CVE-2026-73962

Oracle Access Manager (Oracle Fusion Middleware, component: Authentication Engine ) is affected in versions 12.2.1.4.0 and 14.1.2.1.0 . A low-privileged attacker with network access via HTTPS can exploit this vulnerability to compromise the authentication engine. Due to scope change , successful ...

CVE-2026-73961

CVE-2026-73961 is a critical vulnerability (CVSS 3.1 score 9.8 ) in the ADF Faces component of Oracle JDeveloper (Oracle Fusion Middleware), affecting supported versions 12.2.1.4.0 and 14.1.2.0.0 . An unauthenticated attacker with network access via HTTP can exploit this vulnerability with low co...

EUVD-2026-79316

Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware component: Authentication Engine. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTPS to compromise Oracle...

EUVD-2026-79317

Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware component: Portlet Services. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

CVE-2026-73963

CVE-2026-73963 is a critical (CVSS 9.8) vulnerability in Oracle WebCenter Portal (Oracle Fusion Middleware), specifically the Portlet Services component, affecting versions 12.2.1.4.0 and 14.1.2.0.0 . An unauthenticated attacker with network access via HTTP can exploit this vulnerability to achie...

EUVD-2026-79315

Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware component: ADF Faces. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle JDeveloper...

EUVD-2026-79314

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft component: Ren Server. Supported versions that are affected are 8.61-8.63. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise...

EUVD-2026-79312

Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware component: Authentication Engine. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

CVE-2026-73960

CVE-2026-73960 affects the Ren Server component of Oracle PeopleSoft Enterprise PeopleTools, versions 8.61–8.63 . An unauthenticated attacker with network access via HTTP can trigger a complete denial-of-service condition (hang or frequently repeatable crash) of the PeopleTools service. The CVSS ...

EUVD-2026-79313

Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware component: Composer. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle WebCenter...

CVE-2026-73959

Oracle WebCenter Portal (component: Composer ) within Oracle Fusion Middleware is affected by an easily exploitable vulnerability in supported versions 12.2.1.4.0 and 14.1.2.0.0 . A low-privileged attacker with network access via HTTP can exploit the flaw to achieve full takeover of the applicati...

CVE-2026-73958

Oracle Access Manager (Oracle Fusion Middleware), specifically the Authentication Engine component, is affected by a vulnerability in supported versions 12.2.1.4.0 and 14.1.2.0.0 . An unauthenticated attacker with network access via HTTP can exploit this vulnerability, though it is rated as diffi...

EUVD-2026-79310

Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware component: Composer. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter...

CVE-2026-73957

CVE-2026-73957 affects Oracle WebCenter Portal (component: Portlet Services ) in Oracle Fusion Middleware , versions 12.2.1.4.0 and 14.1.2.0.0 . An unauthenticated attacker with network access via HTTP can compromise the product, but successful exploitation requires user interaction from someone ...

CVE-2026-73955

Oracle PeopleSoft Enterprise PeopleTools (component: Charting ) is affected in supported versions 8.61–8.63 . A low-privileged attacker with network access via HTTP can exploit this vulnerability, though successful attacks require human interaction from a user other than the attacker. Impact incl...

EUVD-2026-79309

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft component: Charting. Supported versions that are affected are 8.61-8.63. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools...

CVE-2026-73956

CVE-2026-73956 affects the Composer component of Oracle WebCenter Portal (Oracle Fusion Middleware), impacting versions 12.2.1.4.0 and 14.1.2.0.0 . An unauthenticated attacker with network access via HTTP can exploit this vulnerability with low complexity to achieve full takeover of Oracle WebCen...

EUVD-2026-79311

Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware component: Portlet Services. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

CVE-2026-73954

CVE-2026-73954 is a vulnerability in the Business Interlink component of Oracle PeopleSoft Enterprise PeopleTools , affecting supported versions 8.61–8.63 . An unauthenticated attacker with network access via HTTP can exploit this flaw, though the attack complexity is rated high (difficult to exp...

EUVD-2026-79308

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft component: Business Interlink. Supported versions that are affected are 8.61-8.63. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterpris...