CVE-2026-83042

Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware component: OIM Legacy UI. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Identit...

CVE-2026-87180

Oracle Hyperion Financial Management version 11.2.26.0.000 is affected by a vulnerability in the Security component. A low-privileged attacker with network access via HTTP can exploit this vulnerability with low complexity and no user interaction to achieve full takeover of the system, with high ...

CVE-2026-87172

A critical vulnerability (CVSS 9.9) in the Security component of Oracle Hyperion Financial Management 11.2.26.0.000 allows a low-privileged attacker with network access via HTTP to achieve a full takeover of the product. The scope change (S:C) indicates that successful exploitation may also signi...

EUVD-2026-79753

Vulnerability in the Oracle Document Management and Collaboration product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise...

EUVD-2026-79738

Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Product Hub...

CVE-2026-83440

A vulnerability in the Oracle Product Hub component of Oracle E-Business Suite (sub-component: Internal Operations) affects supported versions 12.2.3 through 12.2.15 . An attacker with high privileges and network access via HTTP can exploit it with low complexity and no user interaction , resulti...

EUVD-2026-79688

Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics component: Analytics Server. Supported versions that are affected are 8.2.0.0.0 and 26.01.0.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...

CVE-2026-83335

CVE-2026-83335 affects Oracle Business Intelligence Enterprise Edition (component: Analytics Server ), versions 8.2.0.0.0 and 26.01.0.0.0 . A low-privileged attacker with network access via HTTP can exploit this vulnerability to achieve takeover of the product, with high impact to confidentiality...

CVE-2026-83322

This vulnerability affects Oracle Business Intelligence Enterprise Edition (part of Oracle Analytics), specifically the Platform Security component, in supported versions 8.2.0.0.0 and 26.01.0.0.0 . A high-privileged attacker with network access via HTTP can exploit it with low complexity and no ...

EUVD-2026-79644

Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics component: Platform Security. Supported versions that are affected are 8.2.0.0.0 and 26.01.0.0.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to...

EUVD-2026-79598

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce component: Forge. The supported version that is affected is 11.4.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Orac...

CVE-2026-83229

CVE-2026-83229 affects the Siebel Management Console component of Oracle Siebel CRM's Siebel CRM Deployment product, versions 17.0 through 26.7 . A high-privileged attacker with network access via HTTP can exploit this vulnerability with low complexity and no user interaction to achieve takeover ...

CVE-2026-83205

Oracle Applications Framework within Oracle E-Business Suite is affected via the Personalization component, impacting supported versions 12.2.3 through 12.2.15 . A low-privileged attacker with network access via HTTP can exploit this vulnerability with low complexity and no user interaction, resu...

CVE-2026-83125

Oracle Report Manager (component: Internal Operations ) within Oracle E-Business Suite versions 12.2.3 through 12.2.15 is affected by a network-exploitable vulnerability. A low-privileged attacker with network access via HTTP can compromise the component, resulting in a takeover of Oracle Report ...

CVE-2026-83120

Oracle Alert (component: Internal Operations ) in Oracle E-Business Suite versions 12.2.3 through 12.2.15 is vulnerable to a network-exploitable flaw via HTTP that a low-privileged attacker can leverage with low complexity. Successful exploitation results in full takeover of the Oracle Alert prod...

EUVD-2026-79448

Vulnerability in the Oracle Alert product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Alert. Successful attacks...

CVE-2026-83117

CVE-2026-83117 affects the Applications DBA component of Oracle E-Business Suite (specifically AD Utilities ), versions 12.2.3 through 12.2.15 . A high-privileged attacker with network access via HTTP can exploit this vulnerability with low complexity and no user interaction to achieve full takeo...

EUVD-2026-79397

Vulnerability in the Oracle Fusion Middleware Control product of Oracle Fusion Middleware component: Framework. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

EUVD-2026-79381

Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware component: Runtime Tools. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle WebCente...

EUVD-2026-79360

Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware component: WebCenter Sites. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle WebCent...