EUVD-2026-79681

Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite component: Personalization. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Application...

CVE-2026-83329

CVE-2026-83329 affects the Personalization component of the Oracle Applications Framework in Oracle E-Business Suite, versions 12.2.9 through 12.2.15 . A low-privileged attacker with network access via HTTP can exploit this vulnerability with low complexity and no user interaction to achieve full...

EUVD-2026-79675

Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics component: Platform Security. Supported versions that are affected are 8.2.0.0.0 and 26.01.0.0.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to...

CVE-2026-83321

Oracle Business Intelligence Enterprise Edition (component: Analytics Actions ) is affected by a vulnerability in supported versions 8.2.0.0.0 and 26.01.0.0.0 . A low-privileged attacker with network access via HTTP can exploit this to gain unauthorized access to all accessible data (high confide...

CVE-2026-83316

Oracle Business Intelligence Enterprise Edition (component: Platform Security ) is affected in version 26.01.0.0.0 . The vulnerability is local with high attack complexity , exploitable by a low-privileged attacker with logon to the infrastructure. Successful exploitation results in a takeover of...

EUVD-2026-79662

Vulnerability in the Oracle BI Publisher product of Oracle Analytics component: BI Platform Security. Supported versions that are affected are 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle B...

CVE-2026-83298

Oracle BI Publisher (component: BI Platform Security ) within Oracle Analytics version 12.2.1.4.0 is affected by an easily exploitable vulnerability that allows a high-privileged attacker with network access via HTTP to achieve full takeover of the product. The CVSS 3.1 score is 7.2 (HIGH) , with...

EUVD-2026-79644

Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics component: Platform Security. Supported versions that are affected are 8.2.0.0.0 and 26.01.0.0.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to...

EUVD-2026-79631

Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply Chain component: CAX Client. The supported version that is affected is 3.6. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Agile PLM MCAD Connector executes...

CVE-2026-83260

CVE-2026-83260 affects Oracle Agile PLM (component: Event Java PX ), version 9.3.6 . An easily exploitable vulnerability allows a high-privileged attacker with network access via T3 or IIOP to achieve full takeover of the product (CVSS 3.1: 9.1 CRITICAL ). Notably, the scope is changed , meaning ...

CVE-2026-83200

CVE-2026-83200 affects the Oracle Process Manufacturing Intelligence product within Oracle E-Business Suite, specifically the Internal Operations component, in supported versions 12.2.3 through 12.2.15 . A low-privileged attacker with network access via Oracle Net can exploit this vulnerability w...

CVE-2026-83195

Oracle Siebel CRM (component: Server Infrastructure ) is vulnerable in supported versions 17.0 through 26.7 . An easily exploitable vulnerability allows a high-privileged attacker with network access via TCP to compromise Siebel CRM Deployment, resulting in full takeover with high impact to confi...

EUVD-2026-79548

Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM component: Server Infrastructure. Supported versions that are affected are 17.0-26.7. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Siebel CRM Deployment. While th...

CVE-2026-83176

CVE-2026-83176 affects Oracle E-Business Suite (Oracle Common Applications, component: CRM User Management Framework ), versions 12.2.3 through 12.2.15 . The vulnerability allows a high-privileged attacker with network access via HTTP to compromise the application, resulting in a full takeover wi...

EUVD-2026-79497

Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite component: Documents. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with access to the physical communication segment attached to the...

CVE-2026-83163

CVE-2026-83163 affects the Oracle Application Object Library component of Oracle E-Business Suite , specifically the Attachments / File Upload module, in supported versions 12.2.3 through 12.2.15 . The vulnerability is described as easily exploitable by a low-privileged attacker with network acce...

CVE-2026-83158

CVE-2026-83158 affects Oracle Applications Manager (component: Command Line – RapidClone ) within Oracle E-Business Suite , versions 12.2.3 through 12.2.15 . A low-privileged attacker with local logon to the infrastructure where Oracle Applications Manager executes can exploit this vulnerability ...

CVE-2026-83129

CVE-2026-83129 affects the Oracle Sales product of Oracle E-Business Suite (component: Internal Operations ), versions 12.2.3–12.2.15 . A low-privileged attacker with network access via HTTP can exploit this vulnerability with low complexity and no user interaction to gain unauthorized access to ...

CVE-2026-83126

This vulnerability affects Oracle Sales Online , a component of Oracle E-Business Suite (sub-component: Internal Operations ), in supported versions 12.2.3 through 12.2.15 . A low-privileged attacker with network access via HTTP can exploit this vulnerability, though successful attacks require hu...

CVE-2026-83118

Oracle E-Business Suite (component: AD Utilities / Applications DBA ) is vulnerable in supported versions 12.2.3 through 12.2.15 . A low-privileged attacker with local logon access can exploit this vulnerability with no user interaction, leading to a full takeover of Applications DBA with high im...