EUVD-2026-79472

Vulnerability in the Siebel Apps - Customer Order Management product of Oracle Siebel CRM component: Order Management. Supported versions that are affected are 17.0-26.7. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Siebel Apps -...

EUVD-2026-79471

Vulnerability in the Siebel Apps - Customer Order Management product of Oracle Siebel CRM component: Order Management. Supported versions that are affected are 17.0-26.7. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Siebel Apps -...

EUVD-2026-79473

Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM component: Open UI. Supported versions that are affected are 17.0-26.7. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Siebel CRM End User. Successful attacks requir...

CVE-2026-83147

A vulnerability in Oracle PeopleSoft Enterprise FIN Inventory Brazil (component: Inventory , affected version 9.1 ) allows a low-privileged local attacker to take over the application, resulting in high impact to confidentiality, integrity, and availability . The CVSS 3.1 base score is 7.8 (High)...

CVE-2026-83144

CVE-2026-83144 affects the Order Management component of Oracle Siebel CRM – Siebel Apps Customer Order Management , versions 17.0 through 26.7 . A low-privileged attacker with network access via HTTP can exploit this vulnerability, though successful exploitation requires user interaction from a ...

CVE-2026-83142

Oracle Proposals (component: Internal Operations ) in Oracle E-Business Suite versions 12.2.3 through 12.2.15 is vulnerable to unauthorized data access. A low-privileged attacker with network access via HTTP can exploit this to gain complete access to all Oracle Proposals accessible data , with p...

EUVD-2026-79468

Vulnerability in the Oracle Field Service product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Field Service...

CVE-2026-83140

CVE-2026-83140 affects the Internal Operations component of Oracle Field Service (part of Oracle E-Business Suite), versions 12.2.3 through 12.2.15 . A low-privileged attacker with network access via HTTP can exploit this vulnerability with low complexity and no user interaction, resulting in una...

EUVD-2026-79467

Vulnerability in the Oracle Field Service product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Field Service...

CVE-2026-83141

CVE-2026-83141 affects Oracle Field Service (component: Internal Operations) within Oracle E-Business Suite , versions 12.2.3 through 12.2.15 . A low-privileged attacker with network access via HTTP can exploit this vulnerability to gain unauthorized access to critical data , potentially compromi...

CVE-2026-83136

Oracle Spares Management (component: Internal Operations) within Oracle E-Business Suite is affected by an easily exploitable vulnerability in supported versions 12.2.3 through 12.2.15 . A low-privileged attacker with network access via HTTP can exploit this flaw to achieve full takeover of the p...

EUVD-2026-79465

Vulnerability in the Oracle Spares Management product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Spares...

EUVD-2026-79462

Vulnerability in the Oracle iStore product of Oracle E-Business Suite component: Shopping Cart. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle iStore. While the vulnerabilit...

CVE-2026-83135

A vulnerability in the Shopping Cart component of Oracle iStore (part of Oracle E-Business Suite) affects supported versions 12.2.3 through 12.2.15 . A low-privileged attacker with network access via HTTP can exploit this with required user interaction, resulting in high impact to confidentiality...

CVE-2026-83134

CVE-2026-83134 affects the Shopping Cart component of Oracle iStore (part of Oracle E-Business Suite), versions 12.2.3 through 12.2.15 . A low-privileged attacker with network access via HTTP can exploit this vulnerability with low complexity and no user interaction to gain unauthorized access to...

CVE-2026-83137

CVE-2026-83137 affects Oracle Spares Management (component: Internal Operations) within Oracle E-Business Suite , versions 12.2.3 through 12.2.15 . An easily exploitable vulnerability allows a low-privileged attacker with network access via HTTP to achieve full takeover of the Oracle Spares Manag...

CVE-2026-83131

A vulnerability in the File download component of Oracle Web Applications Desktop Integrator (within Oracle E-Business Suite) affects supported versions 12.2.3 through 12.2.15 . A low-privileged attacker with network access via HTTPS can exploit this with low complexity and no user interaction, r...

EUVD-2026-79460

Vulnerability in the Oracle iStore product of Oracle E-Business Suite component: Shopping Cart. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle iStore. Successful attacks of...

CVE-2026-83132

CVE-2026-83132 affects the Oracle iStore component (Shopping Cart) within Oracle E-Business Suite , versions 12.2.3 through 12.2.15 . A low-privileged attacker with network access via HTTP can exploit this vulnerability to achieve high confidentiality and integrity impact , enabling unauthorized ...

CVE-2026-83129

CVE-2026-83129 affects the Oracle Sales product of Oracle E-Business Suite (component: Internal Operations ), versions 12.2.3–12.2.15 . A low-privileged attacker with network access via HTTP can exploit this vulnerability with low complexity and no user interaction to gain unauthorized access to ...