EUVD-2026-79493

Vulnerability in the Oracle Customer Interaction History product of Oracle E-Business Suite component: Outcome-Result. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Custome...

CVE-2026-83165

CVE-2026-83165 affects the User Interface component of the Oracle Customer Interaction History product within Oracle E-Business Suite, supporting versions 12.2.3 through 12.2.15 . A low-privileged attacker with network access via HTTPS can exploit this vulnerability to achieve full takeover of th...

CVE-2026-83156

CVE-2026-83156 affects the Oracle XML Developers Kit (XDK) component of Oracle Database Server , specifically supported versions 19.3–19.32, 21.3–21.23, and 23.4.0–23.26.3 . A low-privileged attacker holding the XDKC privilege with network access via Oracle Net can exploit this vulnerability, tho...

EUVD-2026-79483

Vulnerability in the Oracle XML Developers Kit component of Oracle Database Server. Supported versions that are affected are 19.3-19.32, 21.3-21.23 and 23.4.0-23.26.3. Difficult to exploit vulnerability allows low privileged attacker having XDKC privilege with network access via Oracle Net to...

CVE-2026-83155

Oracle Siebel CRM (component: Server Infrastructure , product: Siebel CRM Deployment) versions 17.0–26.7 are affected by an easily exploitable vulnerability. A low-privileged attacker with access to the adjacent physical network segment can compromise the deployment, resulting in high confidentia...

CVE-2026-83154

This vulnerability affects the Open UI component of Oracle Siebel CRM End User , versions 17.0 through 26.7 . An unauthenticated attacker with network access via SOAP can exploit it with low complexity and no user interaction. Successful exploitation allows unauthorized creation, deletion, or mod...

CVE-2026-83153

Oracle Siebel CRM (product: Siebel CRM Deployment , component: Server Infrastructure ) is affected by a vulnerability in versions 17.0 through 26.7 . The flaw is easily exploitable by a low-privileged attacker with network access via HTTPS , allowing takeover of the Siebel CRM Deployment componen...

EUVD-2026-79480

Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM component: Server Infrastructure. Supported versions that are affected are 17.0-26.7. Easily exploitable vulnerability allows low privileged attacker with network access via HTTPS to compromise Siebel CRM Deployment. Successf...

EUVD-2026-79475

Vulnerability in Oracle Application Testing Suite. The supported version that is affected is 13.3.0.1. Easily exploitable vulnerability allows low privileged attacker having Test Manager for Web Apps privilege with network access via HTTP to compromise Oracle Application Testing Suite. Successful...

CVE-2026-83148

Oracle Application Testing Suite 13.3.0.1 is affected by a low-privilege network vulnerability requiring the Test Manager for Web Apps privilege and network access via HTTP . A successful exploit allows a low-privileged attacker to achieve full takeover of the product, with High impact on Confide...

CVE-2026-83136

Oracle Spares Management (component: Internal Operations) within Oracle E-Business Suite is affected by an easily exploitable vulnerability in supported versions 12.2.3 through 12.2.15 . A low-privileged attacker with network access via HTTP can exploit this flaw to achieve full takeover of the p...

CVE-2026-83135

A vulnerability in the Shopping Cart component of Oracle iStore (part of Oracle E-Business Suite) affects supported versions 12.2.3 through 12.2.15 . A low-privileged attacker with network access via HTTP can exploit this with required user interaction, resulting in high impact to confidentiality...

EUVD-2026-79457

Vulnerability in the Oracle Sales product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Sales. While the...

EUVD-2026-79453

Vulnerability in the Oracle Report Manager product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Report Manager...

EUVD-2026-79454

Vulnerability in the Oracle Sales Online product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Sales Online...

CVE-2026-83125

Oracle Report Manager (component: Internal Operations ) within Oracle E-Business Suite versions 12.2.3 through 12.2.15 is affected by a network-exploitable vulnerability. A low-privileged attacker with network access via HTTP can compromise the component, resulting in a takeover of Oracle Report ...

EUVD-2026-79450

Vulnerability in the Oracle Report Manager product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTPS to compromise Oracle Report Manager...

CVE-2026-83122

Oracle Report Manager , a component of Oracle E-Business Suite (specifically the Internal Operations component), is affected by an easily exploitable vulnerability in supported versions 12.2.3 through 12.2.15 . A low-privileged attacker with network access via HTTPS can exploit this flaw to achie...

CVE-2026-83120

Oracle Alert (component: Internal Operations ) in Oracle E-Business Suite versions 12.2.3 through 12.2.15 is vulnerable to a network-exploitable flaw via HTTP that a low-privileged attacker can leverage with low complexity. Successful exploitation results in full takeover of the Oracle Alert prod...

CVE-2026-83116

A vulnerability in Oracle Order Management (component: Product Diagnostic Tools ) within Oracle E-Business Suite , affecting supported versions 12.2.5 through 12.2.15 , allows a low-privileged attacker with network access via HTTP to compromise the product. The attack has a scope change , meaning...