CVE-2026-83007

CVE-2026-83007 affects the Client Bundle component of Oracle WebCenter Enterprise Capture (Oracle Fusion Middleware), versions 12.2.1.4.0 and 14.1.2.0.0 . An easily exploitable vulnerability allows a low-privileged attacker with network access via HTTP to compromise the product. Due to a scope ch...

EUVD-2026-79333

Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware component: Client Bundle. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise...

CVE-2026-83004

Oracle WebCenter Enterprise Capture (Oracle Fusion Middleware), component Client Bundle , is affected in versions 12.2.1.4.0 and 14.1.2.0.0 . This difficult-to-exploit vulnerability allows a low-privileged attacker with local logon to compromise the product, with high complexity and required user...

CVE-2026-83005

Oracle WebCenter Enterprise Capture (component: Client Bundle ), part of Oracle Fusion Middleware, is vulnerable in supported versions 12.2.1.4.0 and 14.1.2.0.0 . The flaw allows a low-privileged attacker with network access via HTTP to compromise the product and achieve takeover , with high impa...

EUVD-2026-79332

Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware component: Client Bundle. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracl...

CVE-2026-83003

Oracle WebCenter Enterprise Capture (Oracle Fusion Middleware, component: Client Bundle) versions 12.2.1.4.0 and 14.1.2.0.0 contain a vulnerability exploitable over SOAP by a low-privileged network attacker with no user interaction. The scope change means that while the flaw resides in WebCenter ...

CVE-2026-83002

Oracle Access Manager (component: Authentication Engine ) in Oracle Fusion Middleware is affected in versions 12.2.1.4.0 and 14.1.2.1.0 . A low-privileged attacker with network access via HTTP can exploit this difficult-to-exploit vulnerability to achieve a takeover of Oracle Access Manager. The ...

EUVD-2026-79330

Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware component: Authentication Engine. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

EUVD-2026-79325

Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware component: Messaging Enabler. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via T3, IIOP to compromise Servi...

CVE-2026-82997

CVE-2026-82997 is a CRITICAL (CVSS 9.9) vulnerability in Oracle Fusion Middleware Service Delivery Platform , specifically the Messaging Enabler component, affecting versions 12.2.1.4.0 and 14.1.2.0.0 . A low-privileged attacker with network access via T3 or IIOP can exploit this with low complex...

EUVD-2026-79324

Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware component: Centralized Thirdparty Jars. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure...

CVE-2026-82996

CVE-2026-82996 affects Oracle Platform Security for Java (Oracle Fusion Middleware), specifically the Centralized Thirdparty Jars component. Supported versions 12.2.1.4.0 and 14.1.2.0.0 are impacted. A low-privileged attacker with logon to the infrastructure where the product executes can exploit...

EUVD-2026-79327

Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware component: Messaging Enabler. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Service...

EUVD-2026-79326

Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware component: Messaging Enabler. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via T3, IIOP to compromise Servi...

CVE-2026-82998

Oracle Fusion Middleware 's Service Delivery Platform (component: Messaging Enabler ) in versions 12.2.1.4.0 and 14.1.2.0.0 is affected by a critical vulnerability allowing a low-privileged attacker with network access via T3 or IIOP to take over the Service Delivery Platform. The scope change me...

CVE-2026-82999

A vulnerability in Oracle Fusion Middleware – Service Delivery Platform (component: Messaging Enabler ) affects versions 12.2.1.4.0 and 14.1.2.0.0 . A low-privileged attacker with network access via HTTP can exploit it to achieve a full takeover of the Service Delivery Platform. Notably, the vuln...

CVE-2026-82993

Oracle PeopleSoft Enterprise PeopleTools (component: Business Interlink ) is affected by an easily exploitable network vulnerability in supported versions 8.61–8.63 . A low-privileged attacker with network access via HTTP can exploit it without user interaction. Due to a scope change , the attack...

EUVD-2026-79321

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft component: Business Interlink. Supported versions that are affected are 8.61-8.63. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise...

CVE-2026-73965

CVE-2026-73965 affects the Cloud Gateway component of Oracle Siebel CRM (versions 17.0–26.7 ). A low-privileged attacker with network access via HTTP can exploit this vulnerability, though it is rated difficult to exploit (high attack complexity). Successful exploitation allows unauthorized creat...

EUVD-2026-79318

Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM component: Cloud Gateway. Supported versions that are affected are 17.0-26.7. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Siebel CRM Deployment. Successful...