EUVD-2026-79601

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce component: Forge. The supported version that is affected is 11.4.0. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle...

CVE-2026-83249

Oracle Commerce Guided Search / Oracle Commerce Experience Manager (component: Forge ), version 11.4.0 , is affected by a local, high-complexity vulnerability. A low-privileged attacker with logon to the host infrastructure can exploit this flaw to achieve takeover of the product, with a scope ch...

CVE-2026-83239

Oracle Commerce Guided Search / Oracle Commerce Experience Manager (component: Endeca Application Controller ) version 11.4.0 is affected by a local vulnerability that can lead to full takeover of the product. The attack vector is local with high complexity and requires a low-privileged account w...

EUVD-2026-79590

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce component: Forge. The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

CVE-2026-83240

CVE-2026-83240 affects the Forge component of Oracle Commerce Guided Search / Oracle Commerce Experience Manager , version 11.4.0 . A low-privileged local attacker with infrastructure logon can exploit this vulnerability with low complexity and no user interaction , leading to high integrity impa...

EUVD-2026-79589

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce component: Forge. The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

CVE-2026-83238

CVE-2026-83238 affects Oracle Commerce Guided Search / Oracle Commerce Experience Manager (component: Forge ), version 11.4.0 . The vulnerability is easily exploitable by a low-privileged attacker with network access via HTTP , requiring no user interaction. Successful exploitation can lead to un...

EUVD-2026-79591

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce component: Endeca Application Controller. The supported version that is affected is 11.4.0. Difficult to exploit vulnerability allows low privileged attacker with logon to the...

EUVD-2026-79592

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce component: Forge. The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle...

EUVD-2026-79585

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce component: Experience Manager. The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...

EUVD-2026-79582

Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM component: Siebel Management Console. Supported versions that are affected are 17.0-26.7. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Siebel CRM Deployment...

CVE-2026-83230

This vulnerability affects Oracle Siebel CRM (component: Siebel Management Console ) in supported versions 17.0 through 26.7 . An easily exploitable, low-privileged attacker with network access via HTTP can compromise the Siebel CRM Deployment component. Successful exploitation results in unautho...

CVE-2026-83227

Oracle Siebel CRM Integration (component EAI ) contains a vulnerability affecting supported versions 17.0 through 26.7 . A low-privileged attacker with network access via HTTP can exploit this vulnerability, though it is rated as difficult to exploit . Successful exploitation results in takeover ...

EUVD-2026-79579

Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM component: EAI. Supported versions that are affected are 17.0-26.7. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Siebel CRM Integration. Successful attacks of...

CVE-2026-83226

Oracle Siebel CRM Deployment (component: Server Infrastructure ) is vulnerable in supported versions 17.0–26.7 to a network-based attack via HTTP that allows a low-privileged attacker to achieve takeover of the deployment with High impact on Confidentiality, Integrity, and Availability. The vulne...

EUVD-2026-79578

Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM component: Server Infrastructure. Supported versions that are affected are 17.0-26.7. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Siebel CRM Deployment...

CVE-2026-83224

CVE-2026-83224 affects the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure ), versions 17.0 through 26.7 . The vulnerability allows a low-privileged attacker with network access via HTTP to achieve unauthorized access to all accessible data (high confidentiali...

EUVD-2026-79575

Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM component: Siebel Remote. Supported versions that are affected are 17.0-26.7. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Siebel CRM Deployment. Successful...

CVE-2026-83223

Oracle Siebel CRM (component: Siebel Remote ) in versions 17.0 through 26.7 contains a vulnerability that allows a low-privileged attacker with network access via HTTP to compromise the Siebel CRM Deployment component. The attack has high complexity , meaning exploitation is not straightforward, ...

CVE-2026-83221

Oracle Siebel CRM Integration (component: EAI ) is vulnerable to an easily exploitable attack via network access using SOAP by a low-privileged attacker. Affected supported versions span 17.0 through 26.7 . Successful exploitation allows unauthorized access to all accessible data (High confidenti...