Known Exploited Vulnerabilities (KEV)

ID Title Severity CVSS EPSS Source Updated
cve-2026-87364 cve-2026-87364 HIGH 8.8 N/A cvelistv5 unknown
cve-2026-87363 Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Internal Operations) HIGH 7.5 N/A cvelistv5 2026-11-03
cve-2026-87362 Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Folders, Files & Attachments) MEDIUM 6.5 N/A cvelistv5 2026-10-28
cve-2026-87361 Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server) MEDIUM 4.3 N/A cvelistv5 2026-11-03
cve-2026-87360 Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server) MEDIUM 5.3 N/A cvelistv5 2026-11-03
cve-2026-87359 cve-2026-87359 HIGH 8.8 N/A cvelistv5 unknown
cve-2026-87358 Vulnerability in the Oracle General Ledger product of Oracle E-Business Suite (component: Internal Operations) HIGH 7.1 N/A cvelistv5 2026-10-28
cve-2026-87357 Vulnerability in the Order Capture product of Oracle E-Business Suite (component: Internal Operations) HIGH 7.2 N/A cvelistv5 2026-10-28
cve-2026-87356 Vulnerability in the Applications Platform Engineering product of Oracle E-Business Suite (component: Valid Session) HIGH 7.8 N/A cvelistv5 2026-10-31
cve-2026-87355 Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Panel Processor) MEDIUM 4.4 N/A cvelistv5 2026-10-30
cve-2026-87354 Vulnerability in Oracle TimesTen In-Memory Database (component: Kubernetes Operator) MEDIUM 4.3 N/A cvelistv5 2026-10-28
cve-2026-87353 Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Porting) MEDIUM 4.5 N/A cvelistv5 2026-10-30
cve-2026-87352 Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: LDAP) MEDIUM 4.4 N/A cvelistv5 2026-10-29
cve-2026-87351 Vulnerability in Oracle GoldenGate (component: Admin Server Executable) HIGH 8.8 N/A cvelistv5 2026-10-23
cve-2026-87350 Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Security) MEDIUM 4.5 N/A cvelistv5 2026-10-28
cve-2026-87349 Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Security) MEDIUM 6.5 N/A cvelistv5 2026-10-27
cve-2026-87348 Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Updates Environment M... MEDIUM 4.2 N/A cvelistv5 2026-10-28
cve-2026-87347 cve-2026-87347 CRITICAL 9.6 N/A cvelistv5 unknown
cve-2026-87346 Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware (component: Oracle Weblogic Server Proxy ... HIGH 8.7 N/A cvelistv5 2026-10-30
cve-2026-87345 Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Business Interlink) MEDIUM 6.1 N/A cvelistv5 2026-10-28
cve-2026-87344 Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: LDAP) MEDIUM 6.5 N/A cvelistv5 2026-10-28
cve-2026-87343 Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Portal) MEDIUM 4.8 N/A cvelistv5 2026-10-28
cve-2026-87342 Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Security) MEDIUM 6.5 N/A cvelistv5 2026-10-28
cve-2026-87340 Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Portal) LOW 3.7 N/A cvelistv5 2026-10-28
cve-2026-87339 Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: REST). Supported versions that are affected are 17.0-26.9. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel CRM Integration. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Siebel CRM Integration accessible data. CVSS 3.1 Base Score 3.1 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N). LOW 3.1 N/A cvelistv5 2026-11-04
cve-2026-87338 Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: EAI). Supported versions that are affected are 17.0-26.9. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel CRM Integration. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Siebel CRM Integration, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Siebel CRM Integration accessible data as well as unauthorized update, insert or delete access to some of Siebel CRM Integration accessible data. CVSS 3.1 Base Score 6.9 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N). MEDIUM 6.9 N/A cvelistv5 2026-11-04
cve-2026-87337 Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Access Manager. While the vulnerability is in Oracle Access Manager, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Access Manager accessible data as well as unauthorized access to critical data or complete access to all Oracle Access Manager accessible data. CVSS 3.1 Base Score 10.0 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N). CRITICAL 10.0 N/A cvelistv5 2026-11-04
cve-2026-87336 Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Portal) MEDIUM 5.3 N/A cvelistv5 2026-10-28
cve-2026-87335 Vulnerability in the Applications DBA product of Oracle E-Business Suite (component: Internal Operations) MEDIUM 6.5 N/A cvelistv5 2026-10-28
cve-2026-87334 cve-2026-87334 MEDIUM 5.5 N/A cvelistv5 unknown