EUVD-2026-79778

Vulnerability in the Oracle iRecruitment product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows unauthenticated attacker with access to the physical communication segment attached to the...

EUVD-2026-79771

Vulnerability in the Oracle US Federal Human Resources product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle US...

CVE-2026-83484

Oracle US Federal Human Resources (component: Internal Operations ) in Oracle E-Business Suite versions 12.2.3 through 12.2.15 is affected by a network-exploitable vulnerability requiring only low-privilege access via HTTP. Successful exploitation allows an attacker to perform unauthorized creati...

EUVD-2026-79764

Vulnerability in the Oracle Mobile Application Server product of Oracle E-Business Suite component: MWA Terminal Server. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Mobi...

EUVD-2026-79765

Vulnerability in the Oracle Work in Process product of Oracle E-Business Suite component: Workbenches. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with access to the physical communication segment attached to the hardwa...

CVE-2026-83457

CVE-2026-83457 affects the Oracle Demand Signal Repository product within Oracle E-Business Suite (component: Internal Operations ), versions 12.2.3 through 12.2.15 . A low-privileged attacker with network access via HTTP can exploit this vulnerability with low complexity and no user interaction....

CVE-2026-83455

Oracle Demand Signal Repository (component: Internal Operations ) in Oracle E-Business Suite , versions 12.2.3 through 12.2.15 , is vulnerable to an easily exploitable flaw reachable via HTTP by a low-privileged network attacker. Successful exploitation can lead to unauthorized creation, deletion...

EUVD-2026-79754

Vulnerability in the Oracle Demand Signal Repository product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Demand...

CVE-2026-83446

A vulnerability in the Oracle Financials Common Modules product of Oracle E-Business Suite (component: Common Components ) affects supported versions 12.2.3 through 12.2.15 . An easily exploitable flaw allows a low-privileged attacker with network access via HTTP to compromise the module, resulti...

EUVD-2026-79744

Vulnerability in the Oracle Financials Common Modules product of Oracle E-Business Suite component: Common Components. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

EUVD-2026-79745

Vulnerability in the Oracle Bills of Material product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Bills of...

CVE-2026-83441

Oracle E-Business Suite – Product Hub (component: Internal Operations) in supported versions 12.2.3 through 12.2.15 contains a vulnerability allowing a low-privileged attacker with network access via HTTP to compromise the component. The vulnerability is rated difficult to exploit (high attack co...

CVE-2026-83439

CVE-2026-83439 affects the helidon-security-providers-idcs-mapper component of Oracle Helidon (Fusion Middleware), versions 3.0.0–3.2.20 and 4.0.0–4.5.4 . A low-privileged attacker with network access via HTTP can exploit this vulnerability to achieve unauthorized creation, deletion, or modificat...

CVE-2026-83435

Oracle E-Business Suite – Bills of Material (Internal Operations) is vulnerable in supported versions 12.2.13–12.2.15 . A low-privileged attacker with network access via HTTP can exploit this difficulty-rated vulnerability to achieve unauthorized creation, deletion, modification, or access to cri...

EUVD-2026-79732

Vulnerability in the Oracle Product Workbench product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Product...

EUVD-2026-79730

Vulnerability in the Oracle Depot Repair product of Oracle E-Business Suite component: Estimate and Actual Charges. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Depot...

CVE-2026-83433

Oracle Depot Repair (component: Depot Repair Diagnostics ) within Oracle E-Business Suite is affected by an easily exploitable vulnerability in supported versions 12.2.3 through 12.2.15 . A high-privileged attacker with network access via HTTP can exploit this with low complexity and no user inte...

CVE-2026-83432

Oracle Depot Repair (component: Estimate and Actual Charges ) in Oracle E-Business Suite versions 12.2.3 through 12.2.15 is vulnerable to an easily exploitable, network-based attack via HTTP. A low-privileged attacker requiring no user interaction can achieve unauthorized creation, deletion, or m...

EUVD-2026-79728

Vulnerability in the Oracle Product Workbench product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Product...

CVE-2026-83430

Oracle Product Workbench (component: Internal Operations) in Oracle E-Business Suite versions 12.2.3 through 12.2.15 is affected by an easily exploitable vulnerability. A low-privileged attacker with network access via HTTP can achieve unauthorized creation, deletion, or modification of critical ...