CVE-2026-83282

Oracle Business Intelligence Enterprise Edition (Oracle Analytics), component Platform Security , version 12.2.1.4.0 , is affected by an easily exploitable vulnerability. A low-privileged attacker with network access via HTTP can compromise the product, potentially resulting in full takeover with...

EUVD-2026-79629

Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply Chain component: CAX Client. The supported version that is affected is 3.6. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Agile PLM MCAD Connector executes...

CVE-2026-83277

Oracle Agile PLM MCAD Connector (component: CAX Client ), version 3.6 , contains an easily exploitable local vulnerability. A low-privileged attacker with logon access to the infrastructure can compromise the connector, resulting in unauthorized creation, deletion, or modification of critical dat...

CVE-2026-83272

A high-severity (CVSS 3.1: 8.5 ) vulnerability exists in the Oracle Text component of Oracle Database Server , affecting versions 19.3–19.32 , 21.3–21.23 , and 23.4.0–23.26.3 . A low-privileged attacker holding the Create Index privilege can exploit this over Oracle Net (high attack complexity) t...

EUVD-2026-79624

Vulnerability in the Oracle Text component of Oracle Database Server. Supported versions that are affected are 19.3-19.32, 21.3-21.23 and 23.4.0-23.26.3. Difficult to exploit vulnerability allows low privileged attacker having Create Index privilege with network access via Oracle Net to compromis...

EUVD-2026-79620

Vulnerability in the Oracle BI Publisher product of Oracle Analytics component: BI Platform Security. Supported versions that are affected are 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle ...

EUVD-2026-79619

Vulnerability in the Oracle BI Publisher product of Oracle Analytics component: BI Publisher Security. Supported versions that are affected are 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle ...

CVE-2026-83267

Oracle BI Publisher (component: BI Publisher Security ) in Oracle Analytics is affected in versions 8.2.0.0.0 , 12.2.1.4.0 , and 26.01.0.0.0 . A low-privileged attacker with network access via HTTP can exploit this vulnerability with low complexity. Due to a scope change , the attack may signific...

CVE-2026-83268

Oracle BI Publisher (component: BI Platform Security ) in Oracle Analytics is affected in supported versions 8.2.0.0.0 , 12.2.1.4.0 , and 26.01.0.0.0 . An easily exploitable vulnerability allows a high-privileged attacker with network access via HTTP to compromise the product. Due to a scope chan...

CVE-2026-83264

Oracle Product Lifecycle Analytics (version 3.6.1 ), component Installation Issues , is affected by an easily exploitable vulnerability that allows a low-privileged attacker with local logon to the infrastructure to compromise the product. The scope change means attacks may significantly impact a...

EUVD-2026-79612

Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain component: Event Java PX. The supported version that is affected is 9.3.6. Easily exploitable vulnerability allows high privileged attacker with network access via T3, IIOP to compromise Oracle Agile PLM. While the vulnerability...

CVE-2026-83260

CVE-2026-83260 affects Oracle Agile PLM (component: Event Java PX ), version 9.3.6 . An easily exploitable vulnerability allows a high-privileged attacker with network access via T3 or IIOP to achieve full takeover of the product (CVSS 3.1: 9.1 CRITICAL ). Notably, the scope is changed , meaning ...

EUVD-2026-79601

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce component: Forge. The supported version that is affected is 11.4.0. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle...

CVE-2026-83249

Oracle Commerce Guided Search / Oracle Commerce Experience Manager (component: Forge ), version 11.4.0 , is affected by a local, high-complexity vulnerability. A low-privileged attacker with logon to the host infrastructure can exploit this flaw to achieve takeover of the product, with a scope ch...

EUVD-2026-79595

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce component: Experience Manager. The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...

CVE-2026-83243

Oracle Commerce Guided Search / Oracle Commerce Experience Manager (component: Experience Manager ) version 11.4.0 is affected by an easily exploitable network vulnerability. A low-privileged attacker with HTTP network access can exploit it without user interaction, resulting in unauthorized acce...

EUVD-2026-79588

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce component: Experience Manager. The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...

CVE-2026-83236

A high-severity (CVSS 3.1 score 8.2 ) vulnerability exists in Oracle Commerce Guided Search / Experience Manager version 11.4.0 (component: Experience Manager). An unauthenticated attacker with network access via HTTP can exploit this with low complexity, though human interaction from a non-attac...

EUVD-2026-79585

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce component: Experience Manager. The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...

CVE-2026-83233

A vulnerability in Oracle Commerce Guided Search / Oracle Commerce Experience Manager (component: Experience Manager , version 11.4.0 ) allows a low-privileged attacker with network access via HTTP to compromise the product. Successful exploitation can result in unauthorized access to critical da...