EUVD-2026-79341

Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware component: Client Bundle. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise...

EUVD-2026-79325

Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware component: Messaging Enabler. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via T3, IIOP to compromise Servi...

EUVD-2026-79324

Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware component: Centralized Thirdparty Jars. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure...

CVE-2026-73966

This vulnerability affects the Siebel Apps - Marketing component of Oracle Siebel CRM , versions 17.0 through 26.7 . A high-privileged attacker with network access via HTTP can exploit it with low complexity and no user interaction, leading to full takeover of the affected component (high impact ...

EUVD-2026-79315

Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware component: ADF Faces. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle JDeveloper...

CVE-2026-73956

CVE-2026-73956 affects the Composer component of Oracle WebCenter Portal (Oracle Fusion Middleware), impacting versions 12.2.1.4.0 and 14.1.2.0.0 . An unauthenticated attacker with network access via HTTP can exploit this vulnerability with low complexity to achieve full takeover of Oracle WebCen...

CVE-2026-73954

CVE-2026-73954 is a vulnerability in the Business Interlink component of Oracle PeopleSoft Enterprise PeopleTools , affecting supported versions 8.61–8.63 . An unauthenticated attacker with network access via HTTP can exploit this flaw, though the attack complexity is rated high (difficult to exp...

CVE-2026-73953

Oracle WebCenter Portal (a component of Oracle Fusion Middleware) is affected via its Portlet Services component. An unauthenticated attacker with network access via HTTP can exploit this vulnerability to achieve takeover of the portal. Supported affected versions are 12.2.1.4.0 and 14.1.2.0.0 . ...

EUVD-2026-79306

Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware component: Portlet Services. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

CVE-2026-73952

CVE-2026-73952 affects the Portlet Services component of Oracle WebCenter Portal (Oracle Fusion Middleware), versions 12.2.1.4.0 and 14.1.2.0.0 . An unauthenticated attacker with network access via HTTP can exploit this with low complexity to achieve unauthorized creation, deletion, modification,...

EUVD-2026-79302

Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware component: Composer. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle WebCenter...

CVE-2026-73944

Oracle Access Manager (Oracle Fusion Middleware, component: Authentication Engine ) versions 12.2.1.4.0 and 14.1.2.1.0 are affected by a critical vulnerability (CVSS 3.1 base score 9.1 ). An unauthenticated attacker with network access via HTTP can create, delete, or modify data and gain complete...

EUVD-2026-79519

Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware component: Authentication Engine. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3, IIOP to compromise Orac...

EUVD-2026-79518

Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware component: Authentication Engine. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle...

CVE-2026-73940

Oracle Access Manager (Oracle Fusion Middleware) is vulnerable in its Authentication Engine component, affecting versions 12.2.1.4.0 and 14.1.2.1.0 . An unauthenticated attacker with network access via T3 or IIOP can exploit this easily exploitable vulnerability to achieve full takeover of the pr...

EUVD-2026-79517

Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware component: Authentication Engine. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

CVE-2026-71133

Oracle Access Manager (Oracle Fusion Middleware), specifically the Authentication Engine component, is affected by a critical vulnerability (CVSS 3.1: 10.0 ) in versions 12.2.1.4.0 and 14.1.2.1.0 . An unauthenticated attacker with network access via HTTP can compromise the product with low comple...

EUVD-2026-79515

Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Identity Manager...

CVE-2026-70913

CVE-2026-70913 is a critical vulnerability (CVSS 3.1: 9.8) in the Core component of Oracle Identity Manager (Oracle Fusion Middleware), affecting supported versions 12.2.1.4.0 and 14.1.2.1.0 . An unauthenticated attacker with network access via HTTP can exploit this vulnerability to achieve full ...

EUVD-2026-79513

Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Identity Manager...