CVE-2026-83103

Oracle Forms (component: Forms Services, C/S, Charmode) within Oracle Fusion Middleware is affected by an easily exploitable vulnerability in versions 12.2.1.19.0 and 14.1.2.0.0 . A high-privileged attacker with network access via HTTP can compromise Oracle Forms, with a scope change meaning atta...

EUVD-2026-79418

Vulnerability in the Oracle Spares Management product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Spares...

EUVD-2026-79399

Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics component: Machine Learning. Supported versions that are affected are 8.2.0.0.0 and 26.01.0.0.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where...

CVE-2026-83039

Oracle WebCenter Portal (component: Composer ) is vulnerable to a critical flaw in supported versions 12.2.1.4.0 and 14.1.2.0.0 . A low-privileged attacker with network access via HTTP and no user interaction can exploit this vulnerability to achieve takeover of the product, with a scope change m...

CVE-2026-83036

This critical vulnerability (CVSS 9.8) affects Oracle WebCenter Sites (component: WebCenter Sites) in Oracle Fusion Middleware , versions 12.2.1.4.0 and 14.1.2.0.0 . An unauthenticated attacker with network access via HTTP can exploit it with low complexity to achieve full takeover of the product...

CVE-2026-83035

Oracle WebCenter Sites (component of Oracle Fusion Middleware) versions 12.2.1.4.0 and 14.1.2.0.0 are affected by an easily exploitable vulnerability that allows an unauthenticated attacker with network access via HTTP to compromise the product. Successful exploitation results in full takeover of...

CVE-2026-83032

A low-privileged attacker with network access via HTTP can compromise Oracle WebCenter Sites (component of Oracle Fusion Middleware) in supported versions 12.2.1.4.0 and 14.1.2.0.0 . Successful exploitation results in takeover of the product, with HIGH impact to confidentiality, integrity, and av...

EUVD-2026-79361

Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware component: WebCenter Sites. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle WebCent...

CVE-2026-83028

Oracle Identity Manager Connector (Core component) in Oracle Fusion Middleware versions 12.2.1.4.0 and 14.1.2.1.0 is affected by a vulnerability allowing an unauthenticated attacker with access to the physical communication segment attached to the hardware to take over the product. The attack vec...

EUVD-2026-79356

Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Difficult to exploit vulnerability allows unauthenticated attacker with access to the physical communication segment...

EUVD-2026-79346

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft component: SQR. Supported versions that are affected are 8.61-8.63. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where PeopleSoft Enterprise PeopleTools executes...

CVE-2026-83018

CVE-2026-83018 affects Oracle PeopleSoft Enterprise PeopleTools in the SQR component, with supported versions 8.61 through 8.63 vulnerable. A low-privileged attacker with local logon to the infrastructure where PeopleTools executes can exploit this vulnerability with low complexity and no user in...

EUVD-2026-79343

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft component: Cube Manager. Supported versions that are affected are 8.61-8.63. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where PeopleSoft Enterprise PeopleToo...

EUVD-2026-79344

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft component: SQR. Supported versions that are affected are 8.61-8.63. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where PeopleSoft Enterprise PeopleTools...

CVE-2026-83016

CVE-2026-83016 affects Oracle PeopleSoft Enterprise PeopleTools (component: SQR ), versions 8.61–8.63 . A local, high-complexity vulnerability allows a high-privileged attacker with logon access to the infrastructure to compromise the product, requiring user interaction from a non-attacker. The c...

CVE-2026-83009

Oracle WebCenter Enterprise Capture (part of Oracle Fusion Middleware) contains a vulnerability in the Client Bundle component affecting versions 12.2.1.4.0 and 14.1.2.0.0 . A low-privileged attacker with network access via HTTP can exploit this vulnerability without user interaction to achieve a...

CVE-2026-83005

Oracle WebCenter Enterprise Capture (component: Client Bundle ), part of Oracle Fusion Middleware, is vulnerable in supported versions 12.2.1.4.0 and 14.1.2.0.0 . The flaw allows a low-privileged attacker with network access via HTTP to compromise the product and achieve takeover , with high impa...

EUVD-2026-79323

Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware component: Centralized Thirdparty Jars. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via SOAP to...

EUVD-2026-79320

Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM component: Installation. Supported versions that are affected are 17.0-26.7. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Siebel CRM Deployment executes to compromise...

EUVD-2026-79312

Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware component: Authentication Engine. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...