CVE-2026-83337

CVE-2026-83337 affects the Remote Diagnostic Agent component of Oracle Middleware Common Libraries and Tools (part of Oracle Fusion Middleware). Supported versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0 are impacted. The vulnerability is described as easily exploitable by a low-privil...

EUVD-2026-79690

Vulnerability in the Oracle Middleware Common Libraries and Tools product of Oracle Fusion Middleware component: Remote Diagnostic Agent. Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows low privileged attacker wit...

EUVD-2026-79687

Vulnerability in the Oracle Web Services Manager product of Oracle Fusion Middleware component: Web Services Security. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via SOAP to compromise...

CVE-2026-83330

CVE-2026-83330 is a Denial of Service vulnerability in the WebSocket component of Helidon (Oracle Fusion Middleware), affecting versions 4.0.0 through 4.5.4 . An unauthenticated remote attacker with network access via HTTP can cause a hang or frequently repeatable crash (complete DoS) of the affe...

CVE-2026-83281

CVE-2026-83281 is a Denial-of-Service vulnerability in Oracle Fusion Middleware Helidon , specifically the helidon-webserver component, affecting versions 4.0.0 through 4.5.4 . An unauthenticated attacker with network access via TCP can cause a hang or frequently repeatable crash, resulting in a ...

EUVD-2026-79632

Vulnerability in the Helidon product of Oracle Fusion Middleware component: helidon-webserver-http2. Supported versions that are affected are 4.0.0-4.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP/2 to compromise Helidon. Successful attacks of...

CVE-2026-83276

CVE-2026-83276 affects the helidon-webclient-http2 component of Oracle Helidon (part of Oracle Fusion Middleware), versions 4.0.0 through 4.5.4 . An unauthenticated attacker with network access via HTTP/2 can trigger a hang or frequently repeatable crash, resulting in a complete denial of service...

EUVD-2026-79630

Vulnerability in the Helidon product of Oracle Fusion Middleware component: helidon-integrations-neo4j. Supported versions that are affected are 3.0.0-3.2.20 and 4.0.0-4.5.4. Difficult to exploit vulnerability allows unauthenticated attacker with access to the physical communication segment...

CVE-2026-83266

CVE-2026-83266 affects the Resource Catalog Services component of Oracle JDeveloper (Oracle Fusion Middleware), versions 12.2.1.4.0 and 14.1.2.0.0 . An unauthenticated attacker with network access via HTTP can exploit this vulnerability to gain unauthorized access to all Oracle JDeveloper accessi...

EUVD-2026-79617

Vulnerability in the Oracle Web Services Manager product of Oracle Fusion Middleware component: Web Services Agent. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracl...

CVE-2026-83265

CVE-2026-83265 affects the Web Services Agent component of Oracle Web Services Manager (Oracle Fusion Middleware), versions 12.2.1.4.0 and 14.1.2.0.0 . The vulnerability is exploitable by an unauthenticated attacker with network access via HTTP , making it easily reachable without prior authentic...

EUVD-2026-79583

Vulnerability in the Helidon product of Oracle Fusion Middleware component: helidon-dbclient-mongodb. Supported versions that are affected are 3.0.0-3.2.20 and 4.0.0-4.5.4. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon...

CVE-2026-83151

CVE-2026-83151 affects the Messaging Enabler component of Oracle Fusion Middleware – Service Delivery Platform , versions 12.2.1.4.0 and 14.1.2.0.0 . An unauthenticated attacker with network access via SOAP can exploit this vulnerability to achieve full takeover of the Service Delivery Platform, ...

CVE-2026-83106

CVE-2026-83106 affects the Oracle Forms product of Oracle Fusion Middleware, specifically the Forms Services, C/S, Charmode component. Supported versions 12.2.1.19.0 and 14.1.2.0.0 are impacted. A low-privileged attacker with network access via HTTP can exploit this vulnerability to achieve takeo...

EUVD-2026-79434

Vulnerability in the Oracle Forms product of Oracle Fusion Middleware component: Forms Services, C/S, Charmode. Supported versions that are affected are 12.2.1.19.0 and 14.1.2.0.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

EUVD-2026-79436

Vulnerability in the Oracle Forms product of Oracle Fusion Middleware component: Forms Services, C/S, Charmode. Supported versions that are affected are 12.2.1.19.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

CVE-2026-83107

CVE-2026-83107 affects the Oracle Forms product of Oracle Fusion Middleware, specifically the Forms Services, C/S, Charmode component. Supported versions 12.2.1.19.0 and 14.1.2.0.0 are vulnerable. A high-privileged attacker with network access via HTTP can exploit this easily (low complexity, no ...

CVE-2026-83105

CVE-2026-83105 affects Oracle Forms (component: Forms Services, C/S, Charmode ) in Oracle Fusion Middleware , versions 12.2.1.19.0 and 14.1.2.0.0 . A difficult-to-exploit vulnerability allows an unauthenticated attacker with network access via HTTP to compromise the product. Although rooted in Or...

CVE-2026-83097

Oracle Forms (component: Forms Services, C/S, Charmode) within Oracle Fusion Middleware is affected in versions 12.2.1.19.0 and 14.1.2.0.0 . A high-privileged attacker with network access via HTTP can exploit this with low complexity to cause unauthorized creation, deletion, or modification of cr...

CVE-2026-83094

Oracle Forms (Oracle Fusion Middleware, component: Forms Services, C/S, Charmode) is vulnerable to an unauthenticated remote attack via HTTP that allows takeover of the application. Affected supported versions are 12.2.1.19.0 and 14.1.2.0.0 . The vulnerability is rated CVSS 3.1 9.8 (CRITICAL) wit...