CVE-2026-83116

A vulnerability in Oracle Order Management (component: Product Diagnostic Tools ) within Oracle E-Business Suite , affecting supported versions 12.2.5 through 12.2.15 , allows a low-privileged attacker with network access via HTTP to compromise the product. The attack has a scope change , meaning...

CVE-2026-83117

CVE-2026-83117 affects the Applications DBA component of Oracle E-Business Suite (specifically AD Utilities ), versions 12.2.3 through 12.2.15 . A high-privileged attacker with network access via HTTP can exploit this vulnerability with low complexity and no user interaction to achieve full takeo...

CVE-2026-83118

Oracle E-Business Suite (component: AD Utilities / Applications DBA ) is vulnerable in supported versions 12.2.3 through 12.2.15 . A low-privileged attacker with local logon access can exploit this vulnerability with no user interaction, leading to a full takeover of Applications DBA with high im...

CVE-2026-83113

A vulnerability in Oracle Quality (component: Internal Operations ) within Oracle E-Business Suite , affecting supported versions 12.2.3 through 12.2.15 , allows a low-privileged attacker with network access via HTTP to compromise the product. Successful exploitation can result in unauthorized ac...

CVE-2026-83115

CVE-2026-83115 affects the Command Line - RapidClone component of Oracle Applications Manager within Oracle E-Business Suite, versions 12.2.3 through 12.2.15 . An unauthenticated attacker with network access via HTTP can exploit this vulnerability with low complexity to gain unauthorized access t...

CVE-2026-83114

Oracle Quality (component: Internal Operations ) in Oracle E-Business Suite versions 12.2.3–12.2.15 is affected by a vulnerability that allows a low-privileged attacker with network access via HTTP to compromise the product. The vulnerability is rated difficult to exploit (Attack Complexity: High...

CVE-2026-83110

Oracle Marketing (component: Audience ) within Oracle E-Business Suite versions 12.2.3 through 12.2.15 is affected by an unauthenticated vulnerability exploitable over HTTP . An attacker with network access can gain unauthorized access to critical data or complete access to all Oracle Marketing a...

CVE-2026-83112

Oracle Lease and Finance Management (component: Internal Operations ) in Oracle E-Business Suite versions 12.2.7 through 12.2.15 is affected by an easily exploitable vulnerability. A high-privileged attacker with network access via HTTP can exploit it to achieve takeover of the affected product, ...

CVE-2026-83109

Oracle Forms (Oracle Fusion Middleware), specifically the Forms Services, C/S, Charmode component, is affected in supported versions 12.2.1.19.0 and 14.1.2.0.0 . An unauthenticated attacker with network access via HTTP can exploit this vulnerability with low complexity and no user interaction to ...

CVE-2026-83111

CVE-2026-83111 affects the Oracle Partner Management product (component: Internal Operations ) within Oracle E-Business Suite , versions 12.2.3 through 12.2.15 . A low-privileged attacker with network access via HTTP can exploit this vulnerability, though it is rated difficult to exploit (high at...

CVE-2026-83106

CVE-2026-83106 affects the Oracle Forms product of Oracle Fusion Middleware, specifically the Forms Services, C/S, Charmode component. Supported versions 12.2.1.19.0 and 14.1.2.0.0 are impacted. A low-privileged attacker with network access via HTTP can exploit this vulnerability to achieve takeo...

CVE-2026-83108

Oracle Forms (component: Forms Services, C/S, Charmode) in Oracle Fusion Middleware is affected in versions 12.2.1.19.0 and 14.1.2.0.0 . An unauthenticated attacker with network access via HTTP can exploit this vulnerability to achieve full takeover of Oracle Forms, impacting confidentiality, int...

CVE-2026-83107

CVE-2026-83107 affects the Oracle Forms product of Oracle Fusion Middleware, specifically the Forms Services, C/S, Charmode component. Supported versions 12.2.1.19.0 and 14.1.2.0.0 are vulnerable. A high-privileged attacker with network access via HTTP can exploit this easily (low complexity, no ...

CVE-2026-83105

CVE-2026-83105 affects Oracle Forms (component: Forms Services, C/S, Charmode ) in Oracle Fusion Middleware , versions 12.2.1.19.0 and 14.1.2.0.0 . A difficult-to-exploit vulnerability allows an unauthenticated attacker with network access via HTTP to compromise the product. Although rooted in Or...

CVE-2026-83104

CVE-2026-83104 affects the Oracle Forms product of Oracle Fusion Middleware, specifically the Forms Services, C/S, Charmode component, in supported versions 12.2.1.19.0 and 14.1.2.0.0 . The vulnerability is easily exploitable by an unauthenticated attacker with network access via TCP , with no us...

CVE-2026-83103

Oracle Forms (component: Forms Services, C/S, Charmode) within Oracle Fusion Middleware is affected by an easily exploitable vulnerability in versions 12.2.1.19.0 and 14.1.2.0.0 . A high-privileged attacker with network access via HTTP can compromise Oracle Forms, with a scope change meaning atta...

CVE-2026-83101

CVE-2026-83101 is a difficult-to-exploit vulnerability in Oracle Forms (component: Forms Services, C/S, Charmode) within Oracle Fusion Middleware, affecting supported versions 12.2.1.19.0 and 14.1.2.0.0 . An unauthenticated attacker with network access via HTTP can compromise the product, resulti...

CVE-2026-83100

CVE-2026-83100 affects the Oracle Forms product within Oracle Fusion Middleware, specifically the Forms Services, C/S, Charmode component. Supported versions 12.2.1.19.0 and 14.1.2.0.0 are impacted. An unauthenticated attacker with network access via HTTP can exploit this vulnerability to achieve...

CVE-2026-83102

CVE-2026-83102 affects Oracle Forms (component: Forms Services, C/S, Charmode) within Oracle Fusion Middleware , versions 12.2.1.19.0 and 14.1.2.0.0 . The vulnerability is exploitable by an unauthenticated attacker over network access via HTTP , though exploitation is rated as difficult (high att...

CVE-2026-83097

Oracle Forms (component: Forms Services, C/S, Charmode) within Oracle Fusion Middleware is affected in versions 12.2.1.19.0 and 14.1.2.0.0 . A high-privileged attacker with network access via HTTP can exploit this with low complexity to cause unauthorized creation, deletion, or modification of cr...