EUVD-2026-79372

Vulnerability in the Oracle XML Gateway product of Oracle E-Business Suite component: Install. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle XML Gateway. Successful attacks...

CVE-2026-83044

CVE-2026-83044 affects the Oracle XML Gateway component (Install) of Oracle E-Business Suite , versions 12.2.3 through 12.2.15 . A low-privileged attacker with network access via HTTP can exploit this vulnerability to gain unauthorized access to critical data accessible through Oracle XML Gateway...

CVE-2026-83046

CVE-2026-83046 affects Oracle WebCenter Portal (component: Runtime Tools ) in Oracle Fusion Middleware, versions 12.2.1.4.0 and 14.1.2.0.0 . A low-privileged attacker with network access via HTTP can exploit this vulnerability with low complexity and no user interaction. Successful exploitation r...

CVE-2026-71163

Oracle Access Manager (component: Authentication Engine ) in Oracle Fusion Middleware versions 12.2.1.4.0 and 14.1.2.1.0 is affected by a Critical vulnerability (CVSS 3.1 score 9.9 ). A low-privileged attacker with network access via HTTP can exploit it to gain unauthorized creation, deletion, mo...

PT-2026-92782

Name of the Vulnerable Software and Affected Versions Oracle Commerce Guided Search / Oracle Commerce Experience Manager version 11.4.0 Description A flaw in the Forge component allows a low privileged attacker with network access via HTTP to compromise the system. Successful exploitation can lea...

PT-2026-92486

Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware component: Authentication Engine. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

PT-2026-92903

Name of the Vulnerable Software and Affected Versions Oracle Depot Repair versions 12.2.3 through 12.2.15 Description A flaw in the Recall Management component allows a low privileged attacker with network access via HTTP to compromise the system. This can lead to unauthorized access to critical...

PT-2026-93032

Name of the Vulnerable Software and Affected Versions Oracle Hyperion Financial Management version 11.2.26.0.000 Description A security flaw in the Security component allows a low privileged attacker with network access via HTTP to compromise the system. Successful exploitation can lead to...

PT-2026-92773

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce component: Forge. The supported version that is affected is 11.4.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Orac...

PT-2026-92824

Name of the Vulnerable Software and Affected Versions Oracle BI Publisher version 12.2.1.4.0 Description A security flaw in the BI Publisher Security component allows a low privileged attacker with network access via HTTP to compromise the system. This issue can lead to unauthorized access to...

PT-2026-92928

Name of the Vulnerable Software and Affected Versions Oracle Mobile Application Server versions 12.2.3 through 12.2.15 Description An issue exists in the MWA Terminal Server component of the Oracle Mobile Application Server within Oracle E-Business Suite. An unauthenticated attacker with network...

PT-2026-92696

Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite component: Documents. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle One-to-One...

PT-2026-92935

Vulnerability in the Helidon product of Oracle Fusion Middleware component: WebSocket. Supported versions that are affected are 4.0.0-4.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful attacks of this vulnerabilit...

PT-2026-92879

Name of the Vulnerable Software and Affected Versions Oracle Fusion Middleware Oracle Access Manager Access SDK version 12.2.1.4.0 Oracle Fusion Middleware Oracle Access Manager Access SDK version 14.1.2.1.0 Description A flaw in the Access SDK component allows a low privileged attacker with...

PT-2026-92647

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle Report Manager versions 12.2.3 through 12.2.15 Description A flaw in the Internal Operations component of the Oracle Report Manager allows a low privileged attacker with network access via HTTPS to compromise the...

CVE-2026-87266: Improper Access Control

Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain component: Application Server. The supported version that is affected is 9.3.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Agile PLM. Successful attacks of...

PT-2026-93086

Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain component: Application Server. The supported version that is affected is 9.3.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Agile PLM. Successful attacks of...

PT-2026-92694

Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite component: Documents. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle One-to-One...

CVE-2026-83203: Improper Access Control

Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM component: Open UI. Supported versions that are affected are 17.0-26.7. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel CRM End User. Successful attacks of this...

PT-2026-92760

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce component: Forge. The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...