CVE-2026-83027

Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with access to the physical communication segment attach...

CVE-2026-73951

Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware component: Portlet Services. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

CVE-2026-71047

Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Identity Manager...

CVE-2026-87227

Oracle Hyperion Financial Management (component: Security ) in version 11.2.26.0.000 is vulnerable to a network-based attack via HTTP that requires only a low-privileged account and no user interaction. A successful exploit allows full takeover of the application, resulting in high impact to conf...

EUVD-2026-79871

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion component: Security. The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Hyperion Financial...

EUVD-2026-79727

Vulnerability in the Oracle Demand Signal Repository product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Demand...

CVE-2026-83286

Oracle Business Intelligence Enterprise Edition (Oracle Analytics), component Platform Security , is affected in versions 8.2.0.0.0 , 12.2.1.4.0 , and 26.01.0.0.0 . An unauthenticated attacker with network access via HTTP can exploit this vulnerability, though it is rated as difficult to exploit ...

CVE-2026-83254

A difficult to exploit vulnerability in Oracle Commerce Guided Search / Oracle Commerce Experience Manager (component: Forge ), affecting version 11.4.0 , allows an unauthenticated attacker with network access via TCP to achieve takeover of the product. The high attack complexity reflects the exp...

CVE-2026-83037

A critical vulnerability (CVSS 3.1 9.8 ) in Oracle WebCenter Sites (Oracle Fusion Middleware, component: WebCenter Sites) allows an unauthenticated attacker with network access via HTTP and low attack complexity to achieve full takeover of the affected system, impacting confidentiality, integrity...

EUVD-2026-79355

Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with access to the physical communication segment attach...

CVE-2026-83024

This vulnerability affects the Core component of Oracle Identity Manager Connector , part of Oracle Fusion Middleware. Supported versions 12.2.1.4.0 and 14.1.2.1.0 are impacted. A low-privileged local attacker with logon to the infrastructure where the connector executes can exploit this with low...

CVE-2026-83013

CVE-2026-83013 affects the Client Bundle component of Oracle WebCenter Enterprise Capture (Oracle Fusion Middleware), specifically versions 12.2.1.4.0 and 14.1.2.0.0 . An easily exploitable vulnerability allows a low-privileged attacker with network access via HTTP to compromise the product, resu...

EUVD-2026-79320

Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM component: Installation. Supported versions that are affected are 17.0-26.7. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Siebel CRM Deployment executes to compromise...

CVE-2026-87286

Oracle GraalVM (component: Compiler ), version 25.0.4.1 , is affected by a vulnerability that allows an unauthenticated attacker with network access via HTTP to achieve full takeover of the product. The vulnerability is rated CVSS 8.1 (HIGH) with high impact on confidentiality, integrity, and ava...

EUVD-2026-78935

This High severity Improper Authorization vulnerability was introduced in versions 7.4.0, 7.13.0, 8.5.0, 8.9.0, 9.0.1, 9.1.0, 9.2.0, 9.3.1, 9.4.0, 9.5.1, 10.0.2, 10.1.0, and 10.2.0 of Confluence Data Center. This Improper Authorization vulnerability, with a CVSS Score of 7.1, allows an...

CVE-2026-21586

This High severity Improper Authorization vulnerability was introduced in versions 7.4.0, 7.13.0, 8.5.0, 8.9.0, 9.0.1, 9.1.0, 9.2.0, 9.3.1, 9.4.0, 9.5.1, 10.0.2, 10.1.0, and 10.2.0 of Confluence Data Center. This Improper Authorization vulnerability, with a CVSS Score of 7.1, allows an...

EUVD-2026-78936

This High severity Improper Authorization vulnerability was introduced in version 11.3.0 of Jira Service Management Data Center. This Improper Authorization vulnerability, with a CVSS Score of 7.1, allows an authenticated attacker to gain unintended access and can lead to the exposure of resource...

EUVD-2026-78937

This High severity DoS Denial of Service vulnerability was introduced in versions 8.9.0, 9.0.1, 9.1.0, 9.2.0, 9.3.1, 9.4.0, 9.5.1, 10.0.2, 10.1.0, and 10.2.0 of Confluence Data Center. This DoS Denial of Service vulnerability, with a CVSS Score of 7.1, allows an authenticated attacker to cause a...

SOC-Investigation-CVE-2024-49138

🛡️ Informe de Investigación SOC: Explotación de CVE-2024-49138 📌 Resumen Ejecutivo Título de la Alerta: SOC335 - Explotación de CVE-2024-49138 Detectada Severidad: Alta Host Objetivo: Victor 172.16.17.207 Sistema Operativo: Windows 10 Usuario Principal: letsdefend Veredicto: Positivo Verdadero...

PT-2026-93127

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.47 Description A type confusion issue exists in the ServiceWorker component. This occurs when the system incorrectly identifies the data type of an object, which can be leveraged by a remote attacker ...