EUVD-2026-79499

Vulnerability in the Oracle Sales Online product of Oracle E-Business Suite component: OSO Other. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Sales Online. While the...

CVE-2026-83172

CVE-2026-83172 affects the Oracle Sales Online component (OSO Other ) of Oracle E-Business Suite , versions 12.2.3 through 12.2.15 . An easily exploitable vulnerability allows a low-privileged attacker with network access via HTTP to compromise the product. The vulnerability exhibits a scope chan...

CVE-2026-83171

A vulnerability in the Documents component of Oracle One-to-One Fulfillment (Oracle E-Business Suite) affects supported versions 12.2.3 through 12.2.15 . A low-privileged attacker with network access via HTTP can exploit this flaw, though it is rated as difficult to exploit (high complexity). Due...

EUVD-2026-79493

Vulnerability in the Oracle Customer Interaction History product of Oracle E-Business Suite component: Outcome-Result. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Custome...

CVE-2026-83166

Oracle Customer Interaction History (component Outcome-Result ) in Oracle E-Business Suite versions 12.2.3 through 12.2.15 is vulnerable to an easily exploitable network-based attack via HTTP. A low-privileged attacker can exploit this vulnerability to gain unauthorized access to critical data , ...

EUVD-2026-79484

Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite component: Command Line - RapidClone. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle...

CVE-2026-83157

CVE-2026-83157 affects the Command Line – RapidClone component of Oracle Applications Manager within Oracle E-Business Suite , versions 12.2.3 through 12.2.15 . A high-privileged attacker with network access via HTTP can exploit this difficult-to-exploit vulnerability to achieve takeover of Oracl...

CVE-2026-83149

Oracle Application Testing Suite version 13.3.0.1 is affected by a network-reachable vulnerability that allows a low-privileged attacker with Test Manager for Web Apps privilege to compromise the product via HTTP. Due to a scope change , attacks may significantly impact additional products beyond...

EUVD-2026-79476

Vulnerability in Oracle Application Testing Suite. The supported version that is affected is 13.3.0.1. Easily exploitable vulnerability allows low privileged attacker having Test Manager for Web Apps privilege with network access via HTTP to compromise Oracle Application Testing Suite. While the...

CVE-2026-83144

CVE-2026-83144 affects the Order Management component of Oracle Siebel CRM – Siebel Apps Customer Order Management , versions 17.0 through 26.7 . A low-privileged attacker with network access via HTTP can exploit this vulnerability, though successful exploitation requires user interaction from a ...

EUVD-2026-79471

Vulnerability in the Siebel Apps - Customer Order Management product of Oracle Siebel CRM component: Order Management. Supported versions that are affected are 17.0-26.7. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Siebel Apps -...

CVE-2026-83145

Oracle Siebel CRM — Siebel Apps – Customer Order Management (Order Management component) in supported versions 17.0 through 26.7 is affected by a vulnerability that a low-privileged attacker with network access via HTTP can exploit with low complexity , though successful exploitation requires hum...

EUVD-2026-79472

Vulnerability in the Siebel Apps - Customer Order Management product of Oracle Siebel CRM component: Order Management. Supported versions that are affected are 17.0-26.7. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Siebel Apps -...

CVE-2026-83146

Oracle Siebel CRM End User (component: Open UI ) is affected by a difficult-to-exploit vulnerability across supported versions 17.0–26.7 . A low-privileged attacker with network access via HTTP can compromise the product, though successful exploitation requires human interaction from another user...

EUVD-2026-79473

Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM component: Open UI. Supported versions that are affected are 17.0-26.7. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Siebel CRM End User. Successful attacks requir...

CVE-2026-83142

Oracle Proposals (component: Internal Operations ) in Oracle E-Business Suite versions 12.2.3 through 12.2.15 is vulnerable to unauthorized data access. A low-privileged attacker with network access via HTTP can exploit this to gain complete access to all Oracle Proposals accessible data , with p...

EUVD-2026-79469

Vulnerability in the Oracle Proposals product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Proposals. While the...

EUVD-2026-79468

Vulnerability in the Oracle Field Service product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Field Service...

CVE-2026-83141

CVE-2026-83141 affects Oracle Field Service (component: Internal Operations) within Oracle E-Business Suite , versions 12.2.3 through 12.2.15 . A low-privileged attacker with network access via HTTP can exploit this vulnerability to gain unauthorized access to critical data , potentially compromi...

CVE-2026-83138

A vulnerability in the Oracle Spares Management product (component: Internal Operations ) of Oracle E-Business Suite , affecting supported versions 12.2.3 through 12.2.15 , allows a high-privileged attacker with network access via HTTP to achieve full takeover. The vulnerability is rated CVSS 3.1...