CVE-2026-87285

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is 7.2.16. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle ...

CVE-2026-83225

Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM component: Server Infrastructure. Supported versions that are affected are 17.0-26.7. Easily exploitable vulnerability allows unauthenticated attacker with network access via TCP to compromise Siebel CRM Deployment. Successfu...

CVE-2026-73960

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft component: Ren Server. Supported versions that are affected are 8.61-8.63. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise...

EUVD-2026-79937

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is 7.2.16. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle ...

CVE-2026-87280

Oracle VM VirtualBox (Oracle Virtualization), Core component, version 7.2.16 , contains an easily exploitable vulnerability that allows a high-privileged local attacker to cause a complete denial of service (hang or frequently repeatable crash). The attack requires user interaction from someone o...

EUVD-2026-79926

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is 7.2.16. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle...

EUVD-2026-79803

Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion component: Access and security. The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

CVE-2026-83350

CVE-2026-83350 affects the Oracle Net Services component of Oracle Database Server , specifically versions 21.3–21.23 and 23.4.0–23.26.3 . An unauthenticated attacker with network access via Oracle Net can trigger a hang or frequently repeatable crash , resulting in a complete denial of service o...

CVE-2026-83349

CVE-2026-83349 affects the Oracle Net Services component of Oracle Database Server in supported versions 19.3–19.32 , 21.3–21.23 , and 23.4.0–23.26.3 . An unauthenticated attacker with network access via Oracle Net can trigger a hang or frequently repeatable crash , resulting in a complete denial...

EUVD-2026-79633

Vulnerability in the Helidon product of Oracle Fusion Middleware component: helidon-webserver. Supported versions that are affected are 4.0.0-4.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via TCP to compromise Helidon. Successful attacks of this...

CVE-2026-83228

Oracle Siebel CRM (component: Server Infrastructure ) is affected by a denial-of-service vulnerability in supported versions 17.0 through 26.7 . An unauthenticated attacker with network access via TCP can trigger a hang or frequently repeatable crash , resulting in a complete availability loss of...

CVE-2026-83225

Oracle Siebel CRM (component: Server Infrastructure , product: Siebel CRM Deployment) is affected by a Denial of Service vulnerability in supported versions 17.0 through 26.7 . An unauthenticated attacker with network access via TCP can trigger a hang or frequently repeatable crash, resulting in ...

CVE-2026-83222

This vulnerability affects Oracle Siebel CRM Deployment (component: Server Infrastructure ), versions 17.0 through 26.7 . An unauthenticated attacker with network access via multiple protocols can trigger a hang or frequently repeatable crash, resulting in a complete denial of service . The CVSS ...

PT-2026-93038

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion component: Security. The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via TCP to compromise Oracle Hyperion Financial...

CVE-2026-83334: Missing Authentication for Critical Function

Vulnerability in the Oracle Web Services Manager product of Oracle Fusion Middleware component: Web Services Security. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via SOAP to compromise...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: mysql (UTSA-2026-106205)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-106205 advisory. Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL component: Server: Group Replication Plugin. Supported versions that are affected are MySQL...

CVE-2026-60860: Improper Access Control

Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware component: Messaging Enabler. Supported versions that are affected are 14.1.2.0.0 and 12.2.1.4.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via TCP to compromise Service...

CVE-2026-47018: Uncontrolled Resource Consumption

Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM component: Siebel Cloud Manager. Supported versions that are affected are 22.3-26.5. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Siebel CRM Cloud...

CVE-2026-60168: Improper Access Control

Vulnerability in the Oracle Hospitality Simphony product of Oracle Food and Beverage Applications component: POS. Supported versions that are affected are 19.8-19.8.5, 19.9-19.9.3 and 19.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromis...

CVE-2026-46910: Undefined Security Weakness

Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards component: Enterprise Infrastructure Security. Supported versions that are affected are 9.2.0.0-9.2.26.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise JD...