CVE-2026-87248

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion component: Security. The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Hyperion Financial...

CVE-2026-83456

Vulnerability in the Oracle Demand Signal Repository product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Demand...

CVE-2026-83212

Vulnerability in the Siebel Apps - Self Service product of Oracle Siebel CRM component: Helpdesk/Training. Supported versions that are affected are 17.0-26.7. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Siebel Apps - Self Service...

CVE-2026-83125

Vulnerability in the Oracle Report Manager product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Report Manager...

CVE-2026-83121

Vulnerability in the Oracle Marketing product of Oracle E-Business Suite component: Audience. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Marketing. Successful attacks of...

CVE-2026-83090

Vulnerability in the Oracle Spares Management product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Spares...

CVE-2026-82997

Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware component: Messaging Enabler. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via T3, IIOP to compromise Servi...

CVE-2026-83411

Oracle Coherence (component: Core ) in Oracle Fusion Middleware is vulnerable to a high-severity issue (CVSS 3.1: 8.8 ) affecting versions 14.1.1.0.0 , 14.1.2.0.0 , and 15.1.1.0.0 . A low-privileged attacker with network access via HTTP can exploit this with low complexity to achieve full takeove...

CVE-2026-83315

This vulnerability affects Oracle BI Publisher (component: BI Platform Security ) within Oracle Analytics, impacting supported versions 8.2.0.0.0 , 12.2.1.4.0 , and 26.01.0.0.0 . A low-privileged attacker with network access can exploit the vulnerability via SOAP with low complexity and no user i...

EUVD-2026-79621

Vulnerability in the Oracle BI Publisher product of Oracle Analytics component: BI Platform Security. Supported versions that are affected are 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle ...

EUVD-2026-79601

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce component: Forge. The supported version that is affected is 11.4.0. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle...

CVE-2026-83246

CVE-2026-83246 affects the Forge component of Oracle Commerce Guided Search / Oracle Commerce Experience Manager , version 11.4.0 . The vulnerability allows an unauthenticated attacker with network access via HTTP to achieve full takeover of the product, resulting in high impact to confidentialit...

CVE-2026-83176

CVE-2026-83176 affects Oracle E-Business Suite (Oracle Common Applications, component: CRM User Management Framework ), versions 12.2.3 through 12.2.15 . The vulnerability allows a high-privileged attacker with network access via HTTP to compromise the application, resulting in a full takeover wi...

CVE-2026-83122

Oracle Report Manager , a component of Oracle E-Business Suite (specifically the Internal Operations component), is affected by an easily exploitable vulnerability in supported versions 12.2.3 through 12.2.15 . A low-privileged attacker with network access via HTTPS can exploit this flaw to achie...

CVE-2026-83060

Oracle Internet Directory (OID LDAP Server) in Oracle Fusion Middleware versions 12.2.1.4.0 and 14.1.2.1.0 is affected by an easily exploitable vulnerability that allows an unauthenticated attacker with network access via LDAP to compromise the service. Successful exploitation can result in full ...

CVE-2026-83024

This vulnerability affects the Core component of Oracle Identity Manager Connector , part of Oracle Fusion Middleware. Supported versions 12.2.1.4.0 and 14.1.2.1.0 are impacted. A low-privileged local attacker with logon to the infrastructure where the connector executes can exploit this with low...

PT-2026-92688

Vulnerability in the Oracle Customer Interaction History product of Oracle E-Business Suite component: User Interface. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTPS to compromise Oracle Custom...

PT-2026-92907

Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Product Hub...

PT-2026-92840

Name of the Vulnerable Software and Affected Versions Oracle BI Publisher versions 8.2.0.0.0, 12.2.1.4.0, and 26.01.0.0.0 Description A flaw in the Administration component allows a low privileged attacker with network access via HTTP to compromise the system. Successful exploitation can result i...

CVE-2026-71327

A flaw was found in Traefik, an open-source HTTP reverse proxy and load balancer. Its Kubernetes Gateway API provider incorrectly generates unique identifiers for routes and services. This vulnerability allows an attacker to create conflicting routes, which can then overwrite the backend services...