CVE-2026-83234

CVE-2026-83234 affects Oracle Commerce Guided Search / Oracle Commerce Experience Manager (component: Experience Manager , version 11.4.0 ). The vulnerability allows an unauthenticated attacker with network access via HTTP to compromise the product. Successful exploitation can result in unauthori...

EUVD-2026-79580

Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM component: Server Infrastructure. Supported versions that are affected are 17.0-26.7. Easily exploitable vulnerability allows unauthenticated attacker with network access via TCP to compromise Siebel CRM Deployment. Successfu...

CVE-2026-83215

CVE-2026-83215 affects the Server Infrastructure component of Oracle Siebel CRM , versions 17.0 through 26.7 . An unauthenticated attacker with network access via HTTP can exploit this vulnerability with low complexity and no user interaction, resulting in high confidentiality impact (unauthorize...

EUVD-2026-79552

Vulnerability in the Oracle Process Manufacturing Intelligence product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via Oracle Net to compromi...

CVE-2026-83200

CVE-2026-83200 affects the Oracle Process Manufacturing Intelligence product within Oracle E-Business Suite, specifically the Internal Operations component, in supported versions 12.2.3 through 12.2.15 . A low-privileged attacker with network access via Oracle Net can exploit this vulnerability w...

CVE-2026-83184

Oracle Application Object Library (component: Core) in Oracle E-Business Suite versions 12.2.3 through 12.2.15 contains a vulnerability that allows an unauthenticated attacker with network access via HTTP to compromise the component. The vulnerability is rated difficult to exploit (high attack co...

CVE-2026-83187

Oracle E-Business Suite 's Applications Calendar component (Common Applications Calendar) is affected in supported versions 12.2.3 through 12.2.15 . A low-privileged attacker with network access via HTTP can exploit this vulnerability to perform unauthorized creation, deletion, or modification of...

CVE-2026-83175

Oracle Application Object Library (AAL) , component Core within Oracle E-Business Suite , is vulnerable in supported versions 12.2.3 through 12.2.15 . A low-privileged attacker with network access via HTTP can exploit this vulnerability with low complexity to achieve unauthorized access to critic...

EUVD-2026-79527

Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite component: Core. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Application Object...

EUVD-2026-79499

Vulnerability in the Oracle Sales Online product of Oracle E-Business Suite component: OSO Other. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Sales Online. While the...

EUVD-2026-79494

Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite component: Core. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Application Object...

CVE-2026-83147

A vulnerability in Oracle PeopleSoft Enterprise FIN Inventory Brazil (component: Inventory , affected version 9.1 ) allows a low-privileged local attacker to take over the application, resulting in high impact to confidentiality, integrity, and availability . The CVSS 3.1 base score is 7.8 (High)...

CVE-2026-83140

CVE-2026-83140 affects the Internal Operations component of Oracle Field Service (part of Oracle E-Business Suite), versions 12.2.3 through 12.2.15 . A low-privileged attacker with network access via HTTP can exploit this vulnerability with low complexity and no user interaction, resulting in una...

CVE-2026-83131

A vulnerability in the File download component of Oracle Web Applications Desktop Integrator (within Oracle E-Business Suite) affects supported versions 12.2.3 through 12.2.15 . A low-privileged attacker with network access via HTTPS can exploit this with low complexity and no user interaction, r...

EUVD-2026-79459

Vulnerability in the Oracle Web Applications Desktop Integrator product of Oracle E-Business Suite component: File download. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTPS to compromise Oracle...

CVE-2026-83133

Oracle iStore (Shopping Cart component) in Oracle E-Business Suite versions 12.2.3 through 12.2.15 is affected by an unauthenticated network vulnerability exploitable via HTTP. An attacker with network access can gain unauthorized access to critical data or complete access to all Oracle iStore ac...

CVE-2026-83128

CVE-2026-83128 affects the Oracle Sales Offline product (component: Internal Operations ) within Oracle E-Business Suite , versions 12.2.3 through 12.2.15 . The vulnerability is easily exploitable by an unauthenticated attacker with network access via HTTP , requiring no user interaction. Success...

CVE-2026-83129

CVE-2026-83129 affects the Oracle Sales product of Oracle E-Business Suite (component: Internal Operations ), versions 12.2.3–12.2.15 . A low-privileged attacker with network access via HTTP can exploit this vulnerability with low complexity and no user interaction to gain unauthorized access to ...

EUVD-2026-79455

Vulnerability in the Oracle Sales Offline product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Sales Offline...

CVE-2026-83116

A vulnerability in Oracle Order Management (component: Product Diagnostic Tools ) within Oracle E-Business Suite , affecting supported versions 12.2.5 through 12.2.15 , allows a low-privileged attacker with network access via HTTP to compromise the product. The attack has a scope change , meaning...