CVE-2026-83178

CVE-2026-83178 affects the Oracle Application Object Library (component: Core ) in Oracle E-Business Suite , versions 12.2.3 through 12.2.15 . The vulnerability allows a high-privileged attacker with network access via HTTP to compromise the product, resulting in takeover of the Oracle Applicatio...

CVE-2026-83180

Oracle Siebel CRM (component: Server Infrastructure ) is affected by an easily exploitable vulnerability across supported versions 17.0–26.7 . A low-privileged attacker with network access via HTTP can achieve full takeover of the Siebel CRM Deployment subsystem, with high impact on confidentiali...

CVE-2026-83175

Oracle Application Object Library (AAL) , component Core within Oracle E-Business Suite , is vulnerable in supported versions 12.2.3 through 12.2.15 . A low-privileged attacker with network access via HTTP can exploit this vulnerability with low complexity to achieve unauthorized access to critic...

CVE-2026-83177

This vulnerability affects the Documents component of Oracle One-to-One Fulfillment (Oracle E-Business Suite), versions 12.2.3 through 12.2.15 . A low-privileged attacker with network access via HTTP can exploit it with low complexity and no user interaction , resulting in unauthorized creation, ...

CVE-2026-83176

CVE-2026-83176 affects Oracle E-Business Suite (Oracle Common Applications, component: CRM User Management Framework ), versions 12.2.3 through 12.2.15 . The vulnerability allows a high-privileged attacker with network access via HTTP to compromise the application, resulting in a full takeover wi...

CVE-2026-83173

CVE-2026-83173 affects the Documents component of Oracle One-to-One Fulfillment within Oracle E-Business Suite , versions 12.2.3 through 12.2.15 . A low-privileged attacker with network access via HTTP can exploit this vulnerability with low complexity and no user interaction. Successful exploita...

CVE-2026-83172

CVE-2026-83172 affects the Oracle Sales Online component (OSO Other ) of Oracle E-Business Suite , versions 12.2.3 through 12.2.15 . An easily exploitable vulnerability allows a low-privileged attacker with network access via HTTP to compromise the product. The vulnerability exhibits a scope chan...

CVE-2026-83174

Oracle E-Business Suite – CRM Technical Foundation (Application Framework) in supported versions 12.2.3 through 12.2.15 is affected by a vulnerability that allows a low-privileged attacker with network access via HTTP to perform unauthorized creation, deletion, modification, or access to critical...

CVE-2026-83171

A vulnerability in the Documents component of Oracle One-to-One Fulfillment (Oracle E-Business Suite) affects supported versions 12.2.3 through 12.2.15 . A low-privileged attacker with network access via HTTP can exploit this flaw, though it is rated as difficult to exploit (high complexity). Due...

CVE-2026-83170

Oracle One-to-One Fulfillment (component: Documents) in Oracle E-Business Suite , versions 12.2.3 through 12.2.15 , is affected by an easily exploitable vulnerability. A low-privileged attacker with access to the adjacent physical communication segment can compromise the component, resulting in f...

CVE-2026-83168

Oracle Applications Manager (component: Oracle Diagnostics Interfaces ) in Oracle E-Business Suite versions 12.2.3 through 12.2.15 is affected by an easily exploitable vulnerability that allows a low-privileged attacker with network access via HTTPS to take over the product. The CVSS 3.1 base sco...

CVE-2026-83169

CVE-2026-83169 affects Oracle One-to-One Fulfillment (component: Java Server Issues ) within Oracle E-Business Suite, versions 12.2.3 through 12.2.15 . The vulnerability allows an unauthenticated attacker with network access via HTTP to compromise the product, resulting in a takeover (high impact...

CVE-2026-83166

Oracle Customer Interaction History (component Outcome-Result ) in Oracle E-Business Suite versions 12.2.3 through 12.2.15 is vulnerable to an easily exploitable network-based attack via HTTP. A low-privileged attacker can exploit this vulnerability to gain unauthorized access to critical data , ...

CVE-2026-83165

CVE-2026-83165 affects the User Interface component of the Oracle Customer Interaction History product within Oracle E-Business Suite, supporting versions 12.2.3 through 12.2.15 . A low-privileged attacker with network access via HTTPS can exploit this vulnerability to achieve full takeover of th...

CVE-2026-83167

Oracle Application Object Library (component: Core) in Oracle E-Business Suite versions 12.2.3 through 12.2.15 is affected by an unauthenticated vulnerability exploitable over HTTP . An attacker with network access can gain unauthorized access to critical data or complete access to all AOL-access...

CVE-2026-83163

CVE-2026-83163 affects the Oracle Application Object Library component of Oracle E-Business Suite , specifically the Attachments / File Upload module, in supported versions 12.2.3 through 12.2.15 . The vulnerability is described as easily exploitable by a low-privileged attacker with network acce...

CVE-2026-83162

Oracle Application Object Library (component: Core) in Oracle E-Business Suite versions 12.2.3–12.2.15 is affected by a vulnerability allowing an unauthenticated attacker with network access via HTTPS to achieve unauthorized creation, deletion, modification, and access to critical data. The attac...

CVE-2026-83164

Oracle E-Business Suite 's Customer Interaction History product (component: Outcome-Result ) is affected in supported versions 12.2.3 through 12.2.15 . A low-privileged attacker with network access via HTTP can exploit this vulnerability with low complexity and no user interaction to achieve take...

CVE-2026-83161

CVE-2026-83161 affects the Oracle Project Intelligence component (Internal Operations ) within Oracle E-Business Suite , versions 12.2.3 through 12.2.15 . A low-privileged attacker with network access via HTTP can exploit this vulnerability to perform unauthorized creation, deletion, or modificat...

CVE-2026-83160

Oracle Database Server RDBMS (versions 23.4.0 through 23.26.3 ) is affected by a vulnerability that allows a low-privileged attacker holding the Create Table privilege with network access via Oracle Net to take over the RDBMS. The flaw is rated CVSS 3.1 8.8 (HIGH) with high impact to confidential...