CVE-2026-83012

Oracle WebCenter Enterprise Capture (component: Client Bundle ) in versions 12.2.1.4.0 and 14.1.2.0.0 contains an easily exploitable vulnerability that allows a low-privileged attacker with network access via HTTP to compromise the product. Due to a scope change , attacks may significantly impact...

EUVD-2026-79340

Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware component: Client Bundle. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise...

CVE-2026-83009

Oracle WebCenter Enterprise Capture (part of Oracle Fusion Middleware) contains a vulnerability in the Client Bundle component affecting versions 12.2.1.4.0 and 14.1.2.0.0 . A low-privileged attacker with network access via HTTP can exploit this vulnerability without user interaction to achieve a...

EUVD-2026-79338

Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware component: Client Bundle. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise...

CVE-2026-83010

This vulnerability affects the Client Bundle component of Oracle WebCenter Enterprise Capture (part of Oracle Fusion Middleware), specifically versions 12.2.1.4.0 and 14.1.2.0.0 . An attacker with high privileges and network access via HTTP can exploit it, though user interaction from a separate ...

EUVD-2026-79337

Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware component: Client Bundle. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise...

CVE-2026-83007

CVE-2026-83007 affects the Client Bundle component of Oracle WebCenter Enterprise Capture (Oracle Fusion Middleware), versions 12.2.1.4.0 and 14.1.2.0.0 . An easily exploitable vulnerability allows a low-privileged attacker with network access via HTTP to compromise the product. Due to a scope ch...

EUVD-2026-79335

Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware component: Client Bundle. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise...

CVE-2026-83008

Oracle WebCenter Enterprise Capture (part of Oracle Fusion Middleware) contains a vulnerability in the Client Bundle component, affecting versions 12.2.1.4.0 and 14.1.2.0.0 . A low-privileged attacker with network access via T3 or IIOP can exploit this to achieve full takeover of the product, imp...

CVE-2026-83006

Oracle WebCenter Enterprise Capture (component: Client Bundle ), part of Oracle Fusion Middleware, is affected in versions 12.2.1.4.0 and 14.1.2.0.0 . A high-privileged attacker with network access via HTTP can exploit this vulnerability with low complexity and no user interaction. The scope chan...

EUVD-2026-79334

Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware component: Client Bundle. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise...

EUVD-2026-79336

Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware component: Client Bundle. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via T3, IIOP to compromise...

EUVD-2026-79331

Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware component: Client Bundle. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via SOAP to compromise...

CVE-2026-83004

Oracle WebCenter Enterprise Capture (Oracle Fusion Middleware), component Client Bundle , is affected in versions 12.2.1.4.0 and 14.1.2.0.0 . This difficult-to-exploit vulnerability allows a low-privileged attacker with local logon to compromise the product, with high complexity and required user...

CVE-2026-83003

Oracle WebCenter Enterprise Capture (Oracle Fusion Middleware, component: Client Bundle) versions 12.2.1.4.0 and 14.1.2.0.0 contain a vulnerability exploitable over SOAP by a low-privileged network attacker with no user interaction. The scope change means that while the flaw resides in WebCenter ...

EUVD-2026-79333

Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware component: Client Bundle. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise...

EUVD-2026-79332

Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware component: Client Bundle. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracl...

CVE-2026-83005

Oracle WebCenter Enterprise Capture (component: Client Bundle ), part of Oracle Fusion Middleware, is vulnerable in supported versions 12.2.1.4.0 and 14.1.2.0.0 . The flaw allows a low-privileged attacker with network access via HTTP to compromise the product and achieve takeover , with high impa...

com.alejandrohdezma:scala-steward-core_2.13 (>=0.11.0, <=0.11.1), com.codacy:kamon-http4s-1.0_2.13 (>=0.0.1, <=0.1.2) +65 more potentially affected by CVE-2026-69215 via org.http4s:http4s-client_2.13 (>=1.0.0-m2, <=1.0.0-m46)

org.http4s:http4s-client2.13 MAVEN version =1.0.0-m2, =0.11.0, =0.0.1, =0.5.0, =1.3.0, =0.9.0-m2, =5.0.0-rc1, =5.0.0-rc1, =3.3.0-rc1, =0.0.1, =0.16.0, =0.0.73, =0.1.90, =0.1.90, =0.1.90, =0.2.4 and more Source cves: CVE-2026-69215 Source advisory: GHSA-GRH8-3P95-F9RR...

Http4s: CookieJar middleware matches by substring, leaking cookies cross-origin

The CookieJar client middleware decides whether to attach a cookie to an outgoing request using an unanchored substring test on the host and path, instead of the domain match specified by RFC6265 5.1.3. A cookie stored for example.com is therefore sent to any host whose name merely contains...