CVE-2026-87125

Vulnerability in the Oracle Financials for Asia/Pacific product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.8-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Financials for Asia/Pacific. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Financials for Asia/Pacific accessible data as well as unauthorized access to critical data or complete access to all Oracle Financials for Asia/Pacific accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Financials for Asia/Pacific. CVSS 3.1 Base Score 8.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L).

• CWE-284

• https://www.oracle.com/security-alerts/cspusep2026.html

Published

Sep 15, 2026

Last Modified

Sep 18, 2026

Status

Awaiting Analysis

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-87119Authentication Bypass by Capture-replay in ZenHive mpp allow…8.2
• CVE-2026-8712Wyoming before 1.10.2 contains a server-side request forgery…8.3
• CVE-2026-87121lwIP TCP/IP Stack MQTT is vulnerable to an out-of-bounds wri…9.8
• CVE-2026-87122Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMB…
• CVE-2026-87123hbs is an Express view engine wrapper for Handlebars. Versio…5.9
• CVE-2026-87124Vulnerability in the Oracle iRecruitment product of Oracle E…7.7
• CVE-2026-87126Vulnerability in the Oracle Report Manager product of Oracle…7.1
• CVE-2026-87127Vulnerability in the Oracle Purchasing product of Oracle E-B…7.7
• CVE-2026-87128Vulnerability in the Oracle Hyperion Data Relationship Manag…9.1
• CVE-2026-87129Vulnerability in the Oracle Hyperion Data Relationship Manag…9.1
• CVE-2026-8713The Avada (Fusion) Builder plugin for WordPress is vulnerabl…9.1
• CVE-2026-87130Vulnerability in the Oracle Hyperion Data Relationship Manag…7.4