EUVD-2026-79707

Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware component: Core. The supported version that is affected is 15.1.1.0.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Coherence. While the vulnerability i...

CVE-2026-83356

Oracle E-Business Suite (version V16 ) is affected through its Enterprise Command Center Framework component (Security). The flaw allows a low-privileged attacker with network access via HTTP to compromise the framework, resulting in unauthorized access to critical data or complete access to all ...

EUVD-2026-79709

Vulnerability in the Enterprise Command Center Framework product of Oracle E-Business Suite component: Security. The supported version that is affected is V16. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Enterprise Command Center...

CVE-2026-83352

Oracle XML Gateway (component: Install ) within Oracle E-Business Suite versions 12.2.3–12.2.15 is affected by a vulnerability exploitable over HTTP by a low-privileged network attacker. Successful exploitation yields unauthorized access to critical data (high confidentiality impact) and a partia...

CVE-2026-83353

Oracle WebCenter Content (component: Content Server ) in Oracle Fusion Middleware has a vulnerability affecting supported versions 12.2.1.4.0 and 14.1.2.0.0 . A low-privileged attacker with local access to the infrastructure where the product executes can exploit it with low complexity and no use...

EUVD-2026-79706

Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware component: Content Server. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle WebCenter...

EUVD-2026-79705

Vulnerability in the Oracle XML Gateway product of Oracle E-Business Suite component: Install. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle XML Gateway. Successful attacks...

CVE-2026-83346

CVE-2026-83346 is a vulnerability in the Framework component of Oracle Fusion Middleware Control , affecting supported versions 12.2.1.4.0 and 14.1.2.0.0 . A low-privileged attacker with network access via HTTP can exploit this vulnerability, though successful exploitation requires user interacti...

CVE-2026-83345

CVE-2026-83345 affects the Oracle XML Gateway component of Oracle E-Business Suite (specifically the Install component), in supported versions 12.2.3 through 12.2.15 . A low-privileged attacker with network access via HTTP can exploit this easily to gain unauthorized access to critical data (comp...

EUVD-2026-79698

Vulnerability in the Oracle XML Gateway product of Oracle E-Business Suite component: Install. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle XML Gateway. Successful attacks...

EUVD-2026-79699

Vulnerability in the Oracle Fusion Middleware Control product of Oracle Fusion Middleware component: Framework. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

EUVD-2026-79695

Vulnerability in the Oracle Utilities Network Management System product of Oracle Utilities Applications component: System Wide. Supported versions that are affected are 2.4.0.1.0-2.4.0.1.33, 2.5.0.1.0-2.5.0.1.19, 2.5.0.2.0-2.5.0.2.13, 2.6.0.1.0-2.6.0.12B, 2.6.0.2.0-2.6.0.2.10A and...

CVE-2026-83342

Oracle Utilities Network Management System (component: System Wide ) is affected by an easily exploitable local vulnerability. A low-privileged attacker with logon to the hosting infrastructure can compromise the system, resulting in full takeover with high impact to confidentiality, integrity, a...

CVE-2026-83338

Oracle Applications Manager (component: Oracle Diagnostics Interfaces ) in Oracle E-Business Suite versions 12.2.3 through 12.2.15 is affected by an easily exploitable vulnerability. A low-privileged attacker with network access via HTTP can achieve takeover of Oracle Applications Manager, impact...

CVE-2026-83340

CVE-2026-83340 affects Oracle Identity Manager (component: Security ) within Oracle Fusion Middleware, versions 12.2.1.4.0 and 14.1.2.1.0 . A low-privileged attacker with network access via HTTP can exploit this vulnerability to achieve takeover of the Identity Manager instance, resulting in high...

EUVD-2026-79693

Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware component: Security. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Identity...

EUVD-2026-79691

Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite component: Oracle Diagnostics Interfaces. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

CVE-2026-83335

CVE-2026-83335 affects Oracle Business Intelligence Enterprise Edition (component: Analytics Server ), versions 8.2.0.0.0 and 26.01.0.0.0 . A low-privileged attacker with network access via HTTP can exploit this vulnerability to achieve takeover of the product, with high impact to confidentiality...

CVE-2026-83337

CVE-2026-83337 affects the Remote Diagnostic Agent component of Oracle Middleware Common Libraries and Tools (part of Oracle Fusion Middleware). Supported versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0 are impacted. The vulnerability is described as easily exploitable by a low-privil...

CVE-2026-83336

Oracle Business Intelligence Enterprise Edition (component: Analytics Server ) is affected by a local privilege escalation vulnerability in supported versions 8.2.0.0.0 and 26.01.0.0.0 . A low-privileged attacker with local logon to the infrastructure can exploit it with no user interaction and l...