CVE-2026-83449

A vulnerability in the Oracle Bills of Material component (Internal Operations) of Oracle E-Business Suite affects supported versions 12.2.3 through 12.2.15 . An attacker with low-level network access via HTTP can exploit this with low complexity and no user interaction, leading to high confident...

EUVD-2026-79724

Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware component: Oracle JDeveloper. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle JDevelope...

EUVD-2026-79725

Vulnerability in the Oracle Complex Maintenance, Repair and Overhaul product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.12-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...

EUVD-2026-79705

Vulnerability in the Oracle XML Gateway product of Oracle E-Business Suite component: Install. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle XML Gateway. Successful attacks...

CVE-2026-83345

CVE-2026-83345 affects the Oracle XML Gateway component of Oracle E-Business Suite (specifically the Install component), in supported versions 12.2.3 through 12.2.15 . A low-privileged attacker with network access via HTTP can exploit this easily to gain unauthorized access to critical data (comp...

CVE-2026-83343

CVE-2026-83343 affects Oracle Utilities Network Management System (component: System Wide) in versions 2.5.0.2.0–2.5.0.2.13, 2.6.0.1.0–2.6.0.12B, 2.6.0.2.0–2.6.0.2.10A, and 25.12.0.0.0–25.12.0.0.3 . An unauthenticated attacker with network access via HTTP can exploit this vulnerability to gain un...

EUVD-2026-79679

Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM component: Open Integration. Supported versions that are affected are 25.12-26.7. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel CRM Integration. Successful...

EUVD-2026-79674

Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics component: Analytics Actions. Supported versions that are affected are 8.2.0.0.0 and 26.01.0.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...

CVE-2026-83305

Oracle BI Publisher (component: BI Platform Security ) in Oracle Analytics is vulnerable to an easily exploitable flaw allowing an unauthenticated attacker with network access via HTTP to compromise the product. Affected supported versions are 8.2.0.0.0 , 12.2.1.4.0 , and 26.01.0.0.0 . Successful...

CVE-2026-83279

Oracle Agile PLM MCAD Connector (component: CAX Client ), version 3.6 , is affected by a vulnerability that allows a low-privileged attacker with local logon to the hosting infrastructure to gain unauthorized access to critical data or complete access to all data accessible by the component. The ...

EUVD-2026-79631

Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply Chain component: CAX Client. The supported version that is affected is 3.6. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Agile PLM MCAD Connector executes...

EUVD-2026-79611

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce component: Forge. The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

EUVD-2026-79602

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce component: Forge. The supported version that is affected is 11.4.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Orac...

CVE-2026-83234

CVE-2026-83234 affects Oracle Commerce Guided Search / Oracle Commerce Experience Manager (component: Experience Manager , version 11.4.0 ). The vulnerability allows an unauthenticated attacker with network access via HTTP to compromise the product. Successful exploitation can result in unauthori...

EUVD-2026-79583

Vulnerability in the Helidon product of Oracle Fusion Middleware component: helidon-dbclient-mongodb. Supported versions that are affected are 3.0.0-3.2.20 and 4.0.0-4.5.4. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon...

CVE-2026-83217

Oracle Siebel CRM End User (component: Open UI ) is vulnerable in supported versions 17.0 through 26.7 . A low-privileged attacker with network access via HTTP can exploit this vulnerability to gain unauthorized access to critical data (High confidentiality impact) and perform unauthorized update...

EUVD-2026-79569

Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM component: Open UI. Supported versions that are affected are 17.0-26.7. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Siebel CRM End User. Successful attacks of this...

EUVD-2026-79565

Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM component: Reports. Supported versions that are affected are 17.0-26.7. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel CRM End User. Successful attacks of this...

CVE-2026-83213

Oracle Siebel CRM End User (component: Reports ) has a vulnerability affecting supported versions 17.0 through 26.7 . An unauthenticated attacker with network access via HTTP can exploit this flaw to gain unauthorized access to critical data or complete access to all Siebel CRM End User accessibl...

EUVD-2026-79555

Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM component: Open UI. Supported versions that are affected are 17.0-26.7. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel CRM End User. Successful attacks of this...