CVE-2026-83111

CVE-2026-83111 affects the Oracle Partner Management product (component: Internal Operations ) within Oracle E-Business Suite , versions 12.2.3 through 12.2.15 . A low-privileged attacker with network access via HTTP can exploit this vulnerability, though it is rated difficult to exploit (high at...

CVE-2026-83104

CVE-2026-83104 affects the Oracle Forms product of Oracle Fusion Middleware, specifically the Forms Services, C/S, Charmode component, in supported versions 12.2.1.19.0 and 14.1.2.0.0 . The vulnerability is easily exploitable by an unauthenticated attacker with network access via TCP , with no us...

CVE-2026-83102

CVE-2026-83102 affects Oracle Forms (component: Forms Services, C/S, Charmode) within Oracle Fusion Middleware , versions 12.2.1.19.0 and 14.1.2.0.0 . The vulnerability is exploitable by an unauthenticated attacker over network access via HTTP , though exploitation is rated as difficult (high att...

CVE-2026-83097

Oracle Forms (component: Forms Services, C/S, Charmode) within Oracle Fusion Middleware is affected in versions 12.2.1.19.0 and 14.1.2.0.0 . A high-privileged attacker with network access via HTTP can exploit this with low complexity to cause unauthorized creation, deletion, or modification of cr...

CVE-2026-83096

CVE-2026-83096 affects Oracle Forms (component: Forms Services, C/S, Charmode) within Oracle Fusion Middleware, versions 12.2.1.19.0 and 14.1.2.0.0 . A low-privileged attacker with network access via HTTP can exploit this vulnerability, though it is rated as difficult to exploit (high attack comp...

CVE-2026-83093

Oracle Forms (Oracle Fusion Middleware, component: Forms Services, C/S, Charmode) has an unauthenticated network vulnerability exploitable via HTTP with low complexity. Affected supported versions are 12.2.1.19.0 and 14.1.2.0.0 . Successful exploitation grants unauthorized access to critical data...

CVE-2026-83092

This vulnerability affects Oracle Field Service (component: Internal Operations ) within Oracle E-Business Suite , versions 12.2.3 through 12.2.15 . A low-privileged attacker with network access via HTTP can exploit it, though exploitation is rated as difficult (high attack complexity, no user in...

CVE-2026-83087

Oracle Siebel CRM Cloud Applications (component: Siebel Cloud Manager ), versions 22.3–26.7 , is affected by a vulnerability exploitable over HTTP by a low-privileged attacker with high attack complexity . The vulnerability exhibits a scope change , meaning successful exploitation may significant...

CVE-2026-83089

Oracle Alert (component: Internal Operations) in Oracle E-Business Suite versions 12.2.3 through 12.2.15 is vulnerable to a network-based attack. A low-privileged attacker with HTTP access can exploit this vulnerability to gain unauthorized creation, deletion, or modification of critical data, as...

CVE-2026-83085

This vulnerability affects Oracle Siebel CRM (component: Siebel Cloud Manager ), impacting supported versions 22.3 through 26.7 . The attack vector is adjacent network (AV:A) with low privileges and no user interaction, requiring an attacker to be on the same physical communication segment. Due t...

CVE-2026-83083

Oracle Marketing (component: Audience ) in Oracle E-Business Suite versions 12.2.3 through 12.2.15 is affected by an easily exploitable vulnerability allowing a low-privileged attacker with network access via HTTP to compromise the product. The changed scope means attacks may significantly impact...

CVE-2026-83081

Oracle Banking Corporate Lending (component: Core ) of Oracle Financial Services Applications, versions 14.5.0.0.0 through 14.9.0.0.0 , is affected by a vulnerability scored CVSS 3.1 Base 8.0 (HIGH) . An unauthenticated attacker with access to the physical communication segment attached to the ha...

CVE-2026-83079

Oracle Siebel CRM Cloud Applications (component: Siebel Cloud Manager ) is affected in supported versions 22.3–26.7 . A high-privileged attacker with local logon to the infrastructure can exploit this vulnerability with low complexity, causing a scope change that may impact additional products be...

CVE-2026-83078

Oracle Siebel CRM (component: Siebel Cloud Manager ) in supported versions 22.3–26.7 contains an easily exploitable vulnerability allowing an unauthenticated attacker with HTTP network access to compromise the application. Successful exploitation can result in unauthorized access to all accessibl...

CVE-2026-83077

CVE-2026-83077 affects the Siebel Cloud Manager component of Oracle Siebel CRM Cloud Applications , versions 22.3 through 26.7 . The vulnerability is exploitable over network access via HTTP by a low-privileged attacker without user interaction. The scope is changed , meaning attacks originating ...

CVE-2026-83073

Oracle Siebel CRM Cloud Applications (component: Siebel Cloud Manager ) versions 22.3 through 26.7 are affected by a vulnerability allowing an unauthenticated attacker with access to the adjacent physical communication segment to compromise the application. The attack requires low complexity and ...

CVE-2026-83072

CVE-2026-83072 is an easily exploitable vulnerability in the Search Bean [Incl. Advanced] component of Oracle Applications Framework within Oracle E-Business Suite , affecting supported versions 12.2.3 through 12.2.15 . A low-privileged attacker with network access via HTTP can compromise the com...

CVE-2026-83067

Oracle JDeveloper (Oracle Fusion Middleware, component ADF Shared Components ) in versions 12.2.1.4.0 and 14.1.2.0.0 is affected by an easily exploitable vulnerability allowing a low-privileged attacker with network access via HTTP to compromise the application. Successful exploitation can lead t...

CVE-2026-83052

CVE-2026-83052 affects the Runtime Tools component of Oracle WebCenter Portal (Oracle Fusion Middleware), versions 12.2.1.4.0 and 14.1.2.0.0 . A high-privileged attacker with network access via HTTP can exploit this with low complexity and no user interaction to gain unauthorized access to critic...

CVE-2026-83050

CVE-2026-83050 affects the Runtime Tools component of Oracle WebCenter Portal (Oracle Fusion Middleware), versions 12.2.1.4.0 and 14.1.2.0.0 . A low-privileged attacker with network access via HTTP can exploit this with low complexity to gain unauthorized read access to critical data (high confid...