EUVD-2026-79668

Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics component: Platform Security. The supported version that is affected is 26.01.0.0.0. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle...

EUVD-2026-79659

Vulnerability in the Oracle BI Publisher product of Oracle Analytics component: BI Platform Security. Supported versions that are affected are 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle B...

CVE-2026-83306

Oracle JDeveloper (Oracle Fusion Middleware), specifically the Resource Catalog Services component, is affected in supported versions 12.2.1.4.0 and 14.1.2.0.0 . A low-privileged attacker with network access via HTTP can exploit this vulnerability to achieve full takeover of the Oracle JDeveloper...

CVE-2026-83305

Oracle BI Publisher (component: BI Platform Security ) in Oracle Analytics is vulnerable to an easily exploitable flaw allowing an unauthenticated attacker with network access via HTTP to compromise the product. Affected supported versions are 8.2.0.0.0 , 12.2.1.4.0 , and 26.01.0.0.0 . Successful...

CVE-2026-83304

Oracle Business Intelligence Enterprise Edition (component: Analytics Web General ) in Oracle Analytics is vulnerable via unauthenticated network access over HTTP. Affected supported versions are 8.2.0.0.0 , 12.2.1.4.0 , and 26.01.0.0.0 . The vulnerability is rated HIGH (CVSS 3.1: 8.9 , vector AV...

CVE-2026-83302

Oracle BI Publisher (component: BI Publisher Security ), part of Oracle Analytics, version 12.2.1.4.0 is affected by an easily exploitable vulnerability. A low-privileged attacker with network access via HTTP can exploit it to gain unauthorized access to critical data (high confidentiality impact...

EUVD-2026-79647

Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics component: Presentation Services. Supported versions that are affected are 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0. Difficult to exploit vulnerability allows low privileged attacker with network access...

EUVD-2026-79648

Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics component: BI Search. Supported versions that are affected are 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to...

EUVD-2026-79646

Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics component: Platform Security. Supported versions that are affected are 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0. Easily exploitable vulnerability allows unauthenticated attacker with logon to the...

CVE-2026-83294

CVE-2026-83294 affects Oracle Business Intelligence Enterprise Edition (component: Platform Security ) in Oracle Analytics. Supported versions 8.2.0.0.0 , 12.2.1.4.0 , and 26.01.0.0.0 are impacted. The vulnerability is easily exploitable by an unauthenticated attacker with local logon to the infr...

CVE-2026-83290

Oracle Business Intelligence Enterprise Edition (part of Oracle Analytics) has a vulnerability in the Platform Security component affecting versions 8.2.0.0.0 and 26.01.0.0.0 . A low-privileged attacker with local access can exploit this with low complexity and no user interaction, resulting in t...

CVE-2026-83291

A vulnerability in the Platform Security component of Oracle Business Intelligence Enterprise Edition (part of Oracle Analytics) affects versions 8.2.0.0.0 and 26.01.0.0.0 . A low-privileged attacker with local logon access can exploit this with low complexity and no user interaction to achieve f...

EUVD-2026-79638

Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics component: Platform Security. Supported versions that are affected are 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via...

EUVD-2026-79634

Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics component: Platform Security. The supported version that is affected is 12.2.1.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

EUVD-2026-79636

Vulnerability in the Oracle BI Publisher product of Oracle Analytics component: BI Platform Security. Supported versions that are affected are 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via SOAP to compromise Oracle ...

CVE-2026-83280

CVE-2026-83280 is a Denial of Service vulnerability in Oracle Helidon (component: helidon-webserver-http2 ), part of Oracle Fusion Middleware. Affected versions are 4.0.0 through 4.5.4 . An unauthenticated attacker with network access can send crafted requests via HTTP/2 to cause a hang or freque...

EUVD-2026-79621

Vulnerability in the Oracle BI Publisher product of Oracle Analytics component: BI Platform Security. Supported versions that are affected are 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle ...

CVE-2026-83264

Oracle Product Lifecycle Analytics (version 3.6.1 ), component Installation Issues , is affected by an easily exploitable vulnerability that allows a low-privileged attacker with local logon to the infrastructure to compromise the product. The scope change means attacks may significantly impact a...

CVE-2026-83261

Oracle Product Lifecycle Analytics (component: Core), version 3.6.1 , is affected by an unauthenticated, network-accessible vulnerability exploitable via HTTP . The CVSS 3.1 score is 9.8 (Critical) with full impact on confidentiality, integrity, and availability, meaning a successful attack resul...

CVE-2026-83257

CVE-2026-83257 affects Oracle Commerce Guided Search / Oracle Commerce Experience Manager (component: Forge ), version 11.4.0 . A low-privileged attacker with network access via HTTP can exploit this vulnerability to achieve full takeover of the affected product. The attack is rated difficult to ...