CVE-2026-83195

Oracle Siebel CRM (component: Server Infrastructure ) is vulnerable in supported versions 17.0 through 26.7 . An easily exploitable vulnerability allows a high-privileged attacker with network access via TCP to compromise Siebel CRM Deployment, resulting in full takeover with high impact to confi...

CVE-2026-83194

This vulnerability affects Oracle Depot Repair (component: Internal Operations ) within Oracle E-Business Suite , versions 12.2.10 through 12.2.15 . An easily exploitable flaw allows a low-privileged attacker with network access via HTTP to achieve full takeover of Oracle Depot Repair, resulting ...

CVE-2026-83196

Oracle Siebel CRM (component: Server Infrastructure , product: Siebel CRM Deployment ) is affected by a vulnerability in supported versions 17.0 through 26.7 . A high-privileged attacker with network access via HTTP can exploit this to achieve takeover of Siebel CRM Deployment, with scope change ...

CVE-2026-83193

Oracle Siebel CRM (component: Life Sciences ) versions 17.0–26.7 are affected by a locally exploitable vulnerability that requires a low-privileged attacker with infrastructure logon and user interaction from a separate person. Successful exploitation results in full compromise (high impact to co...

CVE-2026-83191

Oracle Siebel CRM — component Server Infrastructure — is affected in supported versions 17.0 through 26.7 . An unauthenticated attacker with network access via TCP can exploit a difficult-to-exploit (high complexity) vulnerability to achieve full takeover of the Siebel CRM Deployment component, i...

CVE-2026-83192

Oracle Siebel CRM End User (component: Open UI ) is affected by a vulnerability in supported versions 17.0 through 26.7 . The flaw allows an unauthenticated attacker with network access via HTTP to compromise the product, with a high complexity requirement (described as "difficult to exploit"). S...

CVE-2026-83189

Oracle User Management (component: Proxy User Delegation ) in Oracle E-Business Suite versions 12.2.3–12.2.15 is vulnerable to a high-severity flaw (CVSS 3.1: 8.8 ) that allows a low-privileged attacker with network access via HTTP to take over the Oracle User Management component. The attack req...

CVE-2026-83188

CVE-2026-83188 affects the Oracle Depot Repair product of Oracle E-Business Suite (component: Internal Operations ), versions 12.2.3 through 12.2.15 . The vulnerability allows a high-privileged attacker with network access via HTTP to compromise the product, resulting in a takeover with full impa...

CVE-2026-83190

CVE-2026-83190 is a vulnerability in Oracle Siebel CRM (component: Server Infrastructure ) affecting supported versions 17.0 through 26.7 . The flaw allows a low-privileged attacker with local access to the infrastructure where Siebel CRM Deployment executes to compromise the product, requiring h...

CVE-2026-83184

Oracle Application Object Library (component: Core) in Oracle E-Business Suite versions 12.2.3 through 12.2.15 contains a vulnerability that allows an unauthenticated attacker with network access via HTTP to compromise the component. The vulnerability is rated difficult to exploit (high attack co...

CVE-2026-83186

This vulnerability affects the Oracle Common Applications Calendar component (Applications Calendar) within Oracle E-Business Suite , versions 12.2.3 through 12.2.15 . A low-privileged attacker with network access via HTTP can exploit it with low complexity and no user interaction to perform unau...

CVE-2026-83187

Oracle E-Business Suite 's Applications Calendar component (Common Applications Calendar) is affected in supported versions 12.2.3 through 12.2.15 . A low-privileged attacker with network access via HTTP can exploit this vulnerability to perform unauthorized creation, deletion, or modification of...

CVE-2026-83185

CVE-2026-83185 affects the CRM User Management Framework component of Oracle E-Business Suite , specifically supported versions 12.2.3 through 12.2.15 . A low-privileged attacker with network access via HTTP can exploit this vulnerability, though user interaction is required. Successful exploitat...

CVE-2026-83181

CVE-2026-83181 affects the Workspaces component of Oracle Siebel CRM Development , versions 17.0 through 26.7 . An unauthenticated attacker with network access via HTTP can exploit this vulnerability to gain unauthorized access to critical data (High confidentiality impact) and cause a partial de...

CVE-2026-83182

CVE-2026-83182 affects the Configuration Tools component of Oracle Siebel CRM Development , versions 17.0 through 26.7 . A low-privileged attacker with network access via SQL can exploit this vulnerability to achieve full takeover of the Siebel CRM Development component, resulting in high impact ...

CVE-2026-83183

Oracle Siebel CRM (component: Server Infrastructure – Siebel CRM Deployment) versions 17.0 through 26.7 are affected by an easily exploitable denial-of-service vulnerability. An unauthenticated attacker with network access via HTTP can cause a hang or frequently repeatable crash, resulting in a c...

CVE-2026-83179

CVE-2026-83179 affects the Applications Calendar component of Oracle E-Business Suite (product: Oracle Common Applications Calendar), versions 12.2.3 through 12.2.15 . A low-privileged attacker with network access via HTTP can exploit this vulnerability, though it is rated as difficult to exploit...

CVE-2026-83178

CVE-2026-83178 affects the Oracle Application Object Library (component: Core ) in Oracle E-Business Suite , versions 12.2.3 through 12.2.15 . The vulnerability allows a high-privileged attacker with network access via HTTP to compromise the product, resulting in takeover of the Oracle Applicatio...

CVE-2026-83180

Oracle Siebel CRM (component: Server Infrastructure ) is affected by an easily exploitable vulnerability across supported versions 17.0–26.7 . A low-privileged attacker with network access via HTTP can achieve full takeover of the Siebel CRM Deployment subsystem, with high impact on confidentiali...

CVE-2026-83175

Oracle Application Object Library (AAL) , component Core within Oracle E-Business Suite , is vulnerable in supported versions 12.2.3 through 12.2.15 . A low-privileged attacker with network access via HTTP can exploit this vulnerability with low complexity to achieve unauthorized access to critic...