CVE-2026-87164

HighCVSS 8.0

Published: 15/09/2026(UTC)Updated: 17/09/2026(UTC)Translated: 16/09/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.24%

16th percentile - higher than 16% of all known CVEs

Summary

Vulnerability in Oracle Banking Branch (component: Reports) versions 14.5.0.0.0-14.9.0.0.0. A difficult-to-exploit flaw requires a low-privileged attacker with network access via HTTP and user interaction. Successful attacks can result in takeover of the system and may impact additional products (scope change).

Risk Assessment

Risk includes full system takeover, which can lead to compromise of confidentiality, integrity, and availability of data, and potential impact on other systems.

Recommendation

Apply Oracle patches for versions 14.5.0.0.0-14.9.0.0.0 and educate users on secure system usage.

Other vulnerabilities in Oracle Banking Branch

CVE-2026-83080High
Vulnerability in Oracle Banking Branch product of Oracle Financial Services Applications (component: Reports). Affects versions 14.5.0.0.0-14.9.0.0.0. Difficult to exploit, requires user interaction, allows low privileged attacker to take over the system.

Original NVD description (English source)

Vulnerability in the Oracle Banking Branch product of Oracle Financial Services Applications (component: Reports). Supported versions that are affected are 14.5.0.0.0-14.9.0.0.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Banking Branch. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Banking Branch, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of Oracle Banking Branch. CVSS 3.1 Base Score 8.0 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H).

Vulnerability data from NVD (NIST) · CISA KEV · EPSS