CVE-2026-83317

CVE-2026-83317 affects the Installation component of Oracle Business Intelligence Enterprise Edition (Oracle Analytics). Supported versions 8.2.0.0.0, 12.2.1.4.0, and 26.01.0.0.0 are vulnerable to an easily exploitable local attack by a low-privileged user with logon to the host. Successful explo...

CVE-2026-83318

Oracle BI Publisher (part of Oracle Analytics , Administration component) is affected by a network-based vulnerability in supported versions 8.2.0.0.0 , 12.2.1.4.0 , and 26.01.0.0.0 . A low-privileged attacker with HTTP network access can exploit this, though exploitation is rated as difficult (h...

EUVD-2026-79669

Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics component: Installation. Supported versions that are affected are 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructur...

CVE-2026-83306

Oracle JDeveloper (Oracle Fusion Middleware), specifically the Resource Catalog Services component, is affected in supported versions 12.2.1.4.0 and 14.1.2.0.0 . A low-privileged attacker with network access via HTTP can exploit this vulnerability to achieve full takeover of the Oracle JDeveloper...

EUVD-2026-79648

Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics component: BI Search. Supported versions that are affected are 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to...

CVE-2026-83293

CVE-2026-83293 affects Oracle Business Intelligence Enterprise Edition (component: FNDN ), version 12.2.1.4.0 , within the Oracle Analytics suite. The vulnerability is easily exploitable by a low-privileged attacker with local logon to the infrastructure where the product executes, requiring no u...

EUVD-2026-79645

Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics component: FNDN. The supported version that is affected is 12.2.1.4.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Business Intelligen...

EUVD-2026-79642

Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics component: Platform Security. Supported versions that are affected are 8.2.0.0.0 and 26.01.0.0.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where...

CVE-2026-83291

A vulnerability in the Platform Security component of Oracle Business Intelligence Enterprise Edition (part of Oracle Analytics) affects versions 8.2.0.0.0 and 26.01.0.0.0 . A low-privileged attacker with local logon access can exploit this with low complexity and no user interaction to achieve f...

CVE-2026-83288

A vulnerability in the BI Search component of Oracle Business Intelligence Enterprise Edition (Oracle Analytics) affects versions 8.2.0.0.0 , 12.2.1.4.0 , and 26.01.0.0.0 . A low-privileged attacker with local logon access to the infrastructure can exploit this with low complexity and no user int...

EUVD-2026-79634

Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics component: Platform Security. The supported version that is affected is 12.2.1.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

EUVD-2026-79625

Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics component: Platform Security. The supported version that is affected is 26.01.0.0.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle...

EUVD-2026-79609

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce component: Forge. The supported version that is affected is 11.4.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracl...

EUVD-2026-79607

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce component: Forge. The supported version that is affected is 11.4.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via TCP to compromise Oracl...

CVE-2026-83239

Oracle Commerce Guided Search / Oracle Commerce Experience Manager (component: Endeca Application Controller ) version 11.4.0 is affected by a local vulnerability that can lead to full takeover of the product. The attack vector is local with high complexity and requires a low-privileged account w...

CVE-2026-83223

Oracle Siebel CRM (component: Siebel Remote ) in versions 17.0 through 26.7 contains a vulnerability that allows a low-privileged attacker with network access via HTTP to compromise the Siebel CRM Deployment component. The attack has high complexity , meaning exploitation is not straightforward, ...

EUVD-2026-79568

Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM component: Server Infrastructure. Supported versions that are affected are 17.0-26.7. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Siebel CRM Deployment executes to...

CVE-2026-83209

A vulnerability in Oracle Siebel CRM Development (component: Workflow ) affects supported versions 17.0 through 26.7 . An easily exploitable flaw allows a low-privileged attacker with network access via HTTP to achieve takeover of the product, with high impact to confidentiality, integrity, and a...

EUVD-2026-79558

Vulnerability in the Oracle Banking Corporate Lending Process Management product of Oracle Financial Services Applications component: Base. Supported versions that are affected are 14.5.0.0.0-14.9.0.0.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTT...

EUVD-2026-79556

Vulnerability in the Oracle Sourcing product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Sourcing. Successful...