CVE-2026-83166

Oracle Customer Interaction History (component Outcome-Result ) in Oracle E-Business Suite versions 12.2.3 through 12.2.15 is vulnerable to an easily exploitable network-based attack via HTTP. A low-privileged attacker can exploit this vulnerability to gain unauthorized access to critical data , ...

CVE-2026-83165

CVE-2026-83165 affects the User Interface component of the Oracle Customer Interaction History product within Oracle E-Business Suite, supporting versions 12.2.3 through 12.2.15 . A low-privileged attacker with network access via HTTPS can exploit this vulnerability to achieve full takeover of th...

CVE-2026-83167

Oracle Application Object Library (component: Core) in Oracle E-Business Suite versions 12.2.3 through 12.2.15 is affected by an unauthenticated vulnerability exploitable over HTTP . An attacker with network access can gain unauthorized access to critical data or complete access to all AOL-access...

CVE-2026-83163

CVE-2026-83163 affects the Oracle Application Object Library component of Oracle E-Business Suite , specifically the Attachments / File Upload module, in supported versions 12.2.3 through 12.2.15 . The vulnerability is described as easily exploitable by a low-privileged attacker with network acce...

CVE-2026-83162

Oracle Application Object Library (component: Core) in Oracle E-Business Suite versions 12.2.3–12.2.15 is affected by a vulnerability allowing an unauthenticated attacker with network access via HTTPS to achieve unauthorized creation, deletion, modification, and access to critical data. The attac...

CVE-2026-83164

Oracle E-Business Suite 's Customer Interaction History product (component: Outcome-Result ) is affected in supported versions 12.2.3 through 12.2.15 . A low-privileged attacker with network access via HTTP can exploit this vulnerability with low complexity and no user interaction to achieve take...

CVE-2026-83161

CVE-2026-83161 affects the Oracle Project Intelligence component (Internal Operations ) within Oracle E-Business Suite , versions 12.2.3 through 12.2.15 . A low-privileged attacker with network access via HTTP can exploit this vulnerability to perform unauthorized creation, deletion, or modificat...

CVE-2026-83160

Oracle Database Server RDBMS (versions 23.4.0 through 23.26.3 ) is affected by a vulnerability that allows a low-privileged attacker holding the Create Table privilege with network access via Oracle Net to take over the RDBMS. The flaw is rated CVSS 3.1 8.8 (HIGH) with high impact to confidential...

CVE-2026-83159

CVE-2026-83159 affects the ADPatch component of Oracle E-Business Suite Applications DBA in supported versions 12.2.3 through 12.2.15 . An unauthenticated attacker with local logon to the infrastructure where Applications DBA executes can compromise it, requiring user interaction from a person ot...

CVE-2026-83158

CVE-2026-83158 affects Oracle Applications Manager (component: Command Line – RapidClone ) within Oracle E-Business Suite , versions 12.2.3 through 12.2.15 . A low-privileged attacker with local logon to the infrastructure where Oracle Applications Manager executes can exploit this vulnerability ...

CVE-2026-83157

CVE-2026-83157 affects the Command Line – RapidClone component of Oracle Applications Manager within Oracle E-Business Suite , versions 12.2.3 through 12.2.15 . A high-privileged attacker with network access via HTTP can exploit this difficult-to-exploit vulnerability to achieve takeover of Oracl...

CVE-2026-83156

CVE-2026-83156 affects the Oracle XML Developers Kit (XDK) component of Oracle Database Server , specifically supported versions 19.3–19.32, 21.3–21.23, and 23.4.0–23.26.3 . A low-privileged attacker holding the XDKC privilege with network access via Oracle Net can exploit this vulnerability, tho...

CVE-2026-83155

Oracle Siebel CRM (component: Server Infrastructure , product: Siebel CRM Deployment) versions 17.0–26.7 are affected by an easily exploitable vulnerability. A low-privileged attacker with access to the adjacent physical network segment can compromise the deployment, resulting in high confidentia...

CVE-2026-83154

This vulnerability affects the Open UI component of Oracle Siebel CRM End User , versions 17.0 through 26.7 . An unauthenticated attacker with network access via SOAP can exploit it with low complexity and no user interaction. Successful exploitation allows unauthorized creation, deletion, or mod...

CVE-2026-83153

Oracle Siebel CRM (product: Siebel CRM Deployment , component: Server Infrastructure ) is affected by a vulnerability in versions 17.0 through 26.7 . The flaw is easily exploitable by a low-privileged attacker with network access via HTTPS , allowing takeover of the Siebel CRM Deployment componen...

CVE-2026-83151

CVE-2026-83151 affects the Messaging Enabler component of Oracle Fusion Middleware – Service Delivery Platform , versions 12.2.1.4.0 and 14.1.2.0.0 . An unauthenticated attacker with network access via SOAP can exploit this vulnerability to achieve full takeover of the Service Delivery Platform, ...

CVE-2026-83152

CVE-2026-83152 affects the Internal Operations component of Oracle Project Intelligence (part of Oracle E-Business Suite), versions 12.2.3 through 12.2.15 . A low-privileged attacker with network access via HTTP can exploit this vulnerability to achieve unauthorized creation, deletion, modificati...

CVE-2026-83149

Oracle Application Testing Suite version 13.3.0.1 is affected by a network-reachable vulnerability that allows a low-privileged attacker with Test Manager for Web Apps privilege to compromise the product via HTTP. Due to a scope change , attacks may significantly impact additional products beyond...

CVE-2026-83148

Oracle Application Testing Suite 13.3.0.1 is affected by a low-privilege network vulnerability requiring the Test Manager for Web Apps privilege and network access via HTTP . A successful exploit allows a low-privileged attacker to achieve full takeover of the product, with High impact on Confide...

CVE-2026-83150

CVE-2026-83150 affects Oracle Application Testing Suite version 13.3.0.1 . The vulnerability allows an unauthenticated attacker with local access to the infrastructure where the suite executes to achieve full takeover of the application, impacting confidentiality, integrity, and availability. Exp...