CVE-2026-83098

CVE-2026-83098 affects Oracle Forms (component: Forms Services, C/S, Charmode) within Oracle Fusion Middleware, specifically versions 12.2.1.19.0 and 14.1.2.0.0 . An unauthenticated attacker with network access via HTTP can exploit this with low complexity to achieve full takeover of Oracle Forms...

CVE-2026-83096

CVE-2026-83096 affects Oracle Forms (component: Forms Services, C/S, Charmode) within Oracle Fusion Middleware, versions 12.2.1.19.0 and 14.1.2.0.0 . A low-privileged attacker with network access via HTTP can exploit this vulnerability, though it is rated as difficult to exploit (high attack comp...

CVE-2026-83094

Oracle Forms (Oracle Fusion Middleware, component: Forms Services, C/S, Charmode) is vulnerable to an unauthenticated remote attack via HTTP that allows takeover of the application. Affected supported versions are 12.2.1.19.0 and 14.1.2.0.0 . The vulnerability is rated CVSS 3.1 9.8 (CRITICAL) wit...

CVE-2026-83095

CVE-2026-83095 affects the Oracle Forms product within Oracle Fusion Middleware, specifically the Forms Services, C/S, Charmode component. Supported versions 12.2.1.19.0 and 14.1.2.0.0 are vulnerable. An unauthenticated attacker with network access via HTTP can exploit this with low complexity an...

CVE-2026-83093

Oracle Forms (Oracle Fusion Middleware, component: Forms Services, C/S, Charmode) has an unauthenticated network vulnerability exploitable via HTTP with low complexity. Affected supported versions are 12.2.1.19.0 and 14.1.2.0.0 . Successful exploitation grants unauthorized access to critical data...

CVE-2026-83090

A vulnerability in Oracle Spares Management (component: Internal Operations) of Oracle E-Business Suite versions 12.2.3 through 12.2.15 allows a low-privileged attacker with network access via HTTP to achieve takeover of the component. The vulnerability is rated CVSS 3.1 Base Score 8.8 (HIGH) wit...

CVE-2026-83091

Oracle Field Service (component: Internal Operations ) within Oracle E-Business Suite versions 12.2.3 through 12.2.15 is affected by an easily exploitable vulnerability. A low-privileged attacker with network access via HTTP can compromise the product, resulting in unauthorized access to critical...

CVE-2026-83092

This vulnerability affects Oracle Field Service (component: Internal Operations ) within Oracle E-Business Suite , versions 12.2.3 through 12.2.15 . A low-privileged attacker with network access via HTTP can exploit it, though exploitation is rated as difficult (high attack complexity, no user in...

CVE-2026-83087

Oracle Siebel CRM Cloud Applications (component: Siebel Cloud Manager ), versions 22.3–26.7 , is affected by a vulnerability exploitable over HTTP by a low-privileged attacker with high attack complexity . The vulnerability exhibits a scope change , meaning successful exploitation may significant...

CVE-2026-83088

CVE-2026-83088 affects the RDBMS component of Oracle Database Server , versions 23.4.0 through 23.26.3 . An authenticated low-privileged attacker with network access via Oracle Net can trigger a complete denial of service , causing a hang or frequently repeatable crash of RDBMS. Although the vuln...

CVE-2026-83089

Oracle Alert (component: Internal Operations) in Oracle E-Business Suite versions 12.2.3 through 12.2.15 is vulnerable to a network-based attack. A low-privileged attacker with HTTP access can exploit this vulnerability to gain unauthorized creation, deletion, or modification of critical data, as...

CVE-2026-83085

This vulnerability affects Oracle Siebel CRM (component: Siebel Cloud Manager ), impacting supported versions 22.3 through 26.7 . The attack vector is adjacent network (AV:A) with low privileges and no user interaction, requiring an attacker to be on the same physical communication segment. Due t...

CVE-2026-83086

This vulnerability affects Oracle Siebel CRM Cloud Applications , specifically the Siebel Cloud Manager component, in supported versions 22.3–26.7 . A low-privileged attacker with network access via HTTP can exploit this vulnerability with low complexity and no user interaction, leading to full t...

CVE-2026-83084

CVE-2026-83084 affects the Oracle Marketing product of Oracle E-Business Suite, specifically the Audience component, in supported versions 12.2.3 through 12.2.15 . A low-privileged attacker with network access via HTTP can exploit this vulnerability with no user interaction and low complexity. Th...

CVE-2026-83082

This vulnerability affects the Audience component of Oracle Marketing within Oracle E-Business Suite , versions 12.2.3 through 12.2.15 . A high-privileged attacker with network access via HTTP can exploit it to achieve full takeover of the Oracle Marketing module, with high impact on confidential...

CVE-2026-83083

Oracle Marketing (component: Audience ) in Oracle E-Business Suite versions 12.2.3 through 12.2.15 is affected by an easily exploitable vulnerability allowing a low-privileged attacker with network access via HTTP to compromise the product. The changed scope means attacks may significantly impact...

CVE-2026-83081

Oracle Banking Corporate Lending (component: Core ) of Oracle Financial Services Applications, versions 14.5.0.0.0 through 14.9.0.0.0 , is affected by a vulnerability scored CVSS 3.1 Base 8.0 (HIGH) . An unauthenticated attacker with access to the physical communication segment attached to the ha...

CVE-2026-83079

Oracle Siebel CRM Cloud Applications (component: Siebel Cloud Manager ) is affected in supported versions 22.3–26.7 . A high-privileged attacker with local logon to the infrastructure can exploit this vulnerability with low complexity, causing a scope change that may impact additional products be...

CVE-2026-83080

Oracle Banking Branch (component: Reports ) in Oracle Financial Services Applications versions 14.5.0.0.0 through 14.9.0.0.0 contains a vulnerability that allows a low-privileged attacker with network access via HTTP to achieve full compromise (high confidentiality, integrity, and availability im...

CVE-2026-83078

Oracle Siebel CRM (component: Siebel Cloud Manager ) in supported versions 22.3–26.7 contains an easily exploitable vulnerability allowing an unauthenticated attacker with HTTP network access to compromise the application. Successful exploitation can result in unauthorized access to all accessibl...