CVE-2026-83068

CVE-2026-83068 affects Oracle Enterprise Manager for Oracle Database (component: Core ), version 24.1 . An easily exploitable vulnerability allows a low-privileged attacker with network access via HTTP to compromise the product, with a scope change meaning attacks may significantly impact additio...

EUVD-2026-79399

Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics component: Machine Learning. Supported versions that are affected are 8.2.0.0.0 and 26.01.0.0.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where...

EUVD-2026-79397

Vulnerability in the Oracle Fusion Middleware Control product of Oracle Fusion Middleware component: Framework. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

EUVD-2026-79396

Vulnerability in the Oracle Enterprise Manager for Oracle Database product of Oracle Enterprise Manager component: Core. The supported version that is affected is 24.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Enterprise...

CVE-2026-83070

CVE-2026-83070 affects Oracle PeopleSoft Enterprise PRTL Interaction Hub (component: Enterprise Portal ), specifically version 9.1 . A low-privileged attacker with network access via HTTP can exploit this vulnerability to gain unauthorized access to critical data or complete access to all Interac...

CVE-2026-83071

Oracle Business Intelligence Enterprise Edition (part of Oracle Analytics) has a vulnerability in its Machine Learning component affecting versions 8.2.0.0.0 and 26.01.0.0.0 . The flaw is locally exploitable with low privileges and no user interaction, allowing an attacker with logon access to th...

EUVD-2026-79395

Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware component: ADF Shared Components. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

CVE-2026-83067

Oracle JDeveloper (Oracle Fusion Middleware, component ADF Shared Components ) in versions 12.2.1.4.0 and 14.1.2.0.0 is affected by an easily exploitable vulnerability allowing a low-privileged attacker with network access via HTTP to compromise the application. Successful exploitation can lead t...

CVE-2026-83057

Oracle Internet Directory (OID LDAP Server component of Oracle Fusion Middleware) is affected by a critical vulnerability (CVSS 3.1: 9.9) in supported versions 12.2.1.4.0 and 14.1.2.1.0 . A low-privileged attacker with network access via LDAP can exploit this with low complexity and no user inter...

CVE-2026-83058

CVE-2026-83058 is a critical vulnerability (CVSS 3.1: 9.9) in the OID LDAP Server component of Oracle Internet Directory (Oracle Fusion Middleware), affecting versions 12.2.1.4.0 and 14.1.2.1.0 . A low-privileged attacker with network access via LDAP can exploit this with low complexity and no us...

CVE-2026-83056

CVE-2026-83056 affects the OID LDAP Server component of Oracle Internet Directory (Oracle Fusion Middleware), specifically versions 12.2.1.4.0 and 14.1.2.1.0 . The vulnerability allows a low-privileged attacker with network access via LDAP to compromise the server. Due to a scope change , success...

EUVD-2026-79385

Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware component: OID LDAP Server. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via LDAP to compromise Oracle...

EUVD-2026-79386

Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware component: OID LDAP Server. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via LDAP to compromise Oracle...

CVE-2026-83055

Oracle Internet Directory (component: OID LDAP Server ) in Oracle Fusion Middleware is affected in versions 12.2.1.4.0 and 14.1.2.1.0 . A low-privileged attacker with network access via LDAP can exploit this vulnerability to achieve full takeover of the directory service. The scope change indicat...

CVE-2026-83053

Oracle WebCenter Portal (component: Runtime Tools ), part of Oracle Fusion Middleware, is affected in versions 12.2.1.4.0 and 14.1.2.0.0 . A low-privileged attacker with network access via HTTP can exploit this vulnerability with low complexity and no user interaction to achieve full takeover of ...

EUVD-2026-79381

Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware component: Runtime Tools. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle WebCente...

EUVD-2026-79383

Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware component: OID LDAP Server. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via LDAP to compromise Oracle...

EUVD-2026-79378

Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware component: Runtime Tools. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle WebCente...

CVE-2026-83050

CVE-2026-83050 affects the Runtime Tools component of Oracle WebCenter Portal (Oracle Fusion Middleware), versions 12.2.1.4.0 and 14.1.2.0.0 . A low-privileged attacker with network access via HTTP can exploit this with low complexity to gain unauthorized read access to critical data (high confid...

CVE-2026-83049

CVE-2026-83049 affects the Security Framework component of Oracle WebCenter Portal (Oracle Fusion Middleware), versions 12.2.1.4.0 and 14.1.2.0.0 . A low-privileged attacker with network access via HTTP can exploit this vulnerability without user interaction, leading to a scope change where addit...