EUVD-2026-79333

Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware component: Client Bundle. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise...

CVE-2026-83002

Oracle Access Manager (component: Authentication Engine ) in Oracle Fusion Middleware is affected in versions 12.2.1.4.0 and 14.1.2.1.0 . A low-privileged attacker with network access via HTTP can exploit this difficult-to-exploit vulnerability to achieve a takeover of Oracle Access Manager. The ...

EUVD-2026-79330

Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware component: Authentication Engine. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

EUVD-2026-79323

Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware component: Centralized Thirdparty Jars. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via SOAP to...

EUVD-2026-79322

Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware component: Centralized Thirdparty Jars. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via LDAP to...

EUVD-2026-79316

Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware component: Authentication Engine. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTPS to compromise Oracle...

CVE-2026-73959

Oracle WebCenter Portal (component: Composer ) within Oracle Fusion Middleware is affected by an easily exploitable vulnerability in supported versions 12.2.1.4.0 and 14.1.2.0.0 . A low-privileged attacker with network access via HTTP can exploit the flaw to achieve full takeover of the applicati...

CVE-2026-73958

Oracle Access Manager (Oracle Fusion Middleware), specifically the Authentication Engine component, is affected by a vulnerability in supported versions 12.2.1.4.0 and 14.1.2.0.0 . An unauthenticated attacker with network access via HTTP can exploit this vulnerability, though it is rated as diffi...

EUVD-2026-79304

Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware component: Authentication Engine. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

CVE-2026-73949

A vulnerability in the Portlet Services component of Oracle WebCenter Portal (part of Oracle Fusion Middleware) affects supported versions 12.2.1.4.0 and 14.1.2.0.0 . A low-privileged attacker with network access via HTTP can exploit this vulnerability without user interaction to achieve full tak...

CVE-2026-73945

CVE-2026-73945 affects the Authentication Engine component of Oracle Access Manager (Oracle Fusion Middleware), versions 12.2.1.4.0 and 14.1.2.1.0 . A low-privileged attacker with network access via HTTP can exploit this vulnerability to achieve takeover of Oracle Access Manager. The vulnerabilit...

CVE-2026-73947

CVE-2026-73947 is a critical vulnerability in the Authentication Engine component of Oracle Access Manager (Oracle Fusion Middleware), affecting versions 12.2.1.4.0 and 14.1.2.0.0 . An unauthenticated attacker with network access via HTTP can exploit it with low complexity to achieve full takeove...

CVE-2026-73942

Oracle Identity Manager (part of Oracle Fusion Middleware) is affected via its OIM Legacy UI component in supported versions 12.2.1.4.0 and 14.1.2.1.0 . An attacker with low privileges and network access via HTTP can exploit this vulnerability without user interaction to achieve full takeover of ...

EUVD-2026-79520

Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware component: Authentication Engine. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

CVE-2026-73940

Oracle Access Manager (Oracle Fusion Middleware) is vulnerable in its Authentication Engine component, affecting versions 12.2.1.4.0 and 14.1.2.1.0 . An unauthenticated attacker with network access via T3 or IIOP can exploit this easily exploitable vulnerability to achieve full takeover of the pr...

CVE-2026-71133

Oracle Access Manager (Oracle Fusion Middleware), specifically the Authentication Engine component, is affected by a critical vulnerability (CVSS 3.1: 10.0 ) in versions 12.2.1.4.0 and 14.1.2.1.0 . An unauthenticated attacker with network access via HTTP can compromise the product with low comple...

EUVD-2026-79516

Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware component: Authentication Engine. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

CVE-2026-71047

Oracle Identity Manager (component: Core ) in Oracle Fusion Middleware is affected by a vulnerability in supported versions 12.2.1.4.0 and 14.1.2.1.0 . A low-privileged attacker with network access via HTTP can exploit this to achieve takeover of the product, with high impact on confidentiality, ...

CVE-2026-70915

Oracle Identity Manager (part of Oracle Fusion Middleware, component Core ) is affected in versions 12.2.1.4.0 and 14.1.2.1.0 . A low-privileged attacker with network access via T3 or IIOP can exploit this vulnerability with low complexity and no user interaction to achieve full takeover of the p...

CVE-2026-70757

CVE-2026-70757 is a critical vulnerability in Oracle WebLogic Server (Oracle Fusion Middleware, component: Core) affecting versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0 . An unauthenticated attacker with network access via T3 or IIOP can compromise the server, resulting in full take...