CVE-2026-83346

CVE-2026-83346 is a vulnerability in the Framework component of Oracle Fusion Middleware Control , affecting supported versions 12.2.1.4.0 and 14.1.2.0.0 . A low-privileged attacker with network access via HTTP can exploit this vulnerability, though successful exploitation requires user interacti...

EUVD-2026-79699

Vulnerability in the Oracle Fusion Middleware Control product of Oracle Fusion Middleware component: Framework. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

EUVD-2026-79698

Vulnerability in the Oracle XML Gateway product of Oracle E-Business Suite component: Install. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle XML Gateway. Successful attacks...

CVE-2026-83345

CVE-2026-83345 affects the Oracle XML Gateway component of Oracle E-Business Suite (specifically the Install component), in supported versions 12.2.3 through 12.2.15 . A low-privileged attacker with network access via HTTP can exploit this easily to gain unauthorized access to critical data (comp...

CVE-2026-83342

Oracle Utilities Network Management System (component: System Wide ) is affected by an easily exploitable local vulnerability. A low-privileged attacker with logon to the hosting infrastructure can compromise the system, resulting in full takeover with high impact to confidentiality, integrity, a...

EUVD-2026-79695

Vulnerability in the Oracle Utilities Network Management System product of Oracle Utilities Applications component: System Wide. Supported versions that are affected are 2.4.0.1.0-2.4.0.1.33, 2.5.0.1.0-2.5.0.1.19, 2.5.0.2.0-2.5.0.2.13, 2.6.0.1.0-2.6.0.12B, 2.6.0.2.0-2.6.0.2.10A and...

CVE-2026-83338

Oracle Applications Manager (component: Oracle Diagnostics Interfaces ) in Oracle E-Business Suite versions 12.2.3 through 12.2.15 is affected by an easily exploitable vulnerability. A low-privileged attacker with network access via HTTP can achieve takeover of Oracle Applications Manager, impact...

CVE-2026-83340

CVE-2026-83340 affects Oracle Identity Manager (component: Security ) within Oracle Fusion Middleware, versions 12.2.1.4.0 and 14.1.2.1.0 . A low-privileged attacker with network access via HTTP can exploit this vulnerability to achieve takeover of the Identity Manager instance, resulting in high...

EUVD-2026-79691

Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite component: Oracle Diagnostics Interfaces. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

EUVD-2026-79693

Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware component: Security. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Identity...

CVE-2026-83336

Oracle Business Intelligence Enterprise Edition (component: Analytics Server ) is affected by a local privilege escalation vulnerability in supported versions 8.2.0.0.0 and 26.01.0.0.0 . A low-privileged attacker with local logon to the infrastructure can exploit it with no user interaction and l...

EUVD-2026-79688

Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics component: Analytics Server. Supported versions that are affected are 8.2.0.0.0 and 26.01.0.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...

EUVD-2026-79689

Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics component: Analytics Server. Supported versions that are affected are 8.2.0.0.0 and 26.01.0.0.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where...

CVE-2026-83337

CVE-2026-83337 affects the Remote Diagnostic Agent component of Oracle Middleware Common Libraries and Tools (part of Oracle Fusion Middleware). Supported versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0 are impacted. The vulnerability is described as easily exploitable by a low-privil...

CVE-2026-83335

CVE-2026-83335 affects Oracle Business Intelligence Enterprise Edition (component: Analytics Server ), versions 8.2.0.0.0 and 26.01.0.0.0 . A low-privileged attacker with network access via HTTP can exploit this vulnerability to achieve takeover of the product, with high impact to confidentiality...

EUVD-2026-79690

Vulnerability in the Oracle Middleware Common Libraries and Tools product of Oracle Fusion Middleware component: Remote Diagnostic Agent. Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows low privileged attacker wit...

EUVD-2026-79685

Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite component: Personalization. Supported versions that are affected are 12.2.9-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Applications...

CVE-2026-83332

CVE-2026-83332 affects the Personalization component of Oracle Applications Framework within Oracle E-Business Suite , versions 12.2.9 through 12.2.15 . The vulnerability is easily exploitable by a low-privileged attacker over HTTP (network vector, no user interaction required). Successful exploi...

CVE-2026-83331

CVE-2026-83331 affects the Personalization component of Oracle Applications Framework within Oracle E-Business Suite, versions 12.2.9 through 12.2.15 . The vulnerability is network-exploitable via HTTP with low complexity and requires only a low-privileged attacker and no user interaction. Succes...

CVE-2026-83329

CVE-2026-83329 affects the Personalization component of the Oracle Applications Framework in Oracle E-Business Suite, versions 12.2.9 through 12.2.15 . A low-privileged attacker with network access via HTTP can exploit this vulnerability with low complexity and no user interaction to achieve full...