EUVD-2026-106459

Vulnerability in the Oracle Service Bus product of Oracle Fusion Middleware component: Core. The supported version that is affected is 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Service Bus. Successful attacks of...

EUVD-2026-106458

Vulnerability in the Oracle Service Bus product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Service Bus. Successfu...

EUVD-2026-106409

Vulnerability in the Oracle Service Bus product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Service Bus. Successf...

EUVD-2026-106405

Vulnerability in the Oracle Service Bus product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Service Bus. Successfu...

EUVD-2026-106400

Vulnerability in the Oracle Service Bus product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Service Bus. Successfu...

CVE-2026-87420

A vulnerability exists in the Core component of the Oracle Service Bus product within Oracle Fusion Middleware , specifically affecting version 14.1.2.0.0 . A low-privileged attacker with network access via HTTP can exploit this vulnerability to compromise the service, potentially resulting in a ...

CVE-2026-87419

A vulnerability exists in the Oracle Service Bus product within Oracle Fusion Middleware (component: Core ), specifically affecting versions 12.2.1.4.0 and 14.1.2.0.0 . A low-privileged attacker with network access via HTTP can exploit this vulnerability to compromise the Oracle Service Bus, pote...

CVE-2026-87369

A vulnerability exists in the Oracle Service Bus product of Oracle Fusion Middleware (component: Core ), affecting supported versions 12.2.1.4.0 and 14.1.2.0.0 . An unauthenticated attacker with network access via HTTP can easily exploit this flaw to cause a hang or a frequently repeatable crash,...

CVE-2026-87364

A vulnerability exists in the Core component of the Oracle Service Bus product within Oracle Fusion Middleware , specifically affecting versions 12.2.1.4.0 and 14.1.2.0.0 . A low-privileged attacker with network access via HTTP can exploit this vulnerability to compromise the service, potentially...

CVE-2026-87359

A vulnerability exists in the Oracle Service Bus product of Oracle Fusion Middleware (component: Core ), specifically affecting versions 12.2.1.4.0 and 14.1.2.0.0 . A low-privileged attacker with network access via HTTP can easily exploit this vulnerability to compromise the Oracle Service Bus, p...

CVE-2026-70786

Vulnerability in the Oracle Service Fulfillment Manager product of Oracle E-Business Suite component: Fulfillment Engine. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

CVE-2026-70783

Vulnerability in the Oracle Service Contracts product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Service...

EUVD-2026-61737

Vulnerability in the Oracle Service Fulfillment Manager product of Oracle E-Business Suite component: Fulfillment Engine. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

EUVD-2026-61734

Vulnerability in the Oracle Service Contracts product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Service...

EUVD-2026-61452

Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware component: Messaging Enabler. Supported versions that are affected are 14.1.2.0.0 and 12.2.1.4.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Service...

CVE-2026-70783: Improper Access Control

Vulnerability in the Oracle Service Contracts product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Service...

CVE-2026-70786: Improper Access Control

Vulnerability in the Oracle Service Fulfillment Manager product of Oracle E-Business Suite component: Fulfillment Engine. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

PT-2026-77778

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle Service Contracts versions 12.2.3 through 12.2.15 Description An issue exists in the Internal Operations component of the Oracle Service Contracts product. An unauthenticated attacker with network access via HTTP...

EUVD-2026-47336

Vulnerability in the Oracle Communications Service Catalog and Design product of Oracle Communications component: Solution Designer. Supported versions that are affected are 8.0.0.7.0-8.3.0.2.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...

EUVD-2026-47205

Vulnerability in the Oracle Service Fulfillment Manager product of Oracle E-Business Suite component: Fulfillment Engine. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...