CVE-2026-83204

Oracle Sourcing (component: Internal Operations ) of Oracle E-Business Suite , versions 12.2.3 through 12.2.15 , is affected by a vulnerability exploitable by a low-privileged attacker with network access via HTTP . The exploit is rated difficult to exploit (high attack complexity), but successfu...

CVE-2026-83205

Oracle Applications Framework within Oracle E-Business Suite is affected via the Personalization component, impacting supported versions 12.2.3 through 12.2.15 . A low-privileged attacker with network access via HTTP can exploit this vulnerability with low complexity and no user interaction, resu...

EUVD-2026-79557

Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite component: Personalization. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Applications...

EUVD-2026-79556

Vulnerability in the Oracle Sourcing product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Sourcing. Successful...

CVE-2026-83200

CVE-2026-83200 affects the Oracle Process Manufacturing Intelligence product within Oracle E-Business Suite, specifically the Internal Operations component, in supported versions 12.2.3 through 12.2.15 . A low-privileged attacker with network access via Oracle Net can exploit this vulnerability w...

CVE-2026-83198

Oracle Field Service (component: Internal Operations ) in Oracle E-Business Suite versions 12.2.3–12.2.15 contains an easily exploitable vulnerability that allows a low-privileged attacker with network access via HTTP to compromise the product. Successful exploitation requires human interaction f...

CVE-2026-83194

This vulnerability affects Oracle Depot Repair (component: Internal Operations ) within Oracle E-Business Suite , versions 12.2.10 through 12.2.15 . An easily exploitable flaw allows a low-privileged attacker with network access via HTTP to achieve full takeover of Oracle Depot Repair, resulting ...

EUVD-2026-79546

Vulnerability in the Oracle Depot Repair product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.10-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Depot Repair...

CVE-2026-83189

Oracle User Management (component: Proxy User Delegation ) in Oracle E-Business Suite versions 12.2.3–12.2.15 is vulnerable to a high-severity flaw (CVSS 3.1: 8.8 ) that allows a low-privileged attacker with network access via HTTP to take over the Oracle User Management component. The attack req...

CVE-2026-83188

CVE-2026-83188 affects the Oracle Depot Repair product of Oracle E-Business Suite (component: Internal Operations ), versions 12.2.3 through 12.2.15 . The vulnerability allows a high-privileged attacker with network access via HTTP to compromise the product, resulting in a takeover with full impa...

EUVD-2026-79540

Vulnerability in the Oracle Depot Repair product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Depot Repair...

CVE-2026-83187

Oracle E-Business Suite 's Applications Calendar component (Common Applications Calendar) is affected in supported versions 12.2.3 through 12.2.15 . A low-privileged attacker with network access via HTTP can exploit this vulnerability to perform unauthorized creation, deletion, or modification of...

CVE-2026-83186

This vulnerability affects the Oracle Common Applications Calendar component (Applications Calendar) within Oracle E-Business Suite , versions 12.2.3 through 12.2.15 . A low-privileged attacker with network access via HTTP can exploit it with low complexity and no user interaction to perform unau...

CVE-2026-83185

CVE-2026-83185 affects the CRM User Management Framework component of Oracle E-Business Suite , specifically supported versions 12.2.3 through 12.2.15 . A low-privileged attacker with network access via HTTP can exploit this vulnerability, though user interaction is required. Successful exploitat...

CVE-2026-83184

Oracle Application Object Library (component: Core) in Oracle E-Business Suite versions 12.2.3 through 12.2.15 contains a vulnerability that allows an unauthenticated attacker with network access via HTTP to compromise the component. The vulnerability is rated difficult to exploit (high attack co...

EUVD-2026-79538

Vulnerability in the Oracle Common Applications Calendar product of Oracle E-Business Suite component: Applications Calendar. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

EUVD-2026-79539

Vulnerability in the Oracle Common Applications Calendar product of Oracle E-Business Suite component: Applications Calendar. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

EUVD-2026-79537

Vulnerability in the Oracle Common Applications product of Oracle E-Business Suite component: CRM User Management Framework. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

EUVD-2026-79536

Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite component: Core. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Application Obje...

CVE-2026-83178

CVE-2026-83178 affects the Oracle Application Object Library (component: Core ) in Oracle E-Business Suite , versions 12.2.3 through 12.2.15 . The vulnerability allows a high-privileged attacker with network access via HTTP to compromise the product, resulting in takeover of the Oracle Applicatio...