CVE-2026-83352

Oracle XML Gateway (component: Install ) within Oracle E-Business Suite versions 12.2.3–12.2.15 is affected by a vulnerability exploitable over HTTP by a low-privileged network attacker. Successful exploitation yields unauthorized access to critical data (high confidentiality impact) and a partia...

CVE-2026-83345

CVE-2026-83345 affects the Oracle XML Gateway component of Oracle E-Business Suite (specifically the Install component), in supported versions 12.2.3 through 12.2.15 . A low-privileged attacker with network access via HTTP can exploit this easily to gain unauthorized access to critical data (comp...

EUVD-2026-79698

Vulnerability in the Oracle XML Gateway product of Oracle E-Business Suite component: Install. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle XML Gateway. Successful attacks...

EUVD-2026-79659

Vulnerability in the Oracle BI Publisher product of Oracle Analytics component: BI Platform Security. Supported versions that are affected are 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle B...

CVE-2026-83307

Oracle BI Publisher (component: BI Platform Security ) within Oracle Analytics is affected by a network-based vulnerability exploitable by a low-privileged attacker via HTTP with no user interaction. Successful exploitation can result in unauthorized creation, deletion, or modification of critica...

CVE-2026-83305

Oracle BI Publisher (component: BI Platform Security ) in Oracle Analytics is vulnerable to an easily exploitable flaw allowing an unauthenticated attacker with network access via HTTP to compromise the product. Affected supported versions are 8.2.0.0.0 , 12.2.1.4.0 , and 26.01.0.0.0 . Successful...

EUVD-2026-79656

Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics component: Analytics Web General. Supported versions that are affected are 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access...

EUVD-2026-79657

Vulnerability in the Oracle BI Publisher product of Oracle Analytics component: BI Platform Security. Supported versions that are affected are 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle ...

CVE-2026-83300

Oracle E-Business Suite – XML Gateway (Install component) in supported versions 12.2.3 through 12.2.15 is vulnerable to an easily exploitable attack over network access via HTTP . A low-privileged attacker can compromise the component, resulting in unauthorized access to critical data (high confi...

CVE-2026-83302

Oracle BI Publisher (component: BI Publisher Security ), part of Oracle Analytics, version 12.2.1.4.0 is affected by an easily exploitable vulnerability. A low-privileged attacker with network access via HTTP can exploit it to gain unauthorized access to critical data (high confidentiality impact...

EUVD-2026-79654

Vulnerability in the Oracle BI Publisher product of Oracle Analytics component: BI Publisher Security. The supported version that is affected is 12.2.1.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle BI Publisher. While the...

EUVD-2026-79652

Vulnerability in the Oracle XML Gateway product of Oracle E-Business Suite component: Install. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle XML Gateway. Successful attacks...

CVE-2026-83285

This vulnerability affects the BI Search component of Oracle Business Intelligence Enterprise Edition version 12.2.1.4.0 . It is an easily exploitable flaw that allows a low-privileged attacker with network access via HTTP to compromise the product. Successful exploitation can result in unauthori...

EUVD-2026-79637

Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics component: BI Search. The supported version that is affected is 12.2.1.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Business...

CVE-2026-83266

CVE-2026-83266 affects the Resource Catalog Services component of Oracle JDeveloper (Oracle Fusion Middleware), versions 12.2.1.4.0 and 14.1.2.0.0 . An unauthenticated attacker with network access via HTTP can exploit this vulnerability to gain unauthorized access to all Oracle JDeveloper accessi...

CVE-2026-83259

Oracle Commerce Guided Search / Oracle Commerce Experience Manager (component: Forge ), version 11.4.0 , is affected by an easily exploitable vulnerability requiring only low-privileged attacker access over HTTP . Successful exploitation can lead to unauthorized access to all accessible data (hig...

CVE-2026-83252

Oracle Commerce Guided Search / Oracle Commerce Experience Manager (component: Forge ) version 11.4.0 is affected by a network-based vulnerability exploitable via HTTP by an unauthenticated attacker. Exploitation is rated as difficult (high complexity). Successful exploitation can lead to high co...

EUVD-2026-79604

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce component: Forge. The supported version that is affected is 11.4.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Orac...

CVE-2026-83250

Oracle Commerce Guided Search / Oracle Commerce Experience Manager (component: Forge ) version 11.4.0 is affected by a difficult-to-exploit vulnerability that allows an unauthenticated attacker with network access via HTTP to compromise the product. Successful exploitation can result in unauthori...

EUVD-2026-79602

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce component: Forge. The supported version that is affected is 11.4.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Orac...