CVE-2026-83253

CVE-2026-83253 affects the Endeca Application Controller component within Oracle Commerce Guided Search / Oracle Commerce Experience Manager (version 11.4.0 ). This easily exploitable vulnerability allows an unauthenticated attacker with local access to the infrastructure where the product execut...

CVE-2026-83250

Oracle Commerce Guided Search / Oracle Commerce Experience Manager (component: Forge ) version 11.4.0 is affected by a difficult-to-exploit vulnerability that allows an unauthenticated attacker with network access via HTTP to compromise the product. Successful exploitation can result in unauthori...

CVE-2026-83247

CVE-2026-83247 affects the Forge component of Oracle Commerce Guided Search / Oracle Commerce Experience Manager , version 11.4.0 . The vulnerability is a local attack vector requiring no prior privileges but needing user interaction from a non-attacker. Successful exploitation results in a full ...

EUVD-2026-79598

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce component: Forge. The supported version that is affected is 11.4.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Orac...

CVE-2026-83245

Oracle Commerce Guided Search / Experience Manager (component: Forge ) version 11.4.0 is affected by a network-based, unauthenticated vulnerability exploitable via HTTP . The attack complexity is rated high (difficult to exploit), but successful exploitation can result in full takeover of the pro...

CVE-2026-83246

CVE-2026-83246 affects the Forge component of Oracle Commerce Guided Search / Oracle Commerce Experience Manager , version 11.4.0 . The vulnerability allows an unauthenticated attacker with network access via HTTP to achieve full takeover of the product, resulting in high impact to confidentialit...

CVE-2026-83242

Oracle Commerce Guided Search / Oracle Commerce Experience Manager (component: Experience Manager ), version 11.4.0 , is affected by an easily exploitable vulnerability that allows an unauthenticated attacker with network access via HTTP to compromise the product. Successful exploitation can resu...

EUVD-2026-79592

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce component: Forge. The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle...

CVE-2026-83231

Oracle Helidon (Fusion Middleware), specifically the helidon-dbclient-mongodb component, is affected in versions 3.0.0–3.2.20 and 4.0.0–4.5.4 . A difficult-to-exploit vulnerability allows an unauthenticated attacker with network access via HTTP to compromise the component. Successful exploitation...

CVE-2026-83223

Oracle Siebel CRM (component: Siebel Remote ) in versions 17.0 through 26.7 contains a vulnerability that allows a low-privileged attacker with network access via HTTP to compromise the Siebel CRM Deployment component. The attack has high complexity , meaning exploitation is not straightforward, ...

CVE-2026-83218

A vulnerability in Oracle Siebel CRM affects the Siebel CRM Deployment product (component: Server Infrastructure ), versions 17.0 through 26.7 . An unauthenticated attacker with network access via HTTP can exploit this vulnerability, though it carries high attack complexity . Successful exploitat...

EUVD-2026-79566

Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM component: Server Infrastructure. Supported versions that are affected are 17.0-26.7. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Siebel CRM Deployment executes to...

CVE-2026-83211

Oracle Siebel CRM (component: Server Infrastructure ) in the Siebel CRM Deployment product has an easily exploitable local vulnerability affecting supported versions 17.0–26.7 . A low-privileged attacker with logon to the hosting infrastructure can exploit this with low complexity and no user int...

EUVD-2026-79561

Vulnerability in the Siebel CRM Development product of Oracle Siebel CRM component: Workflow. Supported versions that are affected are 17.0-26.7. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Siebel CRM Development. Successful attacks o...

EUVD-2026-79544

Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM component: Open UI. Supported versions that are affected are 17.0-26.7. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel CRM End User. Successful attacks of th...

CVE-2026-83191

Oracle Siebel CRM — component Server Infrastructure — is affected in supported versions 17.0 through 26.7 . An unauthenticated attacker with network access via TCP can exploit a difficult-to-exploit (high complexity) vulnerability to achieve full takeover of the Siebel CRM Deployment component, i...

EUVD-2026-79545

Vulnerability in the Siebel Apps - Life Sciences product of Oracle Siebel CRM component: Life Sciences. Supported versions that are affected are 17.0-26.7. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Siebel Apps - Life Sciences executes t...

EUVD-2026-79541

Vulnerability in the Oracle User Management product of Oracle E-Business Suite component: Proxy User Delegation. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle User...

CVE-2026-83190

CVE-2026-83190 is a vulnerability in Oracle Siebel CRM (component: Server Infrastructure ) affecting supported versions 17.0 through 26.7 . The flaw allows a low-privileged attacker with local access to the infrastructure where Siebel CRM Deployment executes to compromise the product, requiring h...

CVE-2026-83184

Oracle Application Object Library (component: Core) in Oracle E-Business Suite versions 12.2.3 through 12.2.15 contains a vulnerability that allows an unauthenticated attacker with network access via HTTP to compromise the component. The vulnerability is rated difficult to exploit (high attack co...