343 matches found
EUVD-2026-79705
Vulnerability in the Oracle XML Gateway product of Oracle E-Business Suite component: Install. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle XML Gateway. Successful attacks...
EUVD-2026-79693
Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware component: Security. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Identity...
CVE-2026-83331
CVE-2026-83331 affects the Personalization component of Oracle Applications Framework within Oracle E-Business Suite, versions 12.2.9 through 12.2.15 . The vulnerability is network-exploitable via HTTP with low complexity and requires only a low-privileged attacker and no user interaction. Succes...
CVE-2026-83305
Oracle BI Publisher (component: BI Platform Security ) in Oracle Analytics is vulnerable to an easily exploitable flaw allowing an unauthenticated attacker with network access via HTTP to compromise the product. Affected supported versions are 8.2.0.0.0 , 12.2.1.4.0 , and 26.01.0.0.0 . Successful...
EUVD-2026-79634
Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics component: Platform Security. The supported version that is affected is 12.2.1.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...
CVE-2026-83257
CVE-2026-83257 affects Oracle Commerce Guided Search / Oracle Commerce Experience Manager (component: Forge ), version 11.4.0 . A low-privileged attacker with network access via HTTP can exploit this vulnerability to achieve full takeover of the affected product. The attack is rated difficult to ...
CVE-2026-83223
Oracle Siebel CRM (component: Siebel Remote ) in versions 17.0 through 26.7 contains a vulnerability that allows a low-privileged attacker with network access via HTTP to compromise the Siebel CRM Deployment component. The attack has high complexity , meaning exploitation is not straightforward, ...
EUVD-2026-79541
Vulnerability in the Oracle User Management product of Oracle E-Business Suite component: Proxy User Delegation. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle User...
CVE-2026-83184
Oracle Application Object Library (component: Core) in Oracle E-Business Suite versions 12.2.3 through 12.2.15 contains a vulnerability that allows an unauthenticated attacker with network access via HTTP to compromise the component. The vulnerability is rated difficult to exploit (high attack co...
CVE-2026-83064
Oracle WebCenter Portal (part of Oracle Fusion Middleware ), specifically the Runtime Tools component, is affected by a network-accessible, low-complexity vulnerability in supported versions 12.2.1.4.0 and 14.1.2.0.0 . A high-privileged attacker with HTTP access can achieve takeover of the produc...
EUVD-2026-79359
Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware component: WebCenter Sites. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle WebCent...
EUVD-2026-79357
Vulnerability in the Oracle Managed File Transfer product of Oracle Fusion Middleware component: MFT Runtime Server. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracl...
EUVD-2026-79345
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft component: Report Distribution. Supported versions that are affected are 8.61-8.63. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise...
EUVD-2026-79334
Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware component: Client Bundle. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise...
EUVD-2026-79313
Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware component: Composer. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle WebCenter...
EUVD-2026-79309
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft component: Charting. Supported versions that are affected are 8.61-8.63. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools...
CVE-2026-73946
CVE-2026-73946 affects the Authentication Engine component of Oracle Access Manager (Oracle Fusion Middleware), versions 12.2.1.4.0 and 14.1.2.1.0 . A high-privileged attacker with network access via HTTP can exploit this with low complexity and no user interaction, resulting in full takeover of ...
PT-2026-92513
Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM component: Marketing. Supported versions that are affected are 17.0-26.7. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Siebel Apps - Marketing. Successful attac...
PT-2026-92814
Name of the Vulnerable Software and Affected Versions Oracle Business Intelligence Enterprise Edition version 8.2.0.0.0 Oracle Business Intelligence Enterprise Edition version 26.01.0.0.0 Description An issue exists in the Platform Security component of Oracle Business Intelligence Enterprise...
PT-2026-92536
Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware component: Client Bundle. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise...