CVE-2026-83056

CVE-2026-83056 affects the OID LDAP Server component of Oracle Internet Directory (Oracle Fusion Middleware), specifically versions 12.2.1.4.0 and 14.1.2.1.0 . The vulnerability allows a low-privileged attacker with network access via LDAP to compromise the server. Due to a scope change , success...

CVE-2026-83057

Oracle Internet Directory (OID LDAP Server component of Oracle Fusion Middleware) is affected by a critical vulnerability (CVSS 3.1: 9.9) in supported versions 12.2.1.4.0 and 14.1.2.1.0 . A low-privileged attacker with network access via LDAP can exploit this with low complexity and no user inter...

CVE-2026-83058

CVE-2026-83058 is a critical vulnerability (CVSS 3.1: 9.9) in the OID LDAP Server component of Oracle Internet Directory (Oracle Fusion Middleware), affecting versions 12.2.1.4.0 and 14.1.2.1.0 . A low-privileged attacker with network access via LDAP can exploit this with low complexity and no us...

CVE-2026-83055

Oracle Internet Directory (component: OID LDAP Server ) in Oracle Fusion Middleware is affected in versions 12.2.1.4.0 and 14.1.2.1.0 . A low-privileged attacker with network access via LDAP can exploit this vulnerability to achieve full takeover of the directory service. The scope change indicat...

EUVD-2026-79383

Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware component: OID LDAP Server. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via LDAP to compromise Oracle...

CVE-2026-83052

CVE-2026-83052 affects the Runtime Tools component of Oracle WebCenter Portal (Oracle Fusion Middleware), versions 12.2.1.4.0 and 14.1.2.0.0 . A high-privileged attacker with network access via HTTP can exploit this with low complexity and no user interaction to gain unauthorized access to critic...

EUVD-2026-79380

Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware component: Runtime Tools. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle WebCent...

CVE-2026-83049

CVE-2026-83049 affects the Security Framework component of Oracle WebCenter Portal (Oracle Fusion Middleware), versions 12.2.1.4.0 and 14.1.2.0.0 . A low-privileged attacker with network access via HTTP can exploit this vulnerability without user interaction, leading to a scope change where addit...

CVE-2026-83048

CVE-2026-83048 affects the Runtime Tools component of Oracle WebCenter Portal (Oracle Fusion Middleware), versions 12.2.1.4.0 and 14.1.2.0.0 . A low-privileged attacker with network access via HTTP can exploit this vulnerability to gain unauthorized access to critical data or complete access to a...

EUVD-2026-79377

Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware component: Security Framework. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

EUVD-2026-79371

Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware component: Composer. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter...

EUVD-2026-79373

Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware component: Runtime Tools. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle WebCente...

CVE-2026-83043

Oracle WebCenter Portal (component: Composer ) in Oracle Fusion Middleware is affected in supported versions 12.2.1.4.0 and 14.1.2.0.0 . The vulnerability allows an unauthenticated attacker with network access via HTTP to compromise the product, though successful exploitation requires human inter...

EUVD-2026-79368

Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware component: Portlet Services. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via SOAP to compromise Oracle...

CVE-2026-83041

This vulnerability affects Oracle WebCenter Portal (component: Portlet Services ) in versions 12.2.1.4.0 and 14.1.2.0.0 of Oracle Fusion Middleware. A low-privilege attacker with network access via HTTP can exploit this vulnerability with low complexity and no user interaction to gain unauthorize...

EUVD-2026-79369

Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware component: Portlet Services. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

CVE-2026-83040

Oracle WebCenter Portal (part of Oracle Fusion Middleware) is affected via the Portlet Services component in supported versions 12.2.1.4.0 and 14.1.2.0.0 . An unauthenticated attacker with network access can exploit the vulnerability via SOAP with low complexity; however, human interaction from a...

EUVD-2026-79366

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: TopLink Integration. Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP ...

CVE-2026-83038

CVE-2026-83038 affects the TopLink Integration component of Oracle WebLogic Server (Oracle Fusion Middleware), with supported versions 12.2.1.4.0 , 14.1.1.0.0 , 14.1.2.0.0 , and 15.1.1.0.0 impacted. A low-privileged attacker with network access via HTTP can exploit this vulnerability to achieve t...

CVE-2026-83039

Oracle WebCenter Portal (component: Composer ) is vulnerable to a critical flaw in supported versions 12.2.1.4.0 and 14.1.2.0.0 . A low-privileged attacker with network access via HTTP and no user interaction can exploit this vulnerability to achieve takeover of the product, with a scope change m...