
cve-2026-87369 cve-2026-87369 HIGH 7.5 N/A cvelistv5 unknown
cve-2026-87367 openjdk: Enhance Template Handling (Oracle CPU 2026-10) LOW 3.7 N/A cvelistv5 2026-10-22
cve-2026-87366 Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Web Utilities) MEDIUM 4.9 N/A cvelistv5 2026-10-28
cve-2026-87365 Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server) MEDIUM 6.5 N/A cvelistv5 2026-11-03