CVE-2026-83180

Oracle Siebel CRM (component: Server Infrastructure ) is affected by an easily exploitable vulnerability across supported versions 17.0–26.7 . A low-privileged attacker with network access via HTTP can achieve full takeover of the Siebel CRM Deployment subsystem, with high impact on confidentiali...

EUVD-2026-79495

Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite component: Oracle Diagnostics Interfaces. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTPS to compromise Oracle...

CVE-2026-83168

Oracle Applications Manager (component: Oracle Diagnostics Interfaces ) in Oracle E-Business Suite versions 12.2.3 through 12.2.15 is affected by an easily exploitable vulnerability that allows a low-privileged attacker with network access via HTTPS to take over the product. The CVSS 3.1 base sco...

CVE-2026-83169

CVE-2026-83169 affects Oracle One-to-One Fulfillment (component: Java Server Issues ) within Oracle E-Business Suite, versions 12.2.3 through 12.2.15 . The vulnerability allows an unauthenticated attacker with network access via HTTP to compromise the product, resulting in a takeover (high impact...

EUVD-2026-79493

Vulnerability in the Oracle Customer Interaction History product of Oracle E-Business Suite component: Outcome-Result. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Custome...

CVE-2026-83165

CVE-2026-83165 affects the User Interface component of the Oracle Customer Interaction History product within Oracle E-Business Suite, supporting versions 12.2.3 through 12.2.15 . A low-privileged attacker with network access via HTTPS can exploit this vulnerability to achieve full takeover of th...

EUVD-2026-79483

Vulnerability in the Oracle XML Developers Kit component of Oracle Database Server. Supported versions that are affected are 19.3-19.32, 21.3-21.23 and 23.4.0-23.26.3. Difficult to exploit vulnerability allows low privileged attacker having XDKC privilege with network access via Oracle Net to...

CVE-2026-83154

This vulnerability affects the Open UI component of Oracle Siebel CRM End User , versions 17.0 through 26.7 . An unauthenticated attacker with network access via SOAP can exploit it with low complexity and no user interaction. Successful exploitation allows unauthorized creation, deletion, or mod...

CVE-2026-83153

Oracle Siebel CRM (product: Siebel CRM Deployment , component: Server Infrastructure ) is affected by a vulnerability in versions 17.0 through 26.7 . The flaw is easily exploitable by a low-privileged attacker with network access via HTTPS , allowing takeover of the Siebel CRM Deployment componen...

EUVD-2026-79480

Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM component: Server Infrastructure. Supported versions that are affected are 17.0-26.7. Easily exploitable vulnerability allows low privileged attacker with network access via HTTPS to compromise Siebel CRM Deployment. Successf...

EUVD-2026-79475

Vulnerability in Oracle Application Testing Suite. The supported version that is affected is 13.3.0.1. Easily exploitable vulnerability allows low privileged attacker having Test Manager for Web Apps privilege with network access via HTTP to compromise Oracle Application Testing Suite. Successful...

CVE-2026-83148

Oracle Application Testing Suite 13.3.0.1 is affected by a low-privilege network vulnerability requiring the Test Manager for Web Apps privilege and network access via HTTP . A successful exploit allows a low-privileged attacker to achieve full takeover of the product, with High impact on Confide...

CVE-2026-83136

Oracle Spares Management (component: Internal Operations) within Oracle E-Business Suite is affected by an easily exploitable vulnerability in supported versions 12.2.3 through 12.2.15 . A low-privileged attacker with network access via HTTP can exploit this flaw to achieve full takeover of the p...

CVE-2026-83135

A vulnerability in the Shopping Cart component of Oracle iStore (part of Oracle E-Business Suite) affects supported versions 12.2.3 through 12.2.15 . A low-privileged attacker with network access via HTTP can exploit this with required user interaction, resulting in high impact to confidentiality...

EUVD-2026-79454

Vulnerability in the Oracle Sales Online product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Sales Online...

CVE-2026-83125

Oracle Report Manager (component: Internal Operations ) within Oracle E-Business Suite versions 12.2.3 through 12.2.15 is affected by a network-exploitable vulnerability. A low-privileged attacker with network access via HTTP can compromise the component, resulting in a takeover of Oracle Report ...

EUVD-2026-79453

Vulnerability in the Oracle Report Manager product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Report Manager...

EUVD-2026-79450

Vulnerability in the Oracle Report Manager product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTPS to compromise Oracle Report Manager...

CVE-2026-83122

Oracle Report Manager , a component of Oracle E-Business Suite (specifically the Internal Operations component), is affected by an easily exploitable vulnerability in supported versions 12.2.3 through 12.2.15 . A low-privileged attacker with network access via HTTPS can exploit this flaw to achie...

CVE-2026-83120

Oracle Alert (component: Internal Operations ) in Oracle E-Business Suite versions 12.2.3 through 12.2.15 is vulnerable to a network-exploitable flaw via HTTP that a low-privileged attacker can leverage with low complexity. Successful exploitation results in full takeover of the Oracle Alert prod...