CVE-2026-83202

A critical vulnerability (CVSS 3.1: 9.1) affects the Server Infrastructure component of Oracle Siebel CRM Deployment, versions 17.0 through 26.7 . An unauthenticated attacker with network access via HTTP can create, delete, modify, or read critical and all accessible data, with high confidentiali...

EUVD-2026-79538

Vulnerability in the Oracle Common Applications Calendar product of Oracle E-Business Suite component: Applications Calendar. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

EUVD-2026-79536

Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite component: Core. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Application Obje...

EUVD-2026-79539

Vulnerability in the Oracle Common Applications Calendar product of Oracle E-Business Suite component: Applications Calendar. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

CVE-2026-83184

Oracle Application Object Library (component: Core) in Oracle E-Business Suite versions 12.2.3 through 12.2.15 contains a vulnerability that allows an unauthenticated attacker with network access via HTTP to compromise the component. The vulnerability is rated difficult to exploit (high attack co...

CVE-2026-83187

Oracle E-Business Suite 's Applications Calendar component (Common Applications Calendar) is affected in supported versions 12.2.3 through 12.2.15 . A low-privileged attacker with network access via HTTP can exploit this vulnerability to perform unauthorized creation, deletion, or modification of...

CVE-2026-83186

This vulnerability affects the Oracle Common Applications Calendar component (Applications Calendar) within Oracle E-Business Suite , versions 12.2.3 through 12.2.15 . A low-privileged attacker with network access via HTTP can exploit it with low complexity and no user interaction to perform unau...

CVE-2026-83185

CVE-2026-83185 affects the CRM User Management Framework component of Oracle E-Business Suite , specifically supported versions 12.2.3 through 12.2.15 . A low-privileged attacker with network access via HTTP can exploit this vulnerability, though user interaction is required. Successful exploitat...

CVE-2026-83179

CVE-2026-83179 affects the Applications Calendar component of Oracle E-Business Suite (product: Oracle Common Applications Calendar), versions 12.2.3 through 12.2.15 . A low-privileged attacker with network access via HTTP can exploit this vulnerability, though it is rated as difficult to exploit...

EUVD-2026-79531

Vulnerability in the Oracle Common Applications Calendar product of Oracle E-Business Suite component: Applications Calendar. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracl...

EUVD-2026-79529

Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite component: Documents. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle One-to-One...

CVE-2026-83174

Oracle E-Business Suite – CRM Technical Foundation (Application Framework) in supported versions 12.2.3 through 12.2.15 is affected by a vulnerability that allows a low-privileged attacker with network access via HTTP to perform unauthorized creation, deletion, modification, or access to critical...

CVE-2026-83162

Oracle Application Object Library (component: Core) in Oracle E-Business Suite versions 12.2.3–12.2.15 is affected by a vulnerability allowing an unauthenticated attacker with network access via HTTPS to achieve unauthorized creation, deletion, modification, and access to critical data. The attac...

CVE-2026-83161

CVE-2026-83161 affects the Oracle Project Intelligence component (Internal Operations ) within Oracle E-Business Suite , versions 12.2.3 through 12.2.15 . A low-privileged attacker with network access via HTTP can exploit this vulnerability to perform unauthorized creation, deletion, or modificat...

EUVD-2026-79488

Vulnerability in the Oracle Project Intelligence product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Project...

CVE-2026-83158

CVE-2026-83158 affects Oracle Applications Manager (component: Command Line – RapidClone ) within Oracle E-Business Suite , versions 12.2.3 through 12.2.15 . A low-privileged attacker with local logon to the infrastructure where Oracle Applications Manager executes can exploit this vulnerability ...

EUVD-2026-79485

Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite component: Command Line - RapidClone. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle...

EUVD-2026-79481

Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM component: Open UI. Supported versions that are affected are 17.0-26.7. Easily exploitable vulnerability allows unauthenticated attacker with network access via SOAP to compromise Siebel CRM End User. Successful attacks of this...

EUVD-2026-79479

Vulnerability in the Oracle Project Intelligence product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Project...

CVE-2026-83152

CVE-2026-83152 affects the Internal Operations component of Oracle Project Intelligence (part of Oracle E-Business Suite), versions 12.2.3 through 12.2.15 . A low-privileged attacker with network access via HTTP can exploit this vulnerability to achieve unauthorized creation, deletion, modificati...