CVE-2026-83268

Oracle BI Publisher (component: BI Platform Security ) in Oracle Analytics is affected in supported versions 8.2.0.0.0 , 12.2.1.4.0 , and 26.01.0.0.0 . An easily exploitable vulnerability allows a high-privileged attacker with network access via HTTP to compromise the product. Due to a scope chan...

CVE-2026-83262

Oracle Product Lifecycle Analytics (part of Oracle Supply Chain), version 3.6.1 , is affected by a vulnerability in its Installation Issues component. A low-privileged attacker with network access via HTTP can exploit this flaw, though it is rated as difficult to exploit (High Attack Complexity)....

CVE-2026-83261

Oracle Product Lifecycle Analytics (component: Core), version 3.6.1 , is affected by an unauthenticated, network-accessible vulnerability exploitable via HTTP . The CVSS 3.1 score is 9.8 (Critical) with full impact on confidentiality, integrity, and availability, meaning a successful attack resul...

CVE-2026-83258

Oracle Commerce Guided Search / Oracle Commerce Experience Manager (component Forge , version 11.4.0 ) is vulnerable to an unauthenticated, network-based attack via HTTP that can result in full takeover of the product. The vulnerability is rated difficult to exploit due to high attack complexity,...

EUVD-2026-79609

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce component: Forge. The supported version that is affected is 11.4.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracl...

CVE-2026-83250

Oracle Commerce Guided Search / Oracle Commerce Experience Manager (component: Forge ) version 11.4.0 is affected by a difficult-to-exploit vulnerability that allows an unauthenticated attacker with network access via HTTP to compromise the product. Successful exploitation can result in unauthori...

EUVD-2026-79584

Vulnerability in the Oracle Data Integrator product of Oracle Fusion Middleware component: Console / Repository Explorer. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

EUVD-2026-79581

Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM component: Siebel Management Console. Supported versions that are affected are 17.0-26.7. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Siebel CRM Deployment. Whil...

CVE-2026-83226

Oracle Siebel CRM Deployment (component: Server Infrastructure ) is vulnerable in supported versions 17.0–26.7 to a network-based attack via HTTP that allows a low-privileged attacker to achieve takeover of the deployment with High impact on Confidentiality, Integrity, and Availability. The vulne...

CVE-2026-83217

Oracle Siebel CRM End User (component: Open UI ) is vulnerable in supported versions 17.0 through 26.7 . A low-privileged attacker with network access via HTTP can exploit this vulnerability to gain unauthorized access to critical data (High confidentiality impact) and perform unauthorized update...

EUVD-2026-79559

Vulnerability in the Siebel CRM Development product of Oracle Siebel CRM component: Integration - Scripting. Supported versions that are affected are 17.0-26.7. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Siebel CRM Development...

CVE-2026-83209

A vulnerability in Oracle Siebel CRM Development (component: Workflow ) affects supported versions 17.0 through 26.7 . An easily exploitable flaw allows a low-privileged attacker with network access via HTTP to achieve takeover of the product, with high impact to confidentiality, integrity, and a...

EUVD-2026-79556

Vulnerability in the Oracle Sourcing product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Sourcing. Successful...

CVE-2026-83204

Oracle Sourcing (component: Internal Operations ) of Oracle E-Business Suite , versions 12.2.3 through 12.2.15 , is affected by a vulnerability exploitable by a low-privileged attacker with network access via HTTP . The exploit is rated difficult to exploit (high attack complexity), but successfu...

EUVD-2026-79551

Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM component: Server Infrastructure. Supported versions that are affected are 17.0-26.7. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Siebel CRM Deployment. Successfu...

EUVD-2026-79546

Vulnerability in the Oracle Depot Repair product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.10-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Depot Repair...

CVE-2026-83196

Oracle Siebel CRM (component: Server Infrastructure , product: Siebel CRM Deployment ) is affected by a vulnerability in supported versions 17.0 through 26.7 . A high-privileged attacker with network access via HTTP can exploit this to achieve takeover of Siebel CRM Deployment, with scope change ...

CVE-2026-83187

Oracle E-Business Suite 's Applications Calendar component (Common Applications Calendar) is affected in supported versions 12.2.3 through 12.2.15 . A low-privileged attacker with network access via HTTP can exploit this vulnerability to perform unauthorized creation, deletion, or modification of...

EUVD-2026-79530

Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite component: Core. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Application Obje...

CVE-2026-83177

This vulnerability affects the Documents component of Oracle One-to-One Fulfillment (Oracle E-Business Suite), versions 12.2.3 through 12.2.15 . A low-privileged attacker with network access via HTTP can exploit it with low complexity and no user interaction , resulting in unauthorized creation, ...