EUVD-2026-79618

Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware component: Resource Catalog Services. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

CVE-2026-83265

CVE-2026-83265 affects the Web Services Agent component of Oracle Web Services Manager (Oracle Fusion Middleware), versions 12.2.1.4.0 and 14.1.2.0.0 . The vulnerability is exploitable by an unauthenticated attacker with network access via HTTP , making it easily reachable without prior authentic...

EUVD-2026-79616

Vulnerability in the Oracle Product Lifecycle Analytics product of Oracle Supply Chain component: Installation Issues. The supported version that is affected is 3.6.1. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Product Lifecycle...

CVE-2026-83244

Oracle Commerce Guided Search / Oracle Commerce Experience Manager (component: Forge ), version 11.4.0 , is affected by a difficult-to-exploit vulnerability exploitable by an unauthenticated attacker with access to the physical communication segment attached to the hardware where the product exec...

CVE-2026-83242

Oracle Commerce Guided Search / Oracle Commerce Experience Manager (component: Experience Manager ), version 11.4.0 , is affected by an easily exploitable vulnerability that allows an unauthenticated attacker with network access via HTTP to compromise the product. Successful exploitation can resu...

CVE-2026-83237

Oracle Commerce Guided Search / Oracle Commerce Experience Manager (component: Forge ), version 11.4.0 , is affected by a network-based vulnerability reachable via HTTP. A low-privileged attacker with low complexity and no user interaction can achieve unauthorized access to all accessible data (h...

CVE-2026-83238

CVE-2026-83238 affects Oracle Commerce Guided Search / Oracle Commerce Experience Manager (component: Forge ), version 11.4.0 . The vulnerability is easily exploitable by a low-privileged attacker with network access via HTTP , requiring no user interaction. Successful exploitation can lead to un...

EUVD-2026-79589

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce component: Forge. The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

EUVD-2026-79588

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce component: Experience Manager. The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...

EUVD-2026-79586

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce component: Experience Manager. The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...

CVE-2026-83236

A high-severity (CVSS 3.1 score 8.2 ) vulnerability exists in Oracle Commerce Guided Search / Experience Manager version 11.4.0 (component: Experience Manager). An unauthenticated attacker with network access via HTTP can exploit this with low complexity, though human interaction from a non-attac...

EUVD-2026-79585

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce component: Experience Manager. The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...

CVE-2026-83231

Oracle Helidon (Fusion Middleware), specifically the helidon-dbclient-mongodb component, is affected in versions 3.0.0–3.2.20 and 4.0.0–4.5.4 . A difficult-to-exploit vulnerability allows an unauthenticated attacker with network access via HTTP to compromise the component. Successful exploitation...

EUVD-2026-79582

Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM component: Siebel Management Console. Supported versions that are affected are 17.0-26.7. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Siebel CRM Deployment...

CVE-2026-83224

CVE-2026-83224 affects the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure ), versions 17.0 through 26.7 . The vulnerability allows a low-privileged attacker with network access via HTTP to achieve unauthorized access to all accessible data (high confidentiali...

CVE-2026-83219

This HIGH -severity (CVSS 3.1: 7.1 ) vulnerability affects Siebel CRM Deployment (component: Server Infrastructure ) in Oracle Siebel CRM , versions 17.0–26.7 . A low-privileged attacker with local logon access can exploit it with low complexity and no user interaction to achieve unauthorized cre...

CVE-2026-83221

Oracle Siebel CRM Integration (component: EAI ) is vulnerable to an easily exploitable attack via network access using SOAP by a low-privileged attacker. Affected supported versions span 17.0 through 26.7 . Successful exploitation allows unauthorized access to all accessible data (High confidenti...

CVE-2026-83220

Oracle Siebel CRM contains a vulnerability in the Siebel CRM Integration product, specifically in the Event Publish and Subscribe component, affecting supported versions 23.6 through 26.7 . The flaw allows an unauthenticated attacker with access to the physical communication segment attached to t...

EUVD-2026-79567

Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM component: Server Infrastructure. Supported versions that are affected are 17.0-26.7. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel CRM Deployment. Successf...

CVE-2026-83207

Oracle Siebel CRM Development (component: Integration – Scripting ) versions 17.0–26.7 are affected by a vulnerability that allows a low-privileged attacker with network access via HTTP to cause a complete denial of service (hang or repeatable crash), as well as unauthorized read, update, insert,...