CVE-2026-83320

Oracle BI Publisher (Administration component) within Oracle Analytics is affected by an easily exploitable vulnerability in versions 8.2.0.0.0 , 12.2.1.4.0 , and 26.01.0.0.0 . A low-privileged attacker with network access via HTTP can exploit this vulnerability, requiring human interaction from ...

CVE-2026-83310

Oracle BI Publisher (component: BI Platform Security ) in Oracle Analytics is affected by an easily exploitable vulnerability reachable over HTTP. A low-privileged attacker with network access can, with required user interaction, compromise the product with a scope change that may significantly i...

EUVD-2026-79646

Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics component: Platform Security. Supported versions that are affected are 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0. Easily exploitable vulnerability allows unauthenticated attacker with logon to the...

CVE-2026-83294

CVE-2026-83294 affects Oracle Business Intelligence Enterprise Edition (component: Platform Security ) in Oracle Analytics. Supported versions 8.2.0.0.0 , 12.2.1.4.0 , and 26.01.0.0.0 are impacted. The vulnerability is easily exploitable by an unauthenticated attacker with local logon to the infr...

CVE-2026-83253

CVE-2026-83253 affects the Endeca Application Controller component within Oracle Commerce Guided Search / Oracle Commerce Experience Manager (version 11.4.0 ). This easily exploitable vulnerability allows an unauthenticated attacker with local access to the infrastructure where the product execut...

CVE-2026-83247

CVE-2026-83247 affects the Forge component of Oracle Commerce Guided Search / Oracle Commerce Experience Manager , version 11.4.0 . The vulnerability is a local attack vector requiring no prior privileges but needing user interaction from a non-attacker. Successful exploitation results in a full ...

EUVD-2026-79599

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce component: Forge. The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle...

EUVD-2026-79593

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce component: Forge. The supported version that is affected is 11.4.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Orac...

CVE-2026-83241

Oracle Commerce Guided Search / Oracle Commerce Experience Manager (component: Forge ), version 11.4.0 , contains a high-complexity, unauthenticated vulnerability exploitable over HTTP . An attacker requires user interaction from a non-attacker to succeed, after which the result is full takeover ...

CVE-2026-83206

Oracle Banking Corporate Lending Process Management (Oracle Financial Services Applications, component: Base) is affected by a vulnerability in supported versions 14.5.0.0.0–14.9.0.0.0 . A low-privileged attacker with network access via HTTP can exploit this difficult-to-exploit vulnerability, bu...

EUVD-2026-79558

Vulnerability in the Oracle Banking Corporate Lending Process Management product of Oracle Financial Services Applications component: Base. Supported versions that are affected are 14.5.0.0.0-14.9.0.0.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTT...

CVE-2026-83193

Oracle Siebel CRM (component: Life Sciences ) versions 17.0–26.7 are affected by a locally exploitable vulnerability that requires a low-privileged attacker with infrastructure logon and user interaction from a separate person. Successful exploitation results in full compromise (high impact to co...

EUVD-2026-79545

Vulnerability in the Siebel Apps - Life Sciences product of Oracle Siebel CRM component: Life Sciences. Supported versions that are affected are 17.0-26.7. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Siebel Apps - Life Sciences executes t...

EUVD-2026-79542

Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM component: Server Infrastructure. Supported versions that are affected are 17.0-26.7. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Siebel CRM Deployment executes to...

CVE-2026-83190

CVE-2026-83190 is a vulnerability in Oracle Siebel CRM (component: Server Infrastructure ) affecting supported versions 17.0 through 26.7 . The flaw allows a low-privileged attacker with local access to the infrastructure where Siebel CRM Deployment executes to compromise the product, requiring h...

EUVD-2026-79537

Vulnerability in the Oracle Common Applications product of Oracle E-Business Suite component: CRM User Management Framework. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

CVE-2026-83185

CVE-2026-83185 affects the CRM User Management Framework component of Oracle E-Business Suite , specifically supported versions 12.2.3 through 12.2.15 . A low-privileged attacker with network access via HTTP can exploit this vulnerability, though user interaction is required. Successful exploitat...

CVE-2026-83166

Oracle Customer Interaction History (component Outcome-Result ) in Oracle E-Business Suite versions 12.2.3 through 12.2.15 is vulnerable to an easily exploitable network-based attack via HTTP. A low-privileged attacker can exploit this vulnerability to gain unauthorized access to critical data , ...

EUVD-2026-79493

Vulnerability in the Oracle Customer Interaction History product of Oracle E-Business Suite component: Outcome-Result. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Custome...

EUVD-2026-79492

Vulnerability in the Oracle Customer Interaction History product of Oracle E-Business Suite component: User Interface. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTPS to compromise Oracle Custom...