CVE-2026-83485

This vulnerability affects the Item Catalog component of Oracle Product Hub within Oracle E-Business Suite, supporting versions 12.2.3 through 12.2.15 . A low-privileged attacker with network access via HTTP can exploit it with low complexity and no user interaction. Successful exploitation resul...

EUVD-2026-79772

Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite component: Item Catalog. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Product Hub. While the...

CVE-2026-83483

Oracle Advanced Benefits (part of Oracle E-Business Suite) contains a vulnerability in the Self-serv What-if Analysis component affecting versions 12.2.3 through 12.2.15 . A high-privileged attacker with network access via HTTP can exploit this vulnerability, which is rated as difficult to exploi...

EUVD-2026-79764

Vulnerability in the Oracle Mobile Application Server product of Oracle E-Business Suite component: MWA Terminal Server. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Mobi...

CVE-2026-83465

CVE-2026-83465 affects the MWA Terminal Server component of Oracle Mobile Application Server within Oracle E-Business Suite, impacting supported versions 12.2.3 through 12.2.15 . An unauthenticated attacker with network access via HTTP can exploit this vulnerability with low complexity, though it...

EUVD-2026-79750

Vulnerability in the Oracle Product Workbench product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Product...

CVE-2026-83451

CVE-2026-83451 affects the Oracle Product Workbench component of Oracle E-Business Suite, specifically the Internal Operations component, in supported versions 12.2.3 through 12.2.15 . The vulnerability allows a low-privileged attacker with network access via HTTP to compromise the product, despi...

CVE-2026-83450

Oracle E-Business Suite – Bills of Material (component: Setup Workbench ) is affected by a vulnerability in supported versions 12.2.3 through 12.2.15 . The flaw allows a high-privileged attacker with network access via HTTP to compromise the product. The vulnerability carries a scope change , mea...

CVE-2026-83449

A vulnerability in the Oracle Bills of Material component (Internal Operations) of Oracle E-Business Suite affects supported versions 12.2.3 through 12.2.15 . An attacker with low-level network access via HTTP can exploit this with low complexity and no user interaction, leading to high confident...

CVE-2026-83437

Oracle Engineering (component: Change Management ) in Oracle E-Business Suite versions 12.2.3 through 12.2.15 contains an easily exploitable vulnerability. A low-privileged attacker with network access via HTTP can compromise the component, and due to a scope change , attacks may significantly im...

EUVD-2026-79735

Vulnerability in the Oracle Engineering product of Oracle E-Business Suite component: Change Management. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Engineering. While th...

EUVD-2026-79736

Vulnerability in the Oracle Engineering product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Engineering. Whil...

CVE-2026-83435

Oracle E-Business Suite – Bills of Material (Internal Operations) is vulnerable in supported versions 12.2.13–12.2.15 . A low-privileged attacker with network access via HTTP can exploit this difficulty-rated vulnerability to achieve unauthorized creation, deletion, modification, or access to cri...

EUVD-2026-79733

Vulnerability in the Oracle Bills of Material product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.13-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Bills of...

CVE-2026-83431

Oracle Product Workbench (component: WebUI ) in Oracle E-Business Suite versions 12.2.3 through 12.2.15 is affected by a medium-severity vulnerability (CVSS 3.1: 5.4 ). A low-privileged attacker with network access via HTTP can exploit the flaw, but user interaction from a third party is required...

CVE-2026-83425

Oracle Complex Maintenance, Repair and Overhaul (component: Internal Operations) within Oracle E-Business Suite versions 12.2.12–12.2.15 is affected by a network-accessible vulnerability exploitable over HTTP by a low-privileged attacker with no user interaction. Successful exploitation grants co...

EUVD-2026-79725

Vulnerability in the Oracle Complex Maintenance, Repair and Overhaul product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.12-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...

EUVD-2026-79719

Vulnerability in the Oracle Communications Cloud Native Core Security Edge Protection Proxy product of Oracle Communications component: SEPP. Supported versions that are affected are 26.1.200 and 25.2.201. Difficult to exploit vulnerability allows low privileged attacker with network access via...

CVE-2026-83418

Oracle Communications Cloud Native Core Security Edge Protection Proxy (SEPP) in versions 26.1.200 and 25.2.201 is affected by a vulnerability allowing a low-privileged attacker with network access via HTTP to compromise the product. The attack is rated as difficult to exploit (high complexity, n...

CVE-2026-83356

Oracle E-Business Suite (version V16 ) is affected through its Enterprise Command Center Framework component (Security). The flaw allows a low-privileged attacker with network access via HTTP to compromise the framework, resulting in unauthorized access to critical data or complete access to all ...