CVE-2026-83038

CVE-2026-83038 affects the TopLink Integration component of Oracle WebLogic Server (Oracle Fusion Middleware), with supported versions 12.2.1.4.0 , 14.1.1.0.0 , 14.1.2.0.0 , and 15.1.1.0.0 impacted. A low-privileged attacker with network access via HTTP can exploit this vulnerability to achieve t...

CVE-2026-83039

Oracle WebCenter Portal (component: Composer ) is vulnerable to a critical flaw in supported versions 12.2.1.4.0 and 14.1.2.0.0 . A low-privileged attacker with network access via HTTP and no user interaction can exploit this vulnerability to achieve takeover of the product, with a scope change m...

CVE-2026-83035

Oracle WebCenter Sites (component of Oracle Fusion Middleware) versions 12.2.1.4.0 and 14.1.2.0.0 are affected by an easily exploitable vulnerability that allows an unauthenticated attacker with network access via HTTP to compromise the product. Successful exploitation results in full takeover of...

CVE-2026-83036

This critical vulnerability (CVSS 9.8) affects Oracle WebCenter Sites (component: WebCenter Sites) in Oracle Fusion Middleware , versions 12.2.1.4.0 and 14.1.2.0.0 . An unauthenticated attacker with network access via HTTP can exploit it with low complexity to achieve full takeover of the product...

CVE-2026-83034

Oracle WebCenter Sites (Oracle Fusion Middleware) versions 12.2.1.4.0 and 14.1.2.0.0 are affected by an unauthenticated vulnerability exploitable over HTTP . An attacker with network access can achieve unauthorized access to critical data or complete access to all accessible WebCenter Sites data,...

CVE-2026-83032

A low-privileged attacker with network access via HTTP can compromise Oracle WebCenter Sites (component of Oracle Fusion Middleware) in supported versions 12.2.1.4.0 and 14.1.2.0.0 . Successful exploitation results in takeover of the product, with HIGH impact to confidentiality, integrity, and av...

CVE-2026-83031

Oracle WebCenter Sites (component: WebCenter Sites) in Oracle Fusion Middleware versions 12.2.1.4.0 and 14.1.2.0.0 is affected by an easily exploitable vulnerability. A low-privileged attacker with network access via HTTP can compromise the product, with a scope change meaning attacks may signifi...

CVE-2026-83033

CVE-2026-83033 affects Oracle WebCenter Sites (Oracle Fusion Middleware), specifically versions 12.2.1.4.0 and 14.1.2.0.0 . An easily exploitable vulnerability allows a low-privileged attacker with network access via HTTP to compromise the product, resulting in full takeover of Oracle WebCenter S...

CVE-2026-83027

Oracle Identity Manager Connector (component: Core) within Oracle Fusion Middleware is affected by a critical vulnerability in supported versions 12.2.1.4.0 and 14.1.2.1.0 . An unauthenticated attacker with access to the adjacent physical communication segment can exploit this with low complexity...

CVE-2026-83029

Oracle Managed File Transfer (MFT Runtime Server) in Oracle Fusion Middleware versions 12.2.1.4.0 and 14.1.2.0.0 is affected by an easily exploitable vulnerability allowing a low-privileged attacker with network access via HTTP to compromise the product. The CVSS 3.1 score is 9.6 (CRITICAL) with ...

CVE-2026-83030

Oracle Managed File Transfer (component: MFT Runtime Server ) in Oracle Fusion Middleware versions 12.2.1.4.0 and 14.1.2.0.0 is affected by an easily exploitable vulnerability allowing a low-privileged attacker with network access via T3 or IIOP to compromise the system. Successful exploitation c...

CVE-2026-83028

Oracle Identity Manager Connector (Core component) in Oracle Fusion Middleware versions 12.2.1.4.0 and 14.1.2.1.0 is affected by a vulnerability allowing an unauthenticated attacker with access to the physical communication segment attached to the hardware to take over the product. The attack vec...

CVE-2026-83024

This vulnerability affects the Core component of Oracle Identity Manager Connector , part of Oracle Fusion Middleware. Supported versions 12.2.1.4.0 and 14.1.2.1.0 are impacted. A low-privileged local attacker with logon to the infrastructure where the connector executes can exploit this with low...

CVE-2026-83025

This vulnerability affects the Oracle Identity Manager Connector component (Core) of Oracle Fusion Middleware, specifically versions 12.2.1.4.0 and 14.1.2.1.0 . An unauthenticated attacker with network access via TCP can exploit it, though exploitation is rated high complexity . The vulnerability...

CVE-2026-83026

Oracle Identity Manager Connector (Core component) of Oracle Fusion Middleware , versions 12.2.1.4.0 and 14.1.2.1.0 , is vulnerable to a difficult-to-exploit attack by an unauthenticated attacker with access to the physical communication segment attached to the hardware where the connector execut...

CVE-2026-83023

Oracle Identity Manager Connector (Oracle Fusion Middleware, component: Core) in supported versions 12.2.1.4.0 and 14.1.2.1.0 has a high-severity vulnerability (CVSS 3.1 base score 8.6 ) that allows an unauthenticated attacker with network access via HTTP to compromise the product. Due to a scope...

CVE-2026-83022

Oracle WebCenter Enterprise Capture (component: Client Bundle ) in Oracle Fusion Middleware versions 12.2.1.4.0 and 14.1.2.0.0 is affected by a difficult-to-exploit vulnerability that allows an unauthenticated attacker with access to the physical communication segment to compromise the product. S...

CVE-2026-83021

CVE-2026-83021 is a critical vulnerability in the Web Container component of Oracle WebLogic Server (Oracle Fusion Middleware), affecting supported versions 12.2.1.4.0 , 14.1.1.0.0 , and 14.1.2.0.0 . An unauthenticated attacker with network access via HTTP can exploit this with low complexity and...

CVE-2026-83019

This HIGH -severity vulnerability (CVSS 3.1: 8.1 ) affects the SQR component of Oracle PeopleSoft Enterprise PeopleTools , versions 8.61–8.63 . A low-privileged attacker with network access via HTTP can exploit it with low complexity and no user interaction. Successful exploitation results in hig...

CVE-2026-83018

CVE-2026-83018 affects Oracle PeopleSoft Enterprise PeopleTools in the SQR component, with supported versions 8.61 through 8.63 vulnerable. A low-privileged attacker with local logon to the infrastructure where PeopleTools executes can exploit this vulnerability with low complexity and no user in...