CVE-2026-87125

HighCVSS 8.3

Published: 15/09/2026(UTC)Updated: 18/09/2026(UTC)Translated: 16/09/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.28%

21th percentile - higher than 21% of all known CVEs

Summary

Vulnerability in Oracle Financials for Asia/Pacific within Oracle E-Business Suite (component: Internal Operations) affecting versions 12.2.8-12.2.15. An easily exploitable flaw allows a low-privileged attacker with network access via HTTP to compromise the system. It can lead to unauthorized creation, deletion, or modification of critical data, unauthorized access to it, and partial denial of service (partial DoS).

Risk Assessment

An attacker could modify, delete, or access critical financial data and cause partial disruption of availability. This may lead to serious financial and operational consequences.

Recommendation

Update Oracle E-Business Suite to the latest patched version. Restrict network access and monitor for unusual data operations.

Other vulnerabilities in Oracle Financials for Asia/Pacific

CVE-2026-70837High
Vulnerability in Oracle Financials for Asia/Pacific product of Oracle E-Business Suite (component: Internal Operations). Affects versions 12.2.3-12.2.15. A low-privileged attacker can compromise data integrity and confidentiality via HTTP, including unauthorized modification or deletion of data.

Original NVD description (English source)

Vulnerability in the Oracle Financials for Asia/Pacific product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.8-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Financials for Asia/Pacific. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Financials for Asia/Pacific accessible data as well as unauthorized access to critical data or complete access to all Oracle Financials for Asia/Pacific accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Financials for Asia/Pacific. CVSS 3.1 Base Score 8.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L).

Vulnerability data from NVD (NIST) · CISA KEV · EPSS