EUVD-2026-79494

Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite component: Core. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Application Object...

CVE-2026-83162

Oracle Application Object Library (component: Core) in Oracle E-Business Suite versions 12.2.3–12.2.15 is affected by a vulnerability allowing an unauthenticated attacker with network access via HTTPS to achieve unauthorized creation, deletion, modification, and access to critical data. The attac...

CVE-2026-83163

CVE-2026-83163 affects the Oracle Application Object Library component of Oracle E-Business Suite , specifically the Attachments / File Upload module, in supported versions 12.2.3 through 12.2.15 . The vulnerability is described as easily exploitable by a low-privileged attacker with network acce...

CVE-2026-83164

Oracle E-Business Suite 's Customer Interaction History product (component: Outcome-Result ) is affected in supported versions 12.2.3 through 12.2.15 . A low-privileged attacker with network access via HTTP can exploit this vulnerability with low complexity and no user interaction to achieve take...

EUVD-2026-79491

Vulnerability in the Oracle Customer Interaction History product of Oracle E-Business Suite component: Outcome-Result. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Custome...

EUVD-2026-79490

Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite component: Attachments / File Upload. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracl...

EUVD-2026-79489

Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite component: Core. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle Application...

CVE-2026-83158

CVE-2026-83158 affects Oracle Applications Manager (component: Command Line – RapidClone ) within Oracle E-Business Suite , versions 12.2.3 through 12.2.15 . A low-privileged attacker with local logon to the infrastructure where Oracle Applications Manager executes can exploit this vulnerability ...

CVE-2026-83159

CVE-2026-83159 affects the ADPatch component of Oracle E-Business Suite Applications DBA in supported versions 12.2.3 through 12.2.15 . An unauthenticated attacker with local logon to the infrastructure where Applications DBA executes can compromise it, requiring user interaction from a person ot...

CVE-2026-83157

CVE-2026-83157 affects the Command Line – RapidClone component of Oracle Applications Manager within Oracle E-Business Suite , versions 12.2.3 through 12.2.15 . A high-privileged attacker with network access via HTTP can exploit this difficult-to-exploit vulnerability to achieve takeover of Oracl...

EUVD-2026-79486

Vulnerability in the Applications DBA product of Oracle E-Business Suite component: ADPatch. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Applications DBA executes to compromise...

EUVD-2026-79485

Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite component: Command Line - RapidClone. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle...

EUVD-2026-79484

Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite component: Command Line - RapidClone. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle...

CVE-2026-83152

CVE-2026-83152 affects the Internal Operations component of Oracle Project Intelligence (part of Oracle E-Business Suite), versions 12.2.3 through 12.2.15 . A low-privileged attacker with network access via HTTP can exploit this vulnerability to achieve unauthorized creation, deletion, modificati...

EUVD-2026-79479

Vulnerability in the Oracle Project Intelligence product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Project...

CVE-2026-83142

Oracle Proposals (component: Internal Operations ) in Oracle E-Business Suite versions 12.2.3 through 12.2.15 is vulnerable to unauthorized data access. A low-privileged attacker with network access via HTTP can exploit this to gain complete access to all Oracle Proposals accessible data , with p...

EUVD-2026-79469

Vulnerability in the Oracle Proposals product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Proposals. While the...

CVE-2026-83138

A vulnerability in the Oracle Spares Management product (component: Internal Operations ) of Oracle E-Business Suite , affecting supported versions 12.2.3 through 12.2.15 , allows a high-privileged attacker with network access via HTTP to achieve full takeover. The vulnerability is rated CVSS 3.1...

EUVD-2026-79466

Vulnerability in the Oracle Spares Management product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Spares...

CVE-2026-83136

Oracle Spares Management (component: Internal Operations) within Oracle E-Business Suite is affected by an easily exploitable vulnerability in supported versions 12.2.3 through 12.2.15 . A low-privileged attacker with network access via HTTP can exploit this flaw to achieve full takeover of the p...