CVE-2026-83149

Oracle Application Testing Suite version 13.3.0.1 is affected by a network-reachable vulnerability that allows a low-privileged attacker with Test Manager for Web Apps privilege to compromise the product via HTTP. Due to a scope change , attacks may significantly impact additional products beyond...

EUVD-2026-79476

Vulnerability in Oracle Application Testing Suite. The supported version that is affected is 13.3.0.1. Easily exploitable vulnerability allows low privileged attacker having Test Manager for Web Apps privilege with network access via HTTP to compromise Oracle Application Testing Suite. While the...

EUVD-2026-79471

Vulnerability in the Siebel Apps - Customer Order Management product of Oracle Siebel CRM component: Order Management. Supported versions that are affected are 17.0-26.7. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Siebel Apps -...

CVE-2026-83145

Oracle Siebel CRM — Siebel Apps – Customer Order Management (Order Management component) in supported versions 17.0 through 26.7 is affected by a vulnerability that a low-privileged attacker with network access via HTTP can exploit with low complexity , though successful exploitation requires hum...

CVE-2026-83144

CVE-2026-83144 affects the Order Management component of Oracle Siebel CRM – Siebel Apps Customer Order Management , versions 17.0 through 26.7 . A low-privileged attacker with network access via HTTP can exploit this vulnerability, though successful exploitation requires user interaction from a ...

EUVD-2026-79473

Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM component: Open UI. Supported versions that are affected are 17.0-26.7. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Siebel CRM End User. Successful attacks requir...

EUVD-2026-79469

Vulnerability in the Oracle Proposals product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Proposals. While the...

CVE-2026-83135

A vulnerability in the Shopping Cart component of Oracle iStore (part of Oracle E-Business Suite) affects supported versions 12.2.3 through 12.2.15 . A low-privileged attacker with network access via HTTP can exploit this with required user interaction, resulting in high impact to confidentiality...

EUVD-2026-79457

Vulnerability in the Oracle Sales product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Sales. While the...

CVE-2026-83126

This vulnerability affects Oracle Sales Online , a component of Oracle E-Business Suite (sub-component: Internal Operations ), in supported versions 12.2.3 through 12.2.15 . A low-privileged attacker with network access via HTTP can exploit this vulnerability, though successful attacks require hu...

EUVD-2026-79451

Vulnerability in the Oracle Report Manager product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTPS to compromise Oracle Report Manager...

CVE-2026-83116

A vulnerability in Oracle Order Management (component: Product Diagnostic Tools ) within Oracle E-Business Suite , affecting supported versions 12.2.5 through 12.2.15 , allows a low-privileged attacker with network access via HTTP to compromise the product. The attack has a scope change , meaning...

EUVD-2026-79441

Vulnerability in the Oracle Quality product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Quality. Successful...

CVE-2026-83113

A vulnerability in Oracle Quality (component: Internal Operations ) within Oracle E-Business Suite , affecting supported versions 12.2.3 through 12.2.15 , allows a low-privileged attacker with network access via HTTP to compromise the product. Successful exploitation can result in unauthorized ac...

EUVD-2026-79439

Vulnerability in the Oracle Partner Management product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Partner...

CVE-2026-83110

Oracle Marketing (component: Audience ) within Oracle E-Business Suite versions 12.2.3 through 12.2.15 is affected by an unauthenticated vulnerability exploitable over HTTP . An attacker with network access can gain unauthorized access to critical data or complete access to all Oracle Marketing a...

CVE-2026-83104

CVE-2026-83104 affects the Oracle Forms product of Oracle Fusion Middleware, specifically the Forms Services, C/S, Charmode component, in supported versions 12.2.1.19.0 and 14.1.2.0.0 . The vulnerability is easily exploitable by an unauthenticated attacker with network access via TCP , with no us...

CVE-2026-83093

Oracle Forms (Oracle Fusion Middleware, component: Forms Services, C/S, Charmode) has an unauthenticated network vulnerability exploitable via HTTP with low complexity. Affected supported versions are 12.2.1.19.0 and 14.1.2.0.0 . Successful exploitation grants unauthorized access to critical data...

EUVD-2026-79419

Vulnerability in the Oracle Field Service product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Field Service...

CVE-2026-83092

This vulnerability affects Oracle Field Service (component: Internal Operations ) within Oracle E-Business Suite , versions 12.2.3 through 12.2.15 . A low-privileged attacker with network access via HTTP can exploit it, though exploitation is rated as difficult (high attack complexity, no user in...