13209 matches found
EUVD-2026-79339
Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware component: Centralized Thirdparty Jars. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to...
EUVD-2026-79337
Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware component: Client Bundle. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise...
CVE-2026-83008
Oracle WebCenter Enterprise Capture (part of Oracle Fusion Middleware) contains a vulnerability in the Client Bundle component, affecting versions 12.2.1.4.0 and 14.1.2.0.0 . A low-privileged attacker with network access via T3 or IIOP can exploit this to achieve full takeover of the product, imp...
EUVD-2026-79328
Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware component: Messaging Enabler. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Service...
CVE-2026-83000
Oracle Fusion Middleware Service Delivery Platform (component: Messaging Enabler ) is vulnerable to a critical, easily exploitable flaw in versions 12.2.1.4.0 and 14.1.2.0.0 . An unauthenticated attacker with network access via HTTP can compromise the platform, resulting in full takeover (high im...
CVE-2026-82997
CVE-2026-82997 is a CRITICAL (CVSS 9.9) vulnerability in Oracle Fusion Middleware Service Delivery Platform , specifically the Messaging Enabler component, affecting versions 12.2.1.4.0 and 14.1.2.0.0 . A low-privileged attacker with network access via T3 or IIOP can exploit this with low complex...
CVE-2026-82999
A vulnerability in Oracle Fusion Middleware – Service Delivery Platform (component: Messaging Enabler ) affects versions 12.2.1.4.0 and 14.1.2.0.0 . A low-privileged attacker with network access via HTTP can exploit it to achieve a full takeover of the Service Delivery Platform. Notably, the vuln...
EUVD-2026-79325
Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware component: Messaging Enabler. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via T3, IIOP to compromise Servi...
EUVD-2026-79326
Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware component: Messaging Enabler. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via T3, IIOP to compromise Servi...
EUVD-2026-79323
Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware component: Centralized Thirdparty Jars. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via SOAP to...
CVE-2026-73963
CVE-2026-73963 is a critical (CVSS 9.8) vulnerability in Oracle WebCenter Portal (Oracle Fusion Middleware), specifically the Portlet Services component, affecting versions 12.2.1.4.0 and 14.1.2.0.0 . An unauthenticated attacker with network access via HTTP can exploit this vulnerability to achie...
EUVD-2026-79312
Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware component: Authentication Engine. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...
CVE-2026-73950
Oracle Access Manager (part of Oracle Fusion Middleware), specifically the Authentication Engine component, is affected by an easily exploitable vulnerability in supported versions 12.2.1.4.0 and 14.1.2.1.0 . An unauthenticated attacker with network access via HTTP can exploit this flaw to achiev...
EUVD-2026-79305
Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware component: Portlet Services. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...
EUVD-2026-79303
Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware component: Portlet Services. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...
EUVD-2026-79525
Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware component: Authentication Engine. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle...
CVE-2026-73943
CVE-2026-73943 affects the Oracle Identity Manager (OIM Legacy UI) component within Oracle Fusion Middleware, specifically supported versions 12.2.1.4.0 and 14.1.2.1.0 . The vulnerability allows a high-privileged attacker with network access via HTTP to compromise the system. Due to a scope chang...
CVE-2026-73942
Oracle Identity Manager (part of Oracle Fusion Middleware) is affected via its OIM Legacy UI component in supported versions 12.2.1.4.0 and 14.1.2.1.0 . An attacker with low privileges and network access via HTTP can exploit this vulnerability without user interaction to achieve full takeover of ...
EUVD-2026-79513
Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Identity Manager...
CVE-2026-70913
CVE-2026-70913 is a critical vulnerability (CVSS 3.1: 9.8) in the Core component of Oracle Identity Manager (Oracle Fusion Middleware), affecting supported versions 12.2.1.4.0 and 14.1.2.1.0 . An unauthenticated attacker with network access via HTTP can exploit this vulnerability to achieve full ...