EUVD-2026-79807

Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite component: Create Item Instance. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Installed Base...

CVE-2026-87147

Oracle Hyperion Data Relationship Management (component: Access and security ), version 11.2.26.0.000 , is affected by a network-accessible vulnerability exploitable via HTTP. A high-privileged attacker with high attack complexity can achieve unauthorized creation, deletion, or modification of da...

CVE-2026-87144

CVE-2026-87144 affects Oracle Hyperion Data Relationship Management (version 11.2.26.0.000 ), specifically the Access and security component. A low-privileged attacker with network access via HTTP can exploit this vulnerability, though successful attacks require human interaction from a person ot...

EUVD-2026-79794

Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion component: Access and security. The supported version that is affected is 11.2.26.0.000. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

CVE-2026-83488

Oracle Fusion Middleware – Helidon (component: helidon-microprofile-security ) versions 4.0.0 through 4.5.4 are affected by an easily exploitable vulnerability. A low-privileged attacker with network access via HTTP can achieve unauthorized update, insert, delete, and read access to a subset of d...

EUVD-2026-79769

Vulnerability in the Oracle Contracts product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.14-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Contracts. Successf...

CVE-2026-83485

This vulnerability affects the Item Catalog component of Oracle Product Hub within Oracle E-Business Suite, supporting versions 12.2.3 through 12.2.15 . A low-privileged attacker with network access via HTTP can exploit it with low complexity and no user interaction. Successful exploitation resul...

EUVD-2026-79770

Vulnerability in the Oracle Advanced Benefits product of Oracle E-Business Suite component: Self-serv What-if Analysis. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle...

EUVD-2026-79752

Vulnerability in the Oracle Document Management and Collaboration product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise...

CVE-2026-83450

Oracle E-Business Suite – Bills of Material (component: Setup Workbench ) is affected by a vulnerability in supported versions 12.2.3 through 12.2.15 . The flaw allows a high-privileged attacker with network access via HTTP to compromise the product. The vulnerability carries a scope change , mea...

EUVD-2026-79738

Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Product Hub...

EUVD-2026-79739

Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Product Hub...

CVE-2026-83431

Oracle Product Workbench (component: WebUI ) in Oracle E-Business Suite versions 12.2.3 through 12.2.15 is affected by a medium-severity vulnerability (CVSS 3.1: 5.4 ). A low-privileged attacker with network access via HTTP can exploit the flaw, but user interaction from a third party is required...

CVE-2026-83433

Oracle Depot Repair (component: Depot Repair Diagnostics ) within Oracle E-Business Suite is affected by an easily exploitable vulnerability in supported versions 12.2.3 through 12.2.15 . A high-privileged attacker with network access via HTTP can exploit this with low complexity and no user inte...

CVE-2026-83413

CVE-2026-83413 is a low-severity vulnerability in Oracle Coherence (Oracle Fusion Middleware, component: Core), affecting versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. The flaw allows a high-privileged, local attacker with high complexity to perform unauthorized update, insert, or ...

CVE-2026-83344

Oracle Identity Manager Connector (Oracle Fusion Middleware, component: Database Application Table ) in versions 12.2.1.4.0 and 14.1.2.1.0 is vulnerable to a network-based attack via HTTP. A high-privileged attacker with low attack complexity can exploit this flaw to achieve full takeover of the ...

CVE-2026-83338

Oracle Applications Manager (component: Oracle Diagnostics Interfaces ) in Oracle E-Business Suite versions 12.2.3 through 12.2.15 is affected by an easily exploitable vulnerability. A low-privileged attacker with network access via HTTP can achieve takeover of Oracle Applications Manager, impact...

EUVD-2026-79685

Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite component: Personalization. Supported versions that are affected are 12.2.9-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Applications...

EUVD-2026-79681

Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite component: Personalization. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Application...

CVE-2026-83329

CVE-2026-83329 affects the Personalization component of the Oracle Applications Framework in Oracle E-Business Suite, versions 12.2.9 through 12.2.15 . A low-privileged attacker with network access via HTTP can exploit this vulnerability with low complexity and no user interaction to achieve full...