CVE-2026-73943

Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware component: OIM Legacy UI. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Identit...

CVE-2026-73947

Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware component: Authentication Engine. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

CVE-2026-69215

Http4s is a Scala interface for HTTP services. Prior to 0.23.35 and 1.0.0-M47, The CookieJar client middleware uses unanchored substring checks instead of RFC 6265 domain and path matching when deciding whether to attach a stored cookie. A cookie for example.com can consequently be sent to an...

CVE-2026-83488

Oracle Fusion Middleware – Helidon (component: helidon-microprofile-security ) versions 4.0.0 through 4.5.4 are affected by an easily exploitable vulnerability. A low-privileged attacker with network access via HTTP can achieve unauthorized update, insert, delete, and read access to a subset of d...

EUVD-2026-79767

Vulnerability in the Helidon product of Oracle Fusion Middleware component: WebSocket. Supported versions that are affected are 4.0.0-4.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful attacks of this vulnerabilit...

CVE-2026-83480

CVE-2026-83480 affects the WebSocket component of Oracle Helidon (part of Oracle Fusion Middleware), versions 4.0.0 through 4.5.4 . An unauthenticated attacker with network access via HTTP can trigger a partial denial of service against the affected instance. The CVSS 3.1 base score is 5.3 (MEDIU...

EUVD-2026-79757

Vulnerability in the Helidon product of Oracle Fusion Middleware component: JSON. Supported versions that are affected are 4.0.0-4.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful attacks of this vulnerability can...

CVE-2026-83458

Oracle Helidon (part of Oracle Fusion Middleware), specifically the JSON component , is affected in supported versions 4.0.0 through 4.5.4 . An unauthenticated attacker with network access via HTTP can exploit this with low complexity to cause a partial denial of service (partial DOS) of Helidon....

EUVD-2026-79758

Vulnerability in the Helidon product of Oracle Fusion Middleware component: helidon-media-multipart. Supported versions that are affected are 3.0.0-3.2.20. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful attacks of th...

EUVD-2026-79737

Vulnerability in the Helidon product of Oracle Fusion Middleware component: helidon-security-providers-idcs-mapper. Supported versions that are affected are 3.0.0-3.2.20 and 4.0.0-4.5.4. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise...

CVE-2026-83439

CVE-2026-83439 affects the helidon-security-providers-idcs-mapper component of Oracle Helidon (Fusion Middleware), versions 3.0.0–3.2.20 and 4.0.0–4.5.4 . A low-privileged attacker with network access via HTTP can exploit this vulnerability to achieve unauthorized creation, deletion, or modificat...

CVE-2026-83424

Oracle JDeveloper (component of Oracle Fusion Middleware) versions 12.2.1.4.0 and 14.1.2.0.0 are affected by a vulnerability that allows an unauthenticated attacker with network access via HTTP to compromise the product. Successful exploitation results in unauthorized access to critical data or c...

CVE-2026-83423

Oracle JDeveloper (Oracle Fusion Middleware, component: Security Framework ) is vulnerable in supported versions 12.2.1.4.0 and 14.1.2.0.0 . A low-privileged attacker with network access via HTTP can exploit this vulnerability with low complexity and no user interaction to achieve full takeover o...

EUVD-2026-79715

Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware component: Core. The supported version that is affected is 15.1.1.0.0. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Coherence executes to compromise Oracle...

EUVD-2026-79712

Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Coherence...

EUVD-2026-79708

Vulnerability in the Oracle Enterprise Manager for Fusion Middleware product of Oracle Enterprise Manager component: Metrics. Supported versions that are affected are 13.5 and 24.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

CVE-2026-83355

Oracle Enterprise Manager for Fusion Middleware (component: Metrics ) in supported versions 13.5 and 24.1 contains a critical vulnerability that allows an unauthenticated attacker with network access via HTTP to fully compromise the product, resulting in takeover with high impact to confidentiali...

CVE-2026-83346

CVE-2026-83346 is a vulnerability in the Framework component of Oracle Fusion Middleware Control , affecting supported versions 12.2.1.4.0 and 14.1.2.0.0 . A low-privileged attacker with network access via HTTP can exploit this vulnerability, though successful exploitation requires user interacti...

EUVD-2026-79699

Vulnerability in the Oracle Fusion Middleware Control product of Oracle Fusion Middleware component: Framework. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

EUVD-2026-79692

Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware component: Client Bundle. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...