EUVD-2026-79648

Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics component: BI Search. Supported versions that are affected are 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to...

EUVD-2026-79646

Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics component: Platform Security. Supported versions that are affected are 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0. Easily exploitable vulnerability allows unauthenticated attacker with logon to the...

CVE-2026-83294

CVE-2026-83294 affects Oracle Business Intelligence Enterprise Edition (component: Platform Security ) in Oracle Analytics. Supported versions 8.2.0.0.0 , 12.2.1.4.0 , and 26.01.0.0.0 are impacted. The vulnerability is easily exploitable by an unauthenticated attacker with local logon to the infr...

CVE-2026-83290

Oracle Business Intelligence Enterprise Edition (part of Oracle Analytics) has a vulnerability in the Platform Security component affecting versions 8.2.0.0.0 and 26.01.0.0.0 . A low-privileged attacker with local access can exploit this with low complexity and no user interaction, resulting in t...

CVE-2026-83291

A vulnerability in the Platform Security component of Oracle Business Intelligence Enterprise Edition (part of Oracle Analytics) affects versions 8.2.0.0.0 and 26.01.0.0.0 . A low-privileged attacker with local logon access can exploit this with low complexity and no user interaction to achieve f...

EUVD-2026-79638

Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics component: Platform Security. Supported versions that are affected are 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via...

EUVD-2026-79636

Vulnerability in the Oracle BI Publisher product of Oracle Analytics component: BI Platform Security. Supported versions that are affected are 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via SOAP to compromise Oracle ...

EUVD-2026-79634

Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics component: Platform Security. The supported version that is affected is 12.2.1.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

CVE-2026-83280

CVE-2026-83280 is a Denial of Service vulnerability in Oracle Helidon (component: helidon-webserver-http2 ), part of Oracle Fusion Middleware. Affected versions are 4.0.0 through 4.5.4 . An unauthenticated attacker with network access can send crafted requests via HTTP/2 to cause a hang or freque...

EUVD-2026-79621

Vulnerability in the Oracle BI Publisher product of Oracle Analytics component: BI Platform Security. Supported versions that are affected are 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle ...

CVE-2026-83264

Oracle Product Lifecycle Analytics (version 3.6.1 ), component Installation Issues , is affected by an easily exploitable vulnerability that allows a low-privileged attacker with local logon to the infrastructure to compromise the product. The scope change means attacks may significantly impact a...

CVE-2026-83261

Oracle Product Lifecycle Analytics (component: Core), version 3.6.1 , is affected by an unauthenticated, network-accessible vulnerability exploitable via HTTP . The CVSS 3.1 score is 9.8 (Critical) with full impact on confidentiality, integrity, and availability, meaning a successful attack resul...

CVE-2026-83257

CVE-2026-83257 affects Oracle Commerce Guided Search / Oracle Commerce Experience Manager (component: Forge ), version 11.4.0 . A low-privileged attacker with network access via HTTP can exploit this vulnerability to achieve full takeover of the affected product. The attack is rated difficult to ...

CVE-2026-83253

CVE-2026-83253 affects the Endeca Application Controller component within Oracle Commerce Guided Search / Oracle Commerce Experience Manager (version 11.4.0 ). This easily exploitable vulnerability allows an unauthenticated attacker with local access to the infrastructure where the product execut...

CVE-2026-83250

Oracle Commerce Guided Search / Oracle Commerce Experience Manager (component: Forge ) version 11.4.0 is affected by a difficult-to-exploit vulnerability that allows an unauthenticated attacker with network access via HTTP to compromise the product. Successful exploitation can result in unauthori...

CVE-2026-83247

CVE-2026-83247 affects the Forge component of Oracle Commerce Guided Search / Oracle Commerce Experience Manager , version 11.4.0 . The vulnerability is a local attack vector requiring no prior privileges but needing user interaction from a non-attacker. Successful exploitation results in a full ...

EUVD-2026-79598

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce component: Forge. The supported version that is affected is 11.4.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Orac...

CVE-2026-83245

Oracle Commerce Guided Search / Experience Manager (component: Forge ) version 11.4.0 is affected by a network-based, unauthenticated vulnerability exploitable via HTTP . The attack complexity is rated high (difficult to exploit), but successful exploitation can result in full takeover of the pro...

CVE-2026-83246

CVE-2026-83246 affects the Forge component of Oracle Commerce Guided Search / Oracle Commerce Experience Manager , version 11.4.0 . The vulnerability allows an unauthenticated attacker with network access via HTTP to achieve full takeover of the product, resulting in high impact to confidentialit...

EUVD-2026-79592

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce component: Forge. The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle...