EUVD-2026-79772

Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite component: Item Catalog. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Product Hub. While the...

EUVD-2026-79769

Vulnerability in the Oracle Contracts product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.14-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Contracts. Successf...

CVE-2026-83482

Oracle Contracts (component: Internal Operations ) in Oracle E-Business Suite versions 12.2.14 through 12.2.15 is affected by an easily exploitable vulnerability. A high-privileged attacker with network access via HTTP can compromise the product, resulting in takeover of Oracle Contracts with hig...

EUVD-2026-79771

Vulnerability in the Oracle US Federal Human Resources product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle US...

CVE-2026-83484

Oracle US Federal Human Resources (component: Internal Operations ) in Oracle E-Business Suite versions 12.2.3 through 12.2.15 is affected by a network-exploitable vulnerability requiring only low-privilege access via HTTP. Successful exploitation allows an attacker to perform unauthorized creati...

CVE-2026-83483

Oracle Advanced Benefits (part of Oracle E-Business Suite) contains a vulnerability in the Self-serv What-if Analysis component affecting versions 12.2.3 through 12.2.15 . A high-privileged attacker with network access via HTTP can exploit this vulnerability, which is rated as difficult to exploi...

EUVD-2026-79767

Vulnerability in the Helidon product of Oracle Fusion Middleware component: WebSocket. Supported versions that are affected are 4.0.0-4.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful attacks of this vulnerabilit...

EUVD-2026-79768

Vulnerability in the Oracle Contracts product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.14-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Contracts. Successf...

EUVD-2026-79766

Vulnerability in the Oracle Contracts product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.14-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Contracts. Successfu...

CVE-2026-83480

CVE-2026-83480 affects the WebSocket component of Oracle Helidon (part of Oracle Fusion Middleware), versions 4.0.0 through 4.5.4 . An unauthenticated attacker with network access via HTTP can trigger a partial denial of service against the affected instance. The CVSS 3.1 base score is 5.3 (MEDIU...

CVE-2026-83479

Oracle Contracts (component: Internal Operations) in Oracle E-Business Suite versions 12.2.14–12.2.15 contains a vulnerability that allows a low-privileged attacker with network access via HTTP to achieve a takeover of the product, with high impact on confidentiality, integrity, and availability....

CVE-2026-83481

CVE-2026-83481 affects the Oracle Contracts product within Oracle E-Business Suite, specifically the Internal Operations component. Supported versions 12.2.14 through 12.2.15 are impacted. The vulnerability is easily exploitable by a high-privileged attacker with network access via HTTP and low a...

EUVD-2026-79763

Vulnerability in the Oracle Mobile Application Server product of Oracle E-Business Suite component: MWA Terminal Server. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via TCP to compromise Oracle...

CVE-2026-83465

CVE-2026-83465 affects the MWA Terminal Server component of Oracle Mobile Application Server within Oracle E-Business Suite, impacting supported versions 12.2.3 through 12.2.15 . An unauthenticated attacker with network access via HTTP can exploit this vulnerability with low complexity, though it...

EUVD-2026-79764

Vulnerability in the Oracle Mobile Application Server product of Oracle E-Business Suite component: MWA Terminal Server. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Mobi...

EUVD-2026-79765

Vulnerability in the Oracle Work in Process product of Oracle E-Business Suite component: Workbenches. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with access to the physical communication segment attached to the hardwa...

CVE-2026-83477

Oracle E-Business Suite (component: Work in Process – Workbenches ) is affected by an easily exploitable vulnerability in supported versions 12.2.3 through 12.2.15 . An unauthenticated attacker with access to the adjacent network segment can compromise the product with low complexity and no user ...

CVE-2026-83464

Oracle Mobile Application Server (component: MWA Terminal Server ), part of Oracle E-Business Suite, is affected in versions 12.2.3 through 12.2.15 . A difficult-to-exploit vulnerability allows an unauthenticated attacker with network access via TCP to achieve full takeover of the server, with hi...

CVE-2026-83461

CVE-2026-83461 affects the MWA Terminal Server component of Oracle Mobile Application Server within Oracle E-Business Suite, versions 12.2.3 through 12.2.15 . The vulnerability is easily exploitable by an unauthenticated attacker with network access via TCP , requiring no user interaction. Succes...

CVE-2026-83462

Oracle Mobile Application Server (component: MWA Terminal Server ) in Oracle E-Business Suite versions 12.2.3 through 12.2.15 is affected by an easily exploitable vulnerability that allows an unauthenticated attacker with network access via TCP to achieve full takeover of the server, impacting co...