CVE-2026-83413

CVE-2026-83413 is a low-severity vulnerability in Oracle Coherence (Oracle Fusion Middleware, component: Core), affecting versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. The flaw allows a high-privileged, local attacker with high complexity to perform unauthorized update, insert, or ...

EUVD-2026-79705

Vulnerability in the Oracle XML Gateway product of Oracle E-Business Suite component: Install. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle XML Gateway. Successful attacks...

EUVD-2026-79706

Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware component: Content Server. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle WebCenter...

CVE-2026-83349

CVE-2026-83349 affects the Oracle Net Services component of Oracle Database Server in supported versions 19.3–19.32 , 21.3–21.23 , and 23.4.0–23.26.3 . An unauthenticated attacker with network access via Oracle Net can trigger a hang or frequently repeatable crash , resulting in a complete denial...

CVE-2026-83347

This vulnerability affects the Oracle Net Services component of Oracle Database Server , versions 23.4.0–23.26.3 . An unauthenticated attacker with network access via TCPS can trigger a complete denial of service (hang or repeatable crash) of Oracle Net Services. Successful exploitation requires ...

EUVD-2026-79703

Vulnerability in the Oracle Net Services component of Oracle Database Server. Supported versions that are affected are 21.3-21.23 and 23.4.0-23.26.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via Oracle Net to compromise Oracle Net Services. Successful...

CVE-2026-83346

CVE-2026-83346 is a vulnerability in the Framework component of Oracle Fusion Middleware Control , affecting supported versions 12.2.1.4.0 and 14.1.2.0.0 . A low-privileged attacker with network access via HTTP can exploit this vulnerability, though successful exploitation requires user interacti...

CVE-2026-83339

Oracle WebCenter Enterprise Capture (part of Oracle Fusion Middleware), specifically the Client Bundle component, is affected by a critical vulnerability in supported versions 12.2.1.4.0 and 14.1.2.0.0 . An unauthenticated attacker with network access via HTTP can exploit this flaw to achieve tak...

EUVD-2026-79693

Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware component: Security. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Identity...

EUVD-2026-79689

Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics component: Analytics Server. Supported versions that are affected are 8.2.0.0.0 and 26.01.0.0.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where...

CVE-2026-83337

CVE-2026-83337 affects the Remote Diagnostic Agent component of Oracle Middleware Common Libraries and Tools (part of Oracle Fusion Middleware). Supported versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0 are impacted. The vulnerability is described as easily exploitable by a low-privil...

EUVD-2026-79690

Vulnerability in the Oracle Middleware Common Libraries and Tools product of Oracle Fusion Middleware component: Remote Diagnostic Agent. Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows low privileged attacker wit...

CVE-2026-83329

CVE-2026-83329 affects the Personalization component of the Oracle Applications Framework in Oracle E-Business Suite, versions 12.2.9 through 12.2.15 . A low-privileged attacker with network access via HTTP can exploit this vulnerability with low complexity and no user interaction to achieve full...

CVE-2026-83331

CVE-2026-83331 affects the Personalization component of Oracle Applications Framework within Oracle E-Business Suite, versions 12.2.9 through 12.2.15 . The vulnerability is network-exploitable via HTTP with low complexity and requires only a low-privileged attacker and no user interaction. Succes...

CVE-2026-83328

CVE-2026-83328 affects the Personalization component of Oracle Applications Framework within Oracle E-Business Suite, versions 12.2.3 through 12.2.15 . An easily exploitable vulnerability allows a high-privileged attacker with network access via HTTP to compromise the framework, resulting in a fu...

EUVD-2026-79670

Vulnerability in the Oracle BI Publisher product of Oracle Analytics component: Administration. Supported versions that are affected are 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle BI...

CVE-2026-83318

Oracle BI Publisher (part of Oracle Analytics , Administration component) is affected by a network-based vulnerability in supported versions 8.2.0.0.0 , 12.2.1.4.0 , and 26.01.0.0.0 . A low-privileged attacker with HTTP network access can exploit this, though exploitation is rated as difficult (h...

EUVD-2026-79668

Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics component: Platform Security. The supported version that is affected is 26.01.0.0.0. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle...

EUVD-2026-79659

Vulnerability in the Oracle BI Publisher product of Oracle Analytics component: BI Platform Security. Supported versions that are affected are 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle B...

CVE-2026-83306

Oracle JDeveloper (Oracle Fusion Middleware), specifically the Resource Catalog Services component, is affected in supported versions 12.2.1.4.0 and 14.1.2.0.0 . A low-privileged attacker with network access via HTTP can exploit this vulnerability to achieve full takeover of the Oracle JDeveloper...