12949 matches found
EUVD-2026-79744
Vulnerability in the Oracle Financials Common Modules product of Oracle E-Business Suite component: Common Components. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...
CVE-2026-83441
Oracle E-Business Suite – Product Hub (component: Internal Operations) in supported versions 12.2.3 through 12.2.15 contains a vulnerability allowing a low-privileged attacker with network access via HTTP to compromise the component. The vulnerability is rated difficult to exploit (high attack co...
CVE-2026-83439
CVE-2026-83439 affects the helidon-security-providers-idcs-mapper component of Oracle Helidon (Fusion Middleware), versions 3.0.0–3.2.20 and 4.0.0–4.5.4 . A low-privileged attacker with network access via HTTP can exploit this vulnerability to achieve unauthorized creation, deletion, or modificat...
CVE-2026-83435
Oracle E-Business Suite – Bills of Material (Internal Operations) is vulnerable in supported versions 12.2.13–12.2.15 . A low-privileged attacker with network access via HTTP can exploit this difficulty-rated vulnerability to achieve unauthorized creation, deletion, modification, or access to cri...
EUVD-2026-79732
Vulnerability in the Oracle Product Workbench product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Product...
EUVD-2026-79730
Vulnerability in the Oracle Depot Repair product of Oracle E-Business Suite component: Estimate and Actual Charges. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Depot...
CVE-2026-83433
Oracle Depot Repair (component: Depot Repair Diagnostics ) within Oracle E-Business Suite is affected by an easily exploitable vulnerability in supported versions 12.2.3 through 12.2.15 . A high-privileged attacker with network access via HTTP can exploit this with low complexity and no user inte...
CVE-2026-83432
Oracle Depot Repair (component: Estimate and Actual Charges ) in Oracle E-Business Suite versions 12.2.3 through 12.2.15 is vulnerable to an easily exploitable, network-based attack via HTTP. A low-privileged attacker requiring no user interaction can achieve unauthorized creation, deletion, or m...
EUVD-2026-79728
Vulnerability in the Oracle Product Workbench product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Product...
CVE-2026-83429
This vulnerability affects the Oracle Demand Signal Repository component (Internal Operations ) of Oracle E-Business Suite , versions 12.2.3 through 12.2.15 . A low-privileged attacker with network access via HTTP can exploit it to achieve unauthorized creation, deletion, modification, or read ac...
CVE-2026-83430
Oracle Product Workbench (component: Internal Operations) in Oracle E-Business Suite versions 12.2.3 through 12.2.15 is affected by an easily exploitable vulnerability. A low-privileged attacker with network access via HTTP can achieve unauthorized creation, deletion, or modification of critical ...
CVE-2026-83419
Oracle Communications Cloud Native Core Security Edge Protection Proxy (SEPP) in versions 26.1.200 and 25.2.201 contains a vulnerability that allows a low-privileged attacker with network access via HTTP to compromise the product. Successful exploitation results in unauthorized read access to a s...
EUVD-2026-79719
Vulnerability in the Oracle Communications Cloud Native Core Security Edge Protection Proxy product of Oracle Communications component: SEPP. Supported versions that are affected are 26.1.200 and 25.2.201. Difficult to exploit vulnerability allows low privileged attacker with network access via...
EUVD-2026-79713
Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via TCP to compromise Oracle...
EUVD-2026-79714
Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle...
CVE-2026-83413
CVE-2026-83413 is a low-severity vulnerability in Oracle Coherence (Oracle Fusion Middleware, component: Core), affecting versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. The flaw allows a high-privileged, local attacker with high complexity to perform unauthorized update, insert, or ...
CVE-2026-83412
Oracle Coherence (Oracle Fusion Middleware, Core component) is affected by a vulnerability exploitable by a low-privileged attacker over TCP with low complexity and no user interaction. Affected versions are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0 . Successful exploitation can lead to ...
EUVD-2026-79696
Vulnerability in the Oracle Utilities Network Management System product of Oracle Utilities Applications component: System Wide. Supported versions that are affected are 2.5.0.2.0-2.5.0.2.13, 2.6.0.1.0-2.6.0.12B, 2.6.0.2.0-2.6.0.2.10A and 25.12.0.0.0-25.12.0.0.3. Easily exploitable vulnerability...
EUVD-2026-79685
Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite component: Personalization. Supported versions that are affected are 12.2.9-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Applications...
CVE-2026-83332
CVE-2026-83332 affects the Personalization component of Oracle Applications Framework within Oracle E-Business Suite , versions 12.2.9 through 12.2.15 . The vulnerability is easily exploitable by a low-privileged attacker over HTTP (network vector, no user interaction required). Successful exploi...