CVE-2026-83147

A vulnerability in Oracle PeopleSoft Enterprise FIN Inventory Brazil (component: Inventory , affected version 9.1 ) allows a low-privileged local attacker to take over the application, resulting in high impact to confidentiality, integrity, and availability . The CVSS 3.1 base score is 7.8 (High)...

CVE-2026-83144

CVE-2026-83144 affects the Order Management component of Oracle Siebel CRM – Siebel Apps Customer Order Management , versions 17.0 through 26.7 . A low-privileged attacker with network access via HTTP can exploit this vulnerability, though successful exploitation requires user interaction from a ...

CVE-2026-83145

Oracle Siebel CRM — Siebel Apps – Customer Order Management (Order Management component) in supported versions 17.0 through 26.7 is affected by a vulnerability that a low-privileged attacker with network access via HTTP can exploit with low complexity , though successful exploitation requires hum...

CVE-2026-83146

Oracle Siebel CRM End User (component: Open UI ) is affected by a difficult-to-exploit vulnerability across supported versions 17.0–26.7 . A low-privileged attacker with network access via HTTP can compromise the product, though successful exploitation requires human interaction from another user...

CVE-2026-83142

Oracle Proposals (component: Internal Operations ) in Oracle E-Business Suite versions 12.2.3 through 12.2.15 is vulnerable to unauthorized data access. A low-privileged attacker with network access via HTTP can exploit this to gain complete access to all Oracle Proposals accessible data , with p...

CVE-2026-83143

A vulnerability in Oracle Siebel CRM – Siebel Apps - Life Sciences (component: eDetailing ), affecting versions 17.0 through 26.7 , allows an unauthenticated attacker with network access via HTTP to compromise the system. The attack requires user interaction from a person other than the attacker....

CVE-2026-83140

CVE-2026-83140 affects the Internal Operations component of Oracle Field Service (part of Oracle E-Business Suite), versions 12.2.3 through 12.2.15 . A low-privileged attacker with network access via HTTP can exploit this vulnerability with low complexity and no user interaction, resulting in una...

CVE-2026-83141

CVE-2026-83141 affects Oracle Field Service (component: Internal Operations) within Oracle E-Business Suite , versions 12.2.3 through 12.2.15 . A low-privileged attacker with network access via HTTP can exploit this vulnerability to gain unauthorized access to critical data , potentially compromi...

CVE-2026-83138

A vulnerability in the Oracle Spares Management product (component: Internal Operations ) of Oracle E-Business Suite , affecting supported versions 12.2.3 through 12.2.15 , allows a high-privileged attacker with network access via HTTP to achieve full takeover. The vulnerability is rated CVSS 3.1...

CVE-2026-83136

Oracle Spares Management (component: Internal Operations) within Oracle E-Business Suite is affected by an easily exploitable vulnerability in supported versions 12.2.3 through 12.2.15 . A low-privileged attacker with network access via HTTP can exploit this flaw to achieve full takeover of the p...

CVE-2026-83134

CVE-2026-83134 affects the Shopping Cart component of Oracle iStore (part of Oracle E-Business Suite), versions 12.2.3 through 12.2.15 . A low-privileged attacker with network access via HTTP can exploit this vulnerability with low complexity and no user interaction to gain unauthorized access to...

CVE-2026-83137

CVE-2026-83137 affects Oracle Spares Management (component: Internal Operations) within Oracle E-Business Suite , versions 12.2.3 through 12.2.15 . An easily exploitable vulnerability allows a low-privileged attacker with network access via HTTP to achieve full takeover of the Oracle Spares Manag...

CVE-2026-83135

A vulnerability in the Shopping Cart component of Oracle iStore (part of Oracle E-Business Suite) affects supported versions 12.2.3 through 12.2.15 . A low-privileged attacker with network access via HTTP can exploit this with required user interaction, resulting in high impact to confidentiality...

CVE-2026-83131

A vulnerability in the File download component of Oracle Web Applications Desktop Integrator (within Oracle E-Business Suite) affects supported versions 12.2.3 through 12.2.15 . A low-privileged attacker with network access via HTTPS can exploit this with low complexity and no user interaction, r...

CVE-2026-83133

Oracle iStore (Shopping Cart component) in Oracle E-Business Suite versions 12.2.3 through 12.2.15 is affected by an unauthenticated network vulnerability exploitable via HTTP. An attacker with network access can gain unauthorized access to critical data or complete access to all Oracle iStore ac...

CVE-2026-83132

CVE-2026-83132 affects the Oracle iStore component (Shopping Cart) within Oracle E-Business Suite , versions 12.2.3 through 12.2.15 . A low-privileged attacker with network access via HTTP can exploit this vulnerability to achieve high confidentiality and integrity impact , enabling unauthorized ...

CVE-2026-83128

CVE-2026-83128 affects the Oracle Sales Offline product (component: Internal Operations ) within Oracle E-Business Suite , versions 12.2.3 through 12.2.15 . The vulnerability is easily exploitable by an unauthenticated attacker with network access via HTTP , requiring no user interaction. Success...

CVE-2026-83130

CVE-2026-83130 affects the Oracle Site Hub component (Internal Operations) of Oracle E-Business Suite , versions 12.2.3 through 12.2.15 . A low-privileged attacker with network access via HTTP can exploit this vulnerability with low complexity and no user interaction to compromise the product. Su...

CVE-2026-83129

CVE-2026-83129 affects the Oracle Sales product of Oracle E-Business Suite (component: Internal Operations ), versions 12.2.3–12.2.15 . A low-privileged attacker with network access via HTTP can exploit this vulnerability with low complexity and no user interaction to gain unauthorized access to ...

CVE-2026-83126

This vulnerability affects Oracle Sales Online , a component of Oracle E-Business Suite (sub-component: Internal Operations ), in supported versions 12.2.3 through 12.2.15 . A low-privileged attacker with network access via HTTP can exploit this vulnerability, though successful attacks require hu...