EUVD-2026-79321

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft component: Business Interlink. Supported versions that are affected are 8.61-8.63. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise...

CVE-2026-73962

Oracle Access Manager (Oracle Fusion Middleware, component: Authentication Engine ) is affected in versions 12.2.1.4.0 and 14.1.2.1.0 . A low-privileged attacker with network access via HTTPS can exploit this vulnerability to compromise the authentication engine. Due to scope change , successful ...

EUVD-2026-79316

Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware component: Authentication Engine. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTPS to compromise Oracle...

CVE-2026-73957

CVE-2026-73957 affects Oracle WebCenter Portal (component: Portlet Services ) in Oracle Fusion Middleware , versions 12.2.1.4.0 and 14.1.2.0.0 . An unauthenticated attacker with network access via HTTP can compromise the product, but successful exploitation requires user interaction from someone ...

EUVD-2026-79311

Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware component: Portlet Services. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

CVE-2026-73948

CVE-2026-73948 is a Critical (CVSS 3.1: 9.9) vulnerability in the Composer component of Oracle WebCenter Portal (Oracle Fusion Middleware), affecting versions 12.2.1.4.0 and 14.1.2.0.0 . A low-privileged attacker with network access via HTTP can exploit this with no user interaction, leading to f...

EUVD-2026-79302

Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware component: Composer. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle WebCenter...

EUVD-2026-79524

Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware component: Authentication Engine. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

EUVD-2026-79525

Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware component: Authentication Engine. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle...

CVE-2026-73945

CVE-2026-73945 affects the Authentication Engine component of Oracle Access Manager (Oracle Fusion Middleware), versions 12.2.1.4.0 and 14.1.2.1.0 . A low-privileged attacker with network access via HTTP can exploit this vulnerability to achieve takeover of Oracle Access Manager. The vulnerabilit...

CVE-2026-73946

CVE-2026-73946 affects the Authentication Engine component of Oracle Access Manager (Oracle Fusion Middleware), versions 12.2.1.4.0 and 14.1.2.1.0 . A high-privileged attacker with network access via HTTP can exploit this with low complexity and no user interaction, resulting in full takeover of ...

EUVD-2026-79522

Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware component: OIM Legacy UI. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Identit...

CVE-2026-73943

CVE-2026-73943 affects the Oracle Identity Manager (OIM Legacy UI) component within Oracle Fusion Middleware, specifically supported versions 12.2.1.4.0 and 14.1.2.1.0 . The vulnerability allows a high-privileged attacker with network access via HTTP to compromise the system. Due to a scope chang...

EUVD-2026-79518

Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware component: Authentication Engine. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle...

EUVD-2026-79520

Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware component: Authentication Engine. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

CVE-2026-73926

CVE-2026-73926 affects the Authentication Engine component of Oracle Access Manager (Oracle Fusion Middleware), versions 12.2.1.4.0 and 14.1.2.1.0 . A high-privileged attacker with network access via HTTP can exploit this vulnerability to achieve unauthorized creation, deletion, modification, and...

CVE-2026-73941

Oracle Access Manager (part of Oracle Fusion Middleware), specifically the Authentication Engine component, is affected in supported versions 12.2.1.4.0 and 14.1.2.1.0 . An unauthenticated attacker with network access via HTTP can exploit this vulnerability to gain unauthorized access to critical...

EUVD-2026-79517

Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware component: Authentication Engine. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

EUVD-2026-79516

Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware component: Authentication Engine. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

CVE-2026-71133

Oracle Access Manager (Oracle Fusion Middleware), specifically the Authentication Engine component, is affected by a critical vulnerability (CVSS 3.1: 10.0 ) in versions 12.2.1.4.0 and 14.1.2.1.0 . An unauthenticated attacker with network access via HTTP can compromise the product with low comple...