CVE-2026-87214

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion component: Security. The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Hyperion Financial...

CVE-2026-83464

Vulnerability in the Oracle Mobile Application Server product of Oracle E-Business Suite component: MWA Terminal Server. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via TCP to compromise Oracle...

CVE-2026-83450

Vulnerability in the Oracle Bills of Material product of Oracle E-Business Suite component: Setup Workbench. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Bills of...

CVE-2026-83271

Vulnerability in the RDBMS component of Oracle Database Server. Supported versions that are affected are 19.3-19.32, 21.3-21.23 and 23.4.0-23.26.3. Easily exploitable vulnerability allows low privileged attacker having Execute on DBMSREDEFINITION privilege with network access via Oracle Net to...

CVE-2026-83226

Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM component: Server Infrastructure. Supported versions that are affected are 17.0-26.7. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Siebel CRM Deployment...

CVE-2026-83157

Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite component: Command Line - RapidClone. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle...

CVE-2026-83060

Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware component: OID LDAP Server. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via LDAP to compromise Oracle...

CVE-2026-82999

Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware component: Messaging Enabler. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Service...

EUVD-2026-79869

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion component: Security. The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Hyperion Financial...

CVE-2026-87201

CVE-2026-87201 affects the Security component of Oracle Hyperion Financial Management (version 11.2.26.0.000 ). A low-privileged attacker with network access via HTTP can easily exploit this vulnerability to achieve a full takeover of the product, resulting in high impact on confidentiality, inte...

CVE-2026-87162

Oracle Contract Lifecycle Management for Public Sector (part of Oracle E-Business Suite, component Award/PO ) in versions 12.2.13 through 12.2.15 is affected by an easily exploitable vulnerability. A low-privileged attacker with network access via HTTP can compromise the product, resulting in a f...

CVE-2026-83245

Oracle Commerce Guided Search / Experience Manager (component: Forge ) version 11.4.0 is affected by a network-based, unauthenticated vulnerability exploitable via HTTP . The attack complexity is rated high (difficult to exploit), but successful exploitation can result in full takeover of the pro...

EUVD-2026-79579

Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM component: EAI. Supported versions that are affected are 17.0-26.7. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Siebel CRM Integration. Successful attacks of...

CVE-2026-83226

Oracle Siebel CRM Deployment (component: Server Infrastructure ) is vulnerable in supported versions 17.0–26.7 to a network-based attack via HTTP that allows a low-privileged attacker to achieve takeover of the deployment with High impact on Confidentiality, Integrity, and Availability. The vulne...

EUVD-2026-79578

Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM component: Server Infrastructure. Supported versions that are affected are 17.0-26.7. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Siebel CRM Deployment...

CVE-2026-83204

Oracle Sourcing (component: Internal Operations ) of Oracle E-Business Suite , versions 12.2.3 through 12.2.15 , is affected by a vulnerability exploitable by a low-privileged attacker with network access via HTTP . The exploit is rated difficult to exploit (high attack complexity), but successfu...

CVE-2026-83199

Oracle Siebel CRM (product: Siebel CRM Deployment , component: Server Infrastructure ) versions 17.0–26.7 are affected by a vulnerability allowing a low-privileged attacker with network access via HTTP to achieve takeover of the product. The CVSS 3.1 base score is 8.8 (HIGH) with high impacts to ...

EUVD-2026-79445

Vulnerability in the Applications DBA product of Oracle E-Business Suite component: AD Utilities. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Applications DBA. Successful attac...

CVE-2026-83040

Oracle WebCenter Portal (part of Oracle Fusion Middleware) is affected via the Portlet Services component in supported versions 12.2.1.4.0 and 14.1.2.0.0 . An unauthenticated attacker with network access can exploit the vulnerability via SOAP with low complexity; however, human interaction from a...

CVE-2026-82997

CVE-2026-82997 is a CRITICAL (CVSS 9.9) vulnerability in Oracle Fusion Middleware Service Delivery Platform , specifically the Messaging Enabler component, affecting versions 12.2.1.4.0 and 14.1.2.0.0 . A low-privileged attacker with network access via T3 or IIOP can exploit this with low complex...