EUVD-2026-79723

Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware component: Security Framework. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle JDevelope...

EUVD-2026-79709

Vulnerability in the Enterprise Command Center Framework product of Oracle E-Business Suite component: Security. The supported version that is affected is V16. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Enterprise Command Center...

CVE-2026-83346

CVE-2026-83346 is a vulnerability in the Framework component of Oracle Fusion Middleware Control , affecting supported versions 12.2.1.4.0 and 14.1.2.0.0 . A low-privileged attacker with network access via HTTP can exploit this vulnerability, though successful exploitation requires user interacti...

EUVD-2026-79699

Vulnerability in the Oracle Fusion Middleware Control product of Oracle Fusion Middleware component: Framework. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

EUVD-2026-79685

Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite component: Personalization. Supported versions that are affected are 12.2.9-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Applications...

CVE-2026-83332

CVE-2026-83332 affects the Personalization component of Oracle Applications Framework within Oracle E-Business Suite , versions 12.2.9 through 12.2.15 . The vulnerability is easily exploitable by a low-privileged attacker over HTTP (network vector, no user interaction required). Successful exploi...

EUVD-2026-79681

Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite component: Personalization. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Application...

CVE-2026-83331

CVE-2026-83331 affects the Personalization component of Oracle Applications Framework within Oracle E-Business Suite, versions 12.2.9 through 12.2.15 . The vulnerability is network-exploitable via HTTP with low complexity and requires only a low-privileged attacker and no user interaction. Succes...

CVE-2026-83328

CVE-2026-83328 affects the Personalization component of Oracle Applications Framework within Oracle E-Business Suite, versions 12.2.3 through 12.2.15 . An easily exploitable vulnerability allows a high-privileged attacker with network access via HTTP to compromise the framework, resulting in a fu...

EUVD-2026-79684

Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite component: Personalization. Supported versions that are affected are 12.2.9-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Applications...

EUVD-2026-79682

Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite component: Personalization. Supported versions that are affected are 12.2.9-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Applications...

CVE-2026-83327

CVE-2026-83327 is a critical vulnerability in the Personalization component of Oracle Applications Framework within Oracle E-Business Suite , affecting versions 12.2.3 through 12.2.15 . An unauthenticated attacker with network access via SOAP can exploit it to achieve full takeover of the framewo...

EUVD-2026-79557

Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite component: Personalization. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Applications...

CVE-2026-83205

Oracle Applications Framework within Oracle E-Business Suite is affected via the Personalization component, impacting supported versions 12.2.3 through 12.2.15 . A low-privileged attacker with network access via HTTP can exploit this vulnerability with low complexity and no user interaction, resu...

CVE-2026-83176

CVE-2026-83176 affects Oracle E-Business Suite (Oracle Common Applications, component: CRM User Management Framework ), versions 12.2.3 through 12.2.15 . The vulnerability allows a high-privileged attacker with network access via HTTP to compromise the application, resulting in a full takeover wi...

EUVD-2026-79526

Vulnerability in the Oracle CRM Technical Foundation product of Oracle E-Business Suite component: Application Framework. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle CRM...

CVE-2026-83174

Oracle E-Business Suite – CRM Technical Foundation (Application Framework) in supported versions 12.2.3 through 12.2.15 is affected by a vulnerability that allows a low-privileged attacker with network access via HTTP to perform unauthorized creation, deletion, modification, or access to critical...

CVE-2026-83072

CVE-2026-83072 is an easily exploitable vulnerability in the Search Bean [Incl. Advanced] component of Oracle Applications Framework within Oracle E-Business Suite , affecting supported versions 12.2.3 through 12.2.15 . A low-privileged attacker with network access via HTTP can compromise the com...

EUVD-2026-79400

Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite component: Search Bean Incl. Advanced. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

CVE-2026-83069

CVE-2026-83069 affects the Framework component of Oracle Fusion Middleware Control , versions 12.2.1.4.0 and 14.1.2.0.0 . A low-privileged attacker with network access via HTTP can exploit this with low complexity and no user interaction to achieve a full takeover of the product (CVSS 3.1: 8.8, H...