38801 matches found
EUVD-2026-79476
Vulnerability in Oracle Application Testing Suite. The supported version that is affected is 13.3.0.1. Easily exploitable vulnerability allows low privileged attacker having Test Manager for Web Apps privilege with network access via HTTP to compromise Oracle Application Testing Suite. While the...
CVE-2026-83147
A vulnerability in Oracle PeopleSoft Enterprise FIN Inventory Brazil (component: Inventory , affected version 9.1 ) allows a low-privileged local attacker to take over the application, resulting in high impact to confidentiality, integrity, and availability . The CVSS 3.1 base score is 7.8 (High)...
CVE-2026-83144
CVE-2026-83144 affects the Order Management component of Oracle Siebel CRM – Siebel Apps Customer Order Management , versions 17.0 through 26.7 . A low-privileged attacker with network access via HTTP can exploit this vulnerability, though successful exploitation requires user interaction from a ...
EUVD-2026-79474
Vulnerability in the PeopleSoft Enterprise FIN Inventory Brazil product of Oracle PeopleSoft component: Inventory. The supported version that is affected is 9.1. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where PeopleSoft Enterprise FIN...
EUVD-2026-79471
Vulnerability in the Siebel Apps - Customer Order Management product of Oracle Siebel CRM component: Order Management. Supported versions that are affected are 17.0-26.7. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Siebel Apps -...
CVE-2026-83146
Oracle Siebel CRM End User (component: Open UI ) is affected by a difficult-to-exploit vulnerability across supported versions 17.0–26.7 . A low-privileged attacker with network access via HTTP can compromise the product, though successful exploitation requires human interaction from another user...
EUVD-2026-79472
Vulnerability in the Siebel Apps - Customer Order Management product of Oracle Siebel CRM component: Order Management. Supported versions that are affected are 17.0-26.7. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Siebel Apps -...
EUVD-2026-79473
Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM component: Open UI. Supported versions that are affected are 17.0-26.7. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Siebel CRM End User. Successful attacks requir...
CVE-2026-83142
Oracle Proposals (component: Internal Operations ) in Oracle E-Business Suite versions 12.2.3 through 12.2.15 is vulnerable to unauthorized data access. A low-privileged attacker with network access via HTTP can exploit this to gain complete access to all Oracle Proposals accessible data , with p...
CVE-2026-83141
CVE-2026-83141 affects Oracle Field Service (component: Internal Operations) within Oracle E-Business Suite , versions 12.2.3 through 12.2.15 . A low-privileged attacker with network access via HTTP can exploit this vulnerability to gain unauthorized access to critical data , potentially compromi...
CVE-2026-83140
CVE-2026-83140 affects the Internal Operations component of Oracle Field Service (part of Oracle E-Business Suite), versions 12.2.3 through 12.2.15 . A low-privileged attacker with network access via HTTP can exploit this vulnerability with low complexity and no user interaction, resulting in una...
EUVD-2026-79468
Vulnerability in the Oracle Field Service product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Field Service...
EUVD-2026-79467
Vulnerability in the Oracle Field Service product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Field Service...
CVE-2026-83136
Oracle Spares Management (component: Internal Operations) within Oracle E-Business Suite is affected by an easily exploitable vulnerability in supported versions 12.2.3 through 12.2.15 . A low-privileged attacker with network access via HTTP can exploit this flaw to achieve full takeover of the p...
EUVD-2026-79465
Vulnerability in the Oracle Spares Management product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Spares...
EUVD-2026-79462
Vulnerability in the Oracle iStore product of Oracle E-Business Suite component: Shopping Cart. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle iStore. While the vulnerabilit...
CVE-2026-83137
CVE-2026-83137 affects Oracle Spares Management (component: Internal Operations) within Oracle E-Business Suite , versions 12.2.3 through 12.2.15 . An easily exploitable vulnerability allows a low-privileged attacker with network access via HTTP to achieve full takeover of the Oracle Spares Manag...
CVE-2026-83135
A vulnerability in the Shopping Cart component of Oracle iStore (part of Oracle E-Business Suite) affects supported versions 12.2.3 through 12.2.15 . A low-privileged attacker with network access via HTTP can exploit this with required user interaction, resulting in high impact to confidentiality...
CVE-2026-83131
A vulnerability in the File download component of Oracle Web Applications Desktop Integrator (within Oracle E-Business Suite) affects supported versions 12.2.3 through 12.2.15 . A low-privileged attacker with network access via HTTPS can exploit this with low complexity and no user interaction, r...
EUVD-2026-79460
Vulnerability in the Oracle iStore product of Oracle E-Business Suite component: Shopping Cart. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle iStore. Successful attacks of...