EUVD-2026-79638

Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics component: Platform Security. Supported versions that are affected are 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via...

CVE-2026-83280

CVE-2026-83280 is a Denial of Service vulnerability in Oracle Helidon (component: helidon-webserver-http2 ), part of Oracle Fusion Middleware. Affected versions are 4.0.0 through 4.5.4 . An unauthenticated attacker with network access can send crafted requests via HTTP/2 to cause a hang or freque...

EUVD-2026-79621

Vulnerability in the Oracle BI Publisher product of Oracle Analytics component: BI Platform Security. Supported versions that are affected are 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle ...

CVE-2026-83261

Oracle Product Lifecycle Analytics (component: Core), version 3.6.1 , is affected by an unauthenticated, network-accessible vulnerability exploitable via HTTP . The CVSS 3.1 score is 9.8 (Critical) with full impact on confidentiality, integrity, and availability, meaning a successful attack resul...

CVE-2026-83250

Oracle Commerce Guided Search / Oracle Commerce Experience Manager (component: Forge ) version 11.4.0 is affected by a difficult-to-exploit vulnerability that allows an unauthenticated attacker with network access via HTTP to compromise the product. Successful exploitation can result in unauthori...

CVE-2026-83247

CVE-2026-83247 affects the Forge component of Oracle Commerce Guided Search / Oracle Commerce Experience Manager , version 11.4.0 . The vulnerability is a local attack vector requiring no prior privileges but needing user interaction from a non-attacker. Successful exploitation results in a full ...

CVE-2026-83245

Oracle Commerce Guided Search / Experience Manager (component: Forge ) version 11.4.0 is affected by a network-based, unauthenticated vulnerability exploitable via HTTP . The attack complexity is rated high (difficult to exploit), but successful exploitation can result in full takeover of the pro...

CVE-2026-83246

CVE-2026-83246 affects the Forge component of Oracle Commerce Guided Search / Oracle Commerce Experience Manager , version 11.4.0 . The vulnerability allows an unauthenticated attacker with network access via HTTP to achieve full takeover of the product, resulting in high impact to confidentialit...

EUVD-2026-79598

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce component: Forge. The supported version that is affected is 11.4.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Orac...

CVE-2026-83242

Oracle Commerce Guided Search / Oracle Commerce Experience Manager (component: Experience Manager ), version 11.4.0 , is affected by an easily exploitable vulnerability that allows an unauthenticated attacker with network access via HTTP to compromise the product. Successful exploitation can resu...

CVE-2026-83231

Oracle Helidon (Fusion Middleware), specifically the helidon-dbclient-mongodb component, is affected in versions 3.0.0–3.2.20 and 4.0.0–4.5.4 . A difficult-to-exploit vulnerability allows an unauthenticated attacker with network access via HTTP to compromise the component. Successful exploitation...

CVE-2026-83218

A vulnerability in Oracle Siebel CRM affects the Siebel CRM Deployment product (component: Server Infrastructure ), versions 17.0 through 26.7 . An unauthenticated attacker with network access via HTTP can exploit this vulnerability, though it carries high attack complexity . Successful exploitat...

CVE-2026-83191

Oracle Siebel CRM — component Server Infrastructure — is affected in supported versions 17.0 through 26.7 . An unauthenticated attacker with network access via TCP can exploit a difficult-to-exploit (high complexity) vulnerability to achieve full takeover of the Siebel CRM Deployment component, i...

EUVD-2026-79544

Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM component: Open UI. Supported versions that are affected are 17.0-26.7. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel CRM End User. Successful attacks of th...

EUVD-2026-79489

Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite component: Core. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle Application...

EUVD-2026-79478

Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware component: Messaging Enabler. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via SOAP to compromise Service...

CVE-2026-83108

Oracle Forms (component: Forms Services, C/S, Charmode) in Oracle Fusion Middleware is affected in versions 12.2.1.19.0 and 14.1.2.0.0 . An unauthenticated attacker with network access via HTTP can exploit this vulnerability to achieve full takeover of Oracle Forms, impacting confidentiality, int...

CVE-2026-83105

CVE-2026-83105 affects Oracle Forms (component: Forms Services, C/S, Charmode ) in Oracle Fusion Middleware , versions 12.2.1.19.0 and 14.1.2.0.0 . A difficult-to-exploit vulnerability allows an unauthenticated attacker with network access via HTTP to compromise the product. Although rooted in Or...

CVE-2026-83102

CVE-2026-83102 affects Oracle Forms (component: Forms Services, C/S, Charmode) within Oracle Fusion Middleware , versions 12.2.1.19.0 and 14.1.2.0.0 . The vulnerability is exploitable by an unauthenticated attacker over network access via HTTP , though exploitation is rated as difficult (high att...

EUVD-2026-79429

Vulnerability in the Oracle Forms product of Oracle Fusion Middleware component: Forms Services, C/S, Charmode. Supported versions that are affected are 12.2.1.19.0 and 14.1.2.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...