EUVD-2026-79364

Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware component: WebCenter Sites. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

EUVD-2026-79360

Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware component: WebCenter Sites. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle WebCent...

CVE-2026-83031

Oracle WebCenter Sites (component: WebCenter Sites) in Oracle Fusion Middleware versions 12.2.1.4.0 and 14.1.2.0.0 is affected by an easily exploitable vulnerability. A low-privileged attacker with network access via HTTP can compromise the product, with a scope change meaning attacks may signifi...

CVE-2026-83028

Oracle Identity Manager Connector (Core component) in Oracle Fusion Middleware versions 12.2.1.4.0 and 14.1.2.1.0 is affected by a vulnerability allowing an unauthenticated attacker with access to the physical communication segment attached to the hardware to take over the product. The attack vec...

CVE-2026-83026

Oracle Identity Manager Connector (Core component) of Oracle Fusion Middleware , versions 12.2.1.4.0 and 14.1.2.1.0 , is vulnerable to a difficult-to-exploit attack by an unauthenticated attacker with access to the physical communication segment attached to the hardware where the connector execut...

CVE-2026-83021

CVE-2026-83021 is a critical vulnerability in the Web Container component of Oracle WebLogic Server (Oracle Fusion Middleware), affecting supported versions 12.2.1.4.0 , 14.1.1.0.0 , and 14.1.2.0.0 . An unauthenticated attacker with network access via HTTP can exploit this with low complexity and...

EUVD-2026-79349

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Web Container. Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

EUVD-2026-79348

Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware component: Centralized Thirdparty Jars. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...

CVE-2026-83020

CVE-2026-83020 is a critical vulnerability (CVSS 3.1: 10.0) in Oracle Platform Security for Java (Oracle Fusion Middleware), specifically in the Centralized Thirdparty Jars component. Affected supported versions are 12.2.1.4.0 and 14.1.2.0.0 . An unauthenticated attacker with network access via H...

CVE-2026-83018

CVE-2026-83018 affects Oracle PeopleSoft Enterprise PeopleTools in the SQR component, with supported versions 8.61 through 8.63 vulnerable. A low-privileged attacker with local logon to the infrastructure where PeopleTools executes can exploit this vulnerability with low complexity and no user in...

EUVD-2026-79341

Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware component: Client Bundle. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise...

EUVD-2026-79325

Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware component: Messaging Enabler. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via T3, IIOP to compromise Servi...

EUVD-2026-79324

Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware component: Centralized Thirdparty Jars. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure...

CVE-2026-73966

This vulnerability affects the Siebel Apps - Marketing component of Oracle Siebel CRM , versions 17.0 through 26.7 . A high-privileged attacker with network access via HTTP can exploit it with low complexity and no user interaction, leading to full takeover of the affected component (high impact ...

EUVD-2026-79315

Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware component: ADF Faces. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle JDeveloper...

CVE-2026-73956

CVE-2026-73956 affects the Composer component of Oracle WebCenter Portal (Oracle Fusion Middleware), impacting versions 12.2.1.4.0 and 14.1.2.0.0 . An unauthenticated attacker with network access via HTTP can exploit this vulnerability with low complexity to achieve full takeover of Oracle WebCen...

CVE-2026-73954

CVE-2026-73954 is a vulnerability in the Business Interlink component of Oracle PeopleSoft Enterprise PeopleTools , affecting supported versions 8.61–8.63 . An unauthenticated attacker with network access via HTTP can exploit this flaw, though the attack complexity is rated high (difficult to exp...

CVE-2026-73953

Oracle WebCenter Portal (a component of Oracle Fusion Middleware) is affected via its Portlet Services component. An unauthenticated attacker with network access via HTTP can exploit this vulnerability to achieve takeover of the portal. Supported affected versions are 12.2.1.4.0 and 14.1.2.0.0 . ...

CVE-2026-73952

CVE-2026-73952 affects the Portlet Services component of Oracle WebCenter Portal (Oracle Fusion Middleware), versions 12.2.1.4.0 and 14.1.2.0.0 . An unauthenticated attacker with network access via HTTP can exploit this with low complexity to achieve unauthorized creation, deletion, modification,...

EUVD-2026-79306

Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware component: Portlet Services. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...