CVE-2026-83418

Oracle Communications Cloud Native Core Security Edge Protection Proxy (SEPP) in versions 26.1.200 and 25.2.201 is affected by a vulnerability allowing a low-privileged attacker with network access via HTTP to compromise the product. The attack is rated as difficult to exploit (high complexity, n...

CVE-2026-83417

A vulnerability in the Oracle Communications Cloud Native Core – Security Edge Protection Proxy (SEPP) component, affecting versions 26.1.200 and 25.2.201 , allows an unauthenticated attacker with access to the adjacent physical communication segment to compromise the SEPP. Successful exploitatio...

CVE-2026-83412

Oracle Coherence (Oracle Fusion Middleware, Core component) is affected by a vulnerability exploitable by a low-privileged attacker over TCP with low complexity and no user interaction. Affected versions are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0 . Successful exploitation can lead to ...

EUVD-2026-79713

Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via TCP to compromise Oracle...

CVE-2026-83413

CVE-2026-83413 is a low-severity vulnerability in Oracle Coherence (Oracle Fusion Middleware, component: Core), affecting versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. The flaw allows a high-privileged, local attacker with high complexity to perform unauthorized update, insert, or ...

EUVD-2026-79714

Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle...

EUVD-2026-79705

Vulnerability in the Oracle XML Gateway product of Oracle E-Business Suite component: Install. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle XML Gateway. Successful attacks...

CVE-2026-83346

CVE-2026-83346 is a vulnerability in the Framework component of Oracle Fusion Middleware Control , affecting supported versions 12.2.1.4.0 and 14.1.2.0.0 . A low-privileged attacker with network access via HTTP can exploit this vulnerability, though successful exploitation requires user interacti...

CVE-2026-83345

CVE-2026-83345 affects the Oracle XML Gateway component of Oracle E-Business Suite (specifically the Install component), in supported versions 12.2.3 through 12.2.15 . A low-privileged attacker with network access via HTTP can exploit this easily to gain unauthorized access to critical data (comp...

EUVD-2026-79698

Vulnerability in the Oracle XML Gateway product of Oracle E-Business Suite component: Install. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle XML Gateway. Successful attacks...

CVE-2026-83343

CVE-2026-83343 affects Oracle Utilities Network Management System (component: System Wide) in versions 2.5.0.2.0–2.5.0.2.13, 2.6.0.1.0–2.6.0.12B, 2.6.0.2.0–2.6.0.2.10A, and 25.12.0.0.0–25.12.0.0.3 . An unauthenticated attacker with network access via HTTP can exploit this vulnerability to gain un...

EUVD-2026-79696

Vulnerability in the Oracle Utilities Network Management System product of Oracle Utilities Applications component: System Wide. Supported versions that are affected are 2.5.0.2.0-2.5.0.2.13, 2.6.0.1.0-2.6.0.12B, 2.6.0.2.0-2.6.0.2.10A and 25.12.0.0.0-25.12.0.0.3. Easily exploitable vulnerability...

EUVD-2026-79694

Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite component: Command Line - RapidClone. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

CVE-2026-83334

Oracle Web Services Manager (Oracle Fusion Middleware), component Web Services Security , versions 12.2.1.4.0 and 14.1.2.0.0 are affected by a difficult-to-exploit vulnerability allowing an unauthenticated attacker with network access via SOAP to gain unauthorized access to all accessible data an...

EUVD-2026-79685

Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite component: Personalization. Supported versions that are affected are 12.2.9-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Applications...

EUVD-2026-79687

Vulnerability in the Oracle Web Services Manager product of Oracle Fusion Middleware component: Web Services Security. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via SOAP to compromise...

CVE-2026-83332

CVE-2026-83332 affects the Personalization component of Oracle Applications Framework within Oracle E-Business Suite , versions 12.2.9 through 12.2.15 . The vulnerability is easily exploitable by a low-privileged attacker over HTTP (network vector, no user interaction required). Successful exploi...

EUVD-2026-79679

Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM component: Open Integration. Supported versions that are affected are 25.12-26.7. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel CRM Integration. Successful...

CVE-2026-83324

CVE-2026-83324 affects Oracle Business Intelligence Enterprise Edition (Oracle Analytics), specifically the BI Platform Security component, in versions 8.2.0.0.0 and 26.01.0.0.0 . A low-privileged attacker with network access via HTTP can exploit this vulnerability with high complexity . Successf...

EUVD-2026-79674

Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics component: Analytics Actions. Supported versions that are affected are 8.2.0.0.0 and 26.01.0.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...