CVE-2026-83138

A vulnerability in the Oracle Spares Management product (component: Internal Operations ) of Oracle E-Business Suite , affecting supported versions 12.2.3 through 12.2.15 , allows a high-privileged attacker with network access via HTTP to achieve full takeover. The vulnerability is rated CVSS 3.1...

EUVD-2026-79466

Vulnerability in the Oracle Spares Management product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Spares...

EUVD-2026-79462

Vulnerability in the Oracle iStore product of Oracle E-Business Suite component: Shopping Cart. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle iStore. While the vulnerabilit...

CVE-2026-83134

CVE-2026-83134 affects the Shopping Cart component of Oracle iStore (part of Oracle E-Business Suite), versions 12.2.3 through 12.2.15 . A low-privileged attacker with network access via HTTP can exploit this vulnerability with low complexity and no user interaction to gain unauthorized access to...

EUVD-2026-79463

Vulnerability in the Oracle iStore product of Oracle E-Business Suite component: Shopping Cart. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle iStore. Successful attacks...

CVE-2026-83135

A vulnerability in the Shopping Cart component of Oracle iStore (part of Oracle E-Business Suite) affects supported versions 12.2.3 through 12.2.15 . A low-privileged attacker with network access via HTTP can exploit this with required user interaction, resulting in high impact to confidentiality...

EUVD-2026-79459

Vulnerability in the Oracle Web Applications Desktop Integrator product of Oracle E-Business Suite component: File download. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTPS to compromise Oracle...

EUVD-2026-79457

Vulnerability in the Oracle Sales product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Sales. While the...

CVE-2026-83126

This vulnerability affects Oracle Sales Online , a component of Oracle E-Business Suite (sub-component: Internal Operations ), in supported versions 12.2.3 through 12.2.15 . A low-privileged attacker with network access via HTTP can exploit this vulnerability, though successful attacks require hu...

EUVD-2026-79455

Vulnerability in the Oracle Sales Offline product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Sales Offline...

EUVD-2026-79454

Vulnerability in the Oracle Sales Online product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Sales Online...

EUVD-2026-79444

Vulnerability in the Oracle Order Management product of Oracle E-Business Suite component: Product Diagnostic Tools. Supported versions that are affected are 12.2.5-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Order...

EUVD-2026-79439

Vulnerability in the Oracle Partner Management product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Partner...

CVE-2026-83111

CVE-2026-83111 affects the Oracle Partner Management product (component: Internal Operations ) within Oracle E-Business Suite , versions 12.2.3 through 12.2.15 . A low-privileged attacker with network access via HTTP can exploit this vulnerability, though it is rated difficult to exploit (high at...

EUVD-2026-79435

Vulnerability in the Oracle Forms product of Oracle Fusion Middleware component: Forms Services, C/S, Charmode. Supported versions that are affected are 12.2.1.19.0 and 14.1.2.0.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle...

CVE-2026-83107

CVE-2026-83107 affects the Oracle Forms product of Oracle Fusion Middleware, specifically the Forms Services, C/S, Charmode component. Supported versions 12.2.1.19.0 and 14.1.2.0.0 are vulnerable. A high-privileged attacker with network access via HTTP can exploit this easily (low complexity, no ...

CVE-2026-83105

CVE-2026-83105 affects Oracle Forms (component: Forms Services, C/S, Charmode ) in Oracle Fusion Middleware , versions 12.2.1.19.0 and 14.1.2.0.0 . A difficult-to-exploit vulnerability allows an unauthenticated attacker with network access via HTTP to compromise the product. Although rooted in Or...

CVE-2026-83103

Oracle Forms (component: Forms Services, C/S, Charmode) within Oracle Fusion Middleware is affected by an easily exploitable vulnerability in versions 12.2.1.19.0 and 14.1.2.0.0 . A high-privileged attacker with network access via HTTP can compromise Oracle Forms, with a scope change meaning atta...

EUVD-2026-79431

Vulnerability in the Oracle Forms product of Oracle Fusion Middleware component: Forms Services, C/S, Charmode. Supported versions that are affected are 12.2.1.19.0 and 14.1.2.0.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle...

EUVD-2026-79433

Vulnerability in the Oracle Forms product of Oracle Fusion Middleware component: Forms Services, C/S, Charmode. Supported versions that are affected are 12.2.1.19.0 and 14.1.2.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...