CVE-2026-83277

Oracle Agile PLM MCAD Connector (component: CAX Client ), version 3.6 , contains an easily exploitable local vulnerability. A low-privileged attacker with logon access to the infrastructure can compromise the connector, resulting in unauthorized creation, deletion, or modification of critical dat...

EUVD-2026-79627

Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply Chain component: CAX Client. The supported version that is affected is 3.6. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Agile PLM MCAD Connector executes...

CVE-2026-83271

CVE-2026-83271 affects the RDBMS component of Oracle Database Server (versions 19.3–19.32, 21.3–21.23, and 23.4.0–23.26.3). A low-privileged attacker with Execute on DBMS_REDEFINITION privilege and network access via Oracle Net can exploit this vulnerability to achieve takeover of the RDBMS , res...

EUVD-2026-79623

Vulnerability in the RDBMS component of Oracle Database Server. Supported versions that are affected are 19.3-19.32, 21.3-21.23 and 23.4.0-23.26.3. Easily exploitable vulnerability allows low privileged attacker having Execute on DBMSREDEFINITION privilege with network access via Oracle Net to...

EUVD-2026-79619

Vulnerability in the Oracle BI Publisher product of Oracle Analytics component: BI Publisher Security. Supported versions that are affected are 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle ...

CVE-2026-83267

Oracle BI Publisher (component: BI Publisher Security ) in Oracle Analytics is affected in versions 8.2.0.0.0 , 12.2.1.4.0 , and 26.01.0.0.0 . A low-privileged attacker with network access via HTTP can exploit this vulnerability with low complexity. Due to a scope change , the attack may signific...

CVE-2026-83264

Oracle Product Lifecycle Analytics (version 3.6.1 ), component Installation Issues , is affected by an easily exploitable vulnerability that allows a low-privileged attacker with local logon to the infrastructure to compromise the product. The scope change means attacks may significantly impact a...

EUVD-2026-79615

Vulnerability in the Oracle Product Lifecycle Analytics product of Oracle Supply Chain component: Installation Issues. The supported version that is affected is 3.6.1. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Product...

EUVD-2026-79614

Vulnerability in the Oracle Product Lifecycle Analytics product of Oracle Supply Chain component: Installation Issues. The supported version that is affected is 3.6.1. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Product...

CVE-2026-83262

Oracle Product Lifecycle Analytics (part of Oracle Supply Chain), version 3.6.1 , is affected by a vulnerability in its Installation Issues component. A low-privileged attacker with network access via HTTP can exploit this flaw, though it is rated as difficult to exploit (High Attack Complexity)....

CVE-2026-83263

Oracle Product Lifecycle Analytics (Oracle Supply Chain), version 3.6.1 , is affected by a vulnerability in the Installation Issues component. A low-privileged attacker with network access via HTTP can exploit this difficult-to-exploit flaw to achieve a takeover of the product, impacting confiden...

EUVD-2026-79611

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce component: Forge. The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

CVE-2026-83259

Oracle Commerce Guided Search / Oracle Commerce Experience Manager (component: Forge ), version 11.4.0 , is affected by an easily exploitable vulnerability requiring only low-privileged attacker access over HTTP . Successful exploitation can lead to unauthorized access to all accessible data (hig...

EUVD-2026-79609

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce component: Forge. The supported version that is affected is 11.4.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracl...

CVE-2026-83257

CVE-2026-83257 affects Oracle Commerce Guided Search / Oracle Commerce Experience Manager (component: Forge ), version 11.4.0 . A low-privileged attacker with network access via HTTP can exploit this vulnerability to achieve full takeover of the affected product. The attack is rated difficult to ...

EUVD-2026-79601

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce component: Forge. The supported version that is affected is 11.4.0. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle...

CVE-2026-83249

Oracle Commerce Guided Search / Oracle Commerce Experience Manager (component: Forge ), version 11.4.0 , is affected by a local, high-complexity vulnerability. A low-privileged attacker with logon to the host infrastructure can exploit this flaw to achieve takeover of the product, with a scope ch...

CVE-2026-83239

Oracle Commerce Guided Search / Oracle Commerce Experience Manager (component: Endeca Application Controller ) version 11.4.0 is affected by a local vulnerability that can lead to full takeover of the product. The attack vector is local with high complexity and requires a low-privileged account w...

CVE-2026-83240

CVE-2026-83240 affects the Forge component of Oracle Commerce Guided Search / Oracle Commerce Experience Manager , version 11.4.0 . A low-privileged local attacker with infrastructure logon can exploit this vulnerability with low complexity and no user interaction , leading to high integrity impa...

EUVD-2026-79589

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce component: Forge. The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...