CVE-2020-14882

CVE-2020-14882 Oracle WebLogic Server の認証バイパス Oracle Fusion Middleware の Oracle WebLogic Server 製品 コンポーネント: Console における脆弱性です。影響を受けるサポート対象バージョンは、10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0および 14.1.1.0.0. です。悪用が容易なこの脆弱性により、HTTP を介してネットワークアクセスを持つ未認証の攻撃者が Oracle WebLogic Server...

Log4j-_Vulnerability

Web は CVE-2021-44228 に対して脆弱です この Web アプリケーションは CVE-2021-44228 に対して脆弱です。これは Apache Log4j 2 の重大なセキュリティ脆弱性であり、Log4Shell として知られています。この脆弱性により、認証されていない攻撃者が、ログシステムによって記録される特定の入力を送信するだけでリモートから悪意のあるコードを実行でき、サーバーを完全に乗っ取る可能性があります。...

CVE-2021-2109

説明 Oracle Fusion Middleware の Oracle WebLogic Server 製品（コンポーネント: Console）における脆弱性。影響を受けるサポート対象バージョンは、10.3.6.0.0、12.1.3.0.0、12.2.1.3.0、12.2.1.4.0、14.1.1.0.0 です。容易に悪用可能な脆弱性により、ネットワークアクセス権を持つ高権限の攻撃者が HTTP を介して Oracle WebLogic Server を侵害する可能性があります。この脆弱性の攻撃が成功すると、Oracle WebLogic Server...

CVE-2026-87244

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion component: Security. The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Hyperion Financial...

CVE-2026-83169

Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite component: Java Server Issues. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

CVE-2026-83164

Vulnerability in the Oracle Customer Interaction History product of Oracle E-Business Suite component: Outcome-Result. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Custome...

CVE-2026-83106

Vulnerability in the Oracle Forms product of Oracle Fusion Middleware component: Forms Services, C/S, Charmode. Supported versions that are affected are 12.2.1.19.0 and 14.1.2.0.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

CVE-2026-83056

Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware component: OID LDAP Server. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via LDAP to compromise Oracle...

CVE-2026-83062

Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware component: OID LDAP Server. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via LDAP to compromise Oracle...

CVE-2026-73951

Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware component: Portlet Services. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

CVE-2026-70756

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3, IIOP to...

EUVD-2026-79882

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion component: Security. The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hyperion Financial...

EUVD-2026-79856

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion component: Security. The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hyperion Financial...

EUVD-2026-79768

Vulnerability in the Oracle Contracts product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.14-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Contracts. Successf...

EUVD-2026-79761

Vulnerability in the Oracle Mobile Application Server product of Oracle E-Business Suite component: MWA Terminal Server. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via TCP to compromise Oracle Mobil...

CVE-2026-83353

Oracle WebCenter Content (component: Content Server ) in Oracle Fusion Middleware has a vulnerability affecting supported versions 12.2.1.4.0 and 14.1.2.0.0 . A low-privileged attacker with local access to the infrastructure where the product executes can exploit it with low complexity and no use...

CVE-2026-83339

Oracle WebCenter Enterprise Capture (part of Oracle Fusion Middleware), specifically the Client Bundle component, is affected by a critical vulnerability in supported versions 12.2.1.4.0 and 14.1.2.0.0 . An unauthenticated attacker with network access via HTTP can exploit this flaw to achieve tak...

CVE-2026-83268

Oracle BI Publisher (component: BI Platform Security ) in Oracle Analytics is affected in supported versions 8.2.0.0.0 , 12.2.1.4.0 , and 26.01.0.0.0 . An easily exploitable vulnerability allows a high-privileged attacker with network access via HTTP to compromise the product. Due to a scope chan...

CVE-2026-83064

Oracle WebCenter Portal (part of Oracle Fusion Middleware ), specifically the Runtime Tools component, is affected by a network-accessible, low-complexity vulnerability in supported versions 12.2.1.4.0 and 14.1.2.0.0 . A high-privileged attacker with HTTP access can achieve takeover of the produc...

CVE-2026-83061

Oracle Internet Directory (component: OID LDAP Server ), part of Oracle Fusion Middleware, is affected by an easily exploitable vulnerability in supported versions 12.2.1.4.0 and 14.1.2.1.0 . An unauthenticated attacker with network access via LDAP can exploit this vulnerability with low complexi...