CVE-2019-2886

The CVE-2019-2886 entry concerns Oracle Forms (component: Services) within Oracle Fusion Middleware, affected version 12.2.1.3.0. The vulnerability is described as easily exploitable with network access via HTTP, allowing an unauthenticated attacker to compromise Oracle Forms, with successful att...

CVE-2005-2294

Affected software: Oracle Forms on Unix (versions 4.5, 6.0, 6i, 9i). Vulnerability: when a large number of records are retrieved by an Oracle form, a copy of the database tables is stored in a world-readable temporary file. Root cause: insecure temporary file handling enabling a local user to rea...

CVE-2005-3207

The CVE-2005-3207 item concerns Oracle Forms 4.5.10.22, where the forms servlet (f90servlet) can be abused by a userid parameter containing a STOP command to remotely cause a denial of service (TNS listener stop). The connected Nessus/NASL entry for the October 2005 CPU references multiple Oracle...

CVE-2005-1178

The CVE-2005-1178 entry describes an SQL injection vulnerability in Oracle Forms 10g. The vulnerability allows remote attackers to execute arbitrary SQL commands via the Query/Where feature, indicating an injectable input path in the application’s query-building mechanism. According to the NVD en...

CVE-2005-2372

CVE-2005-2372 affects Oracle Forms 4.5–10g, where Form executables (.FMX) can be loaded from arbitrary directories and executed with the privileges of the Oracle/System user. An attacker can upload a malicious FMX and reference it via an absolute path in either the (1) form or (2) module paramete...

CVE-2026-83099

CVE-2026-83099 is a Critical (CVSS 3.1: 10.0) vulnerability in Oracle Forms (component: Forms Services, C/S, Charmode) within Oracle Fusion Middleware . Affected supported versions are 12.2.1.19.0 and 14.1.2.0.0 . The flaw allows an unauthenticated attacker with network access via HTTP to comprom...

CVE-2026-83104

CVE-2026-83104 affects the Oracle Forms product of Oracle Fusion Middleware, specifically the Forms Services, C/S, Charmode component, in supported versions 12.2.1.19.0 and 14.1.2.0.0 . The vulnerability is easily exploitable by an unauthenticated attacker with network access via TCP , with no us...

CVE-2026-83108

Oracle Forms (component: Forms Services, C/S, Charmode) in Oracle Fusion Middleware is affected in versions 12.2.1.19.0 and 14.1.2.0.0 . An unauthenticated attacker with network access via HTTP can exploit this vulnerability to achieve full takeover of Oracle Forms, impacting confidentiality, int...

CVE-2026-83095

CVE-2026-83095 affects the Oracle Forms product within Oracle Fusion Middleware, specifically the Forms Services, C/S, Charmode component. Supported versions 12.2.1.19.0 and 14.1.2.0.0 are vulnerable. An unauthenticated attacker with network access via HTTP can exploit this with low complexity an...

CVE-2026-83097

Oracle Forms (component: Forms Services, C/S, Charmode) within Oracle Fusion Middleware is affected in versions 12.2.1.19.0 and 14.1.2.0.0 . A high-privileged attacker with network access via HTTP can exploit this with low complexity to cause unauthorized creation, deletion, or modification of cr...

CVE-2026-83098

CVE-2026-83098 affects Oracle Forms (component: Forms Services, C/S, Charmode) within Oracle Fusion Middleware, specifically versions 12.2.1.19.0 and 14.1.2.0.0 . An unauthenticated attacker with network access via HTTP can exploit this with low complexity to achieve full takeover of Oracle Forms...

CVE-2026-83093

Oracle Forms (Oracle Fusion Middleware, component: Forms Services, C/S, Charmode) has an unauthenticated network vulnerability exploitable via HTTP with low complexity. Affected supported versions are 12.2.1.19.0 and 14.1.2.0.0 . Successful exploitation grants unauthorized access to critical data...

CVE-2026-83094

Oracle Forms (Oracle Fusion Middleware, component: Forms Services, C/S, Charmode) is vulnerable to an unauthenticated remote attack via HTTP that allows takeover of the application. Affected supported versions are 12.2.1.19.0 and 14.1.2.0.0 . The vulnerability is rated CVSS 3.1 9.8 (CRITICAL) wit...

CVE-2026-83109

Oracle Forms (Oracle Fusion Middleware), specifically the Forms Services, C/S, Charmode component, is affected in supported versions 12.2.1.19.0 and 14.1.2.0.0 . An unauthenticated attacker with network access via HTTP can exploit this vulnerability with low complexity and no user interaction to ...

CVE-2026-83100

CVE-2026-83100 affects the Oracle Forms product within Oracle Fusion Middleware, specifically the Forms Services, C/S, Charmode component. Supported versions 12.2.1.19.0 and 14.1.2.0.0 are impacted. An unauthenticated attacker with network access via HTTP can exploit this vulnerability to achieve...