EUVD-2026-79730

Vulnerability in the Oracle Depot Repair product of Oracle E-Business Suite component: Estimate and Actual Charges. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Depot...

CVE-2026-83432

Oracle Depot Repair (component: Estimate and Actual Charges ) in Oracle E-Business Suite versions 12.2.3 through 12.2.15 is vulnerable to an easily exploitable, network-based attack via HTTP. A low-privileged attacker requiring no user interaction can achieve unauthorized creation, deletion, or m...

CVE-2026-83431

Oracle Product Workbench (component: WebUI ) in Oracle E-Business Suite versions 12.2.3 through 12.2.15 is affected by a medium-severity vulnerability (CVSS 3.1: 5.4 ). A low-privileged attacker with network access via HTTP can exploit the flaw, but user interaction from a third party is required...

EUVD-2026-79726

Vulnerability in the Oracle Demand Signal Repository product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Demand...

CVE-2026-83429

This vulnerability affects the Oracle Demand Signal Repository component (Internal Operations ) of Oracle E-Business Suite , versions 12.2.3 through 12.2.15 . A low-privileged attacker with network access via HTTP can exploit it to achieve unauthorized creation, deletion, modification, or read ac...

CVE-2026-83430

Oracle Product Workbench (component: Internal Operations) in Oracle E-Business Suite versions 12.2.3 through 12.2.15 is affected by an easily exploitable vulnerability. A low-privileged attacker with network access via HTTP can achieve unauthorized creation, deletion, or modification of critical ...

CVE-2026-83428

CVE-2026-83428 affects the Oracle Demand Signal Repository component (Internal Operations) within Oracle E-Business Suite , versions 12.2.3 through 12.2.15 . A low-privileged attacker with network access via HTTP can exploit this vulnerability without user interaction. Successful exploitation res...

EUVD-2026-79727

Vulnerability in the Oracle Demand Signal Repository product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Demand...

CVE-2026-83425

Oracle Complex Maintenance, Repair and Overhaul (component: Internal Operations) within Oracle E-Business Suite versions 12.2.12–12.2.15 is affected by a network-accessible vulnerability exploitable over HTTP by a low-privileged attacker with no user interaction. Successful exploitation grants co...

EUVD-2026-79725

Vulnerability in the Oracle Complex Maintenance, Repair and Overhaul product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.12-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...

CVE-2026-83423

Oracle JDeveloper (Oracle Fusion Middleware, component: Security Framework ) is vulnerable in supported versions 12.2.1.4.0 and 14.1.2.0.0 . A low-privileged attacker with network access via HTTP can exploit this vulnerability with low complexity and no user interaction to achieve full takeover o...

EUVD-2026-79721

Vulnerability in the PeopleSoft Enterprise FIN Engineering Brazil product of Oracle PeopleSoft component: Engineering. The supported version that is affected is 9.1. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where PeopleSoft Enterprise FIN...

CVE-2026-83419

Oracle Communications Cloud Native Core Security Edge Protection Proxy (SEPP) in versions 26.1.200 and 25.2.201 contains a vulnerability that allows a low-privileged attacker with network access via HTTP to compromise the product. Successful exploitation results in unauthorized read access to a s...

CVE-2026-83420

Oracle PeopleSoft Enterprise FIN Engineering Brazil (component: Engineering, version 9.1) is affected by a local vulnerability that is easily exploitable by a low-privileged attacker with logon access to the host infrastructure. Successful exploitation results in full takeover of the affected sys...

EUVD-2026-79720

Vulnerability in the Oracle Communications Cloud Native Core Security Edge Protection Proxy product of Oracle Communications component: SEPP. Supported versions that are affected are 26.1.200 and 25.2.201. Easily exploitable vulnerability allows low privileged attacker with network access via HTT...

EUVD-2026-79719

Vulnerability in the Oracle Communications Cloud Native Core Security Edge Protection Proxy product of Oracle Communications component: SEPP. Supported versions that are affected are 26.1.200 and 25.2.201. Difficult to exploit vulnerability allows low privileged attacker with network access via...

CVE-2026-83415

Oracle Coherence (Core component) of Oracle Fusion Middleware is affected by a vulnerability in supported versions 12.2.1.4.0 , 14.1.1.0.0 , 14.1.2.0.0 , and 15.1.1.0.0 . The vulnerability allows a low-privileged attacker with network access via HTTP to fully compromise the product, resulting in ...

EUVD-2026-79717

Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

EUVD-2026-79716

Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracl...

CVE-2026-83416

Oracle Coherence (component: Core ) in Oracle Fusion Middleware versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0 is affected by a vulnerability exploitable over HTTP by a low-privileged attacker with network access and no user interaction. Successful exploitation results in a partial d...