CVE-2026-83194

This vulnerability affects Oracle Depot Repair (component: Internal Operations ) within Oracle E-Business Suite , versions 12.2.10 through 12.2.15 . An easily exploitable flaw allows a low-privileged attacker with network access via HTTP to achieve full takeover of Oracle Depot Repair, resulting ...

EUVD-2026-79540

Vulnerability in the Oracle Depot Repair product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Depot Repair...

CVE-2026-83180

Oracle Siebel CRM (component: Server Infrastructure ) is affected by an easily exploitable vulnerability across supported versions 17.0–26.7 . A low-privileged attacker with network access via HTTP can achieve full takeover of the Siebel CRM Deployment subsystem, with high impact on confidentiali...

EUVD-2026-79528

Vulnerability in the Oracle Common Applications product of Oracle E-Business Suite component: CRM User Management Framework. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle...

CVE-2026-83170

Oracle One-to-One Fulfillment (component: Documents) in Oracle E-Business Suite , versions 12.2.3 through 12.2.15 , is affected by an easily exploitable vulnerability. A low-privileged attacker with access to the adjacent physical communication segment can compromise the component, resulting in f...

EUVD-2026-79484

Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite component: Command Line - RapidClone. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle...

EUVD-2026-79475

Vulnerability in Oracle Application Testing Suite. The supported version that is affected is 13.3.0.1. Easily exploitable vulnerability allows low privileged attacker having Test Manager for Web Apps privilege with network access via HTTP to compromise Oracle Application Testing Suite. Successful...

CVE-2026-83136

Oracle Spares Management (component: Internal Operations) within Oracle E-Business Suite is affected by an easily exploitable vulnerability in supported versions 12.2.3 through 12.2.15 . A low-privileged attacker with network access via HTTP can exploit this flaw to achieve full takeover of the p...

EUVD-2026-79453

Vulnerability in the Oracle Report Manager product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Report Manager...

CVE-2026-83124

Oracle Sales Online (component: Internal Operations ) in Oracle E-Business Suite versions 12.2.3 through 12.2.15 is affected by an easily exploitable vulnerability. A low-privileged attacker with network access via HTTP can compromise the product, potentially resulting in a full takeover with hig...

EUVD-2026-79442

Vulnerability in the Oracle Quality product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Quality. Successful...

CVE-2026-83101

CVE-2026-83101 is a difficult-to-exploit vulnerability in Oracle Forms (component: Forms Services, C/S, Charmode) within Oracle Fusion Middleware, affecting supported versions 12.2.1.19.0 and 14.1.2.0.0 . An unauthenticated attacker with network access via HTTP can compromise the product, resulti...

EUVD-2026-79429

Vulnerability in the Oracle Forms product of Oracle Fusion Middleware component: Forms Services, C/S, Charmode. Supported versions that are affected are 12.2.1.19.0 and 14.1.2.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

EUVD-2026-79427

Vulnerability in the Oracle Forms product of Oracle Fusion Middleware component: Forms Services, C/S, Charmode. Supported versions that are affected are 12.2.1.19.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

CVE-2026-83099

CVE-2026-83099 is a Critical (CVSS 3.1: 10.0) vulnerability in Oracle Forms (component: Forms Services, C/S, Charmode) within Oracle Fusion Middleware . Affected supported versions are 12.2.1.19.0 and 14.1.2.0.0 . The flaw allows an unauthenticated attacker with network access via HTTP to comprom...

CVE-2026-83094

Oracle Forms (Oracle Fusion Middleware, component: Forms Services, C/S, Charmode) is vulnerable to an unauthenticated remote attack via HTTP that allows takeover of the application. Affected supported versions are 12.2.1.19.0 and 14.1.2.0.0 . The vulnerability is rated CVSS 3.1 9.8 (CRITICAL) wit...

EUVD-2026-79414

Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM component: Siebel Cloud Manager. Supported versions that are affected are 22.3-26.7. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Siebel CRM Cloud...

CVE-2026-83080

Oracle Banking Branch (component: Reports ) in Oracle Financial Services Applications versions 14.5.0.0.0 through 14.9.0.0.0 contains a vulnerability that allows a low-privileged attacker with network access via HTTP to achieve full compromise (high confidentiality, integrity, and availability im...

CVE-2026-83065

CVE-2026-83065 affects Oracle WebCenter Portal (component: Runtime Tools ) within Oracle Fusion Middleware, version 14.1.2.0.0 . The vulnerability allows an unauthenticated attacker with access to the physical communication segment adjacent to the host to compromise the product, resulting in full...

CVE-2026-83066

CVE-2026-83066 affects the OID LDAP Server component of Oracle Internet Directory (Oracle Fusion Middleware), specifically supported versions 12.2.1.4.0 and 14.1.2.1.0 . The vulnerability is easily exploitable by an unauthenticated attacker with network access via T3 or IIOP , potentially resulti...