CVE-2026-83080

Oracle Banking Branch (component: Reports ) in Oracle Financial Services Applications versions 14.5.0.0.0 through 14.9.0.0.0 contains a vulnerability that allows a low-privileged attacker with network access via HTTP to achieve full compromise (high confidentiality, integrity, and availability im...

CVE-2026-83079

Oracle Siebel CRM Cloud Applications (component: Siebel Cloud Manager ) is affected in supported versions 22.3–26.7 . A high-privileged attacker with local logon to the infrastructure can exploit this vulnerability with low complexity, causing a scope change that may impact additional products be...

CVE-2026-83078

Oracle Siebel CRM (component: Siebel Cloud Manager ) in supported versions 22.3–26.7 contains an easily exploitable vulnerability allowing an unauthenticated attacker with HTTP network access to compromise the application. Successful exploitation can result in unauthorized access to all accessibl...

CVE-2026-83075

Oracle Siebel CRM Cloud Applications (component: Siebel Cloud Manager ) is affected by an unauthenticated vulnerability exploitable over HTTP across supported versions 22.3 through 26.7 . An attacker with network access can leverage this flaw to gain unauthorized access to critical data or obtain...

CVE-2026-83076

CVE-2026-83076 affects the Internal Operations component of Oracle HR Intelligence in Oracle E-Business Suite, versions 12.2.3 through 12.2.15 . A low-privileged attacker with network access via HTTP can exploit this vulnerability, though it is rated difficult to exploit (high attack complexity)....

CVE-2026-83077

CVE-2026-83077 affects the Siebel Cloud Manager component of Oracle Siebel CRM Cloud Applications , versions 22.3 through 26.7 . The vulnerability is exploitable over network access via HTTP by a low-privileged attacker without user interaction. The scope is changed , meaning attacks originating ...

CVE-2026-83073

Oracle Siebel CRM Cloud Applications (component: Siebel Cloud Manager ) versions 22.3 through 26.7 are affected by a vulnerability allowing an unauthenticated attacker with access to the adjacent physical communication segment to compromise the application. The attack requires low complexity and ...

CVE-2026-83074

Oracle Siebel CRM Cloud Applications (component: Siebel Cloud Manager ), versions 22.3–26.7 , is affected by an easily exploitable vulnerability that allows an unauthenticated attacker with network access via SSH to compromise the product. The vulnerability has a scope change , meaning successful...

CVE-2026-83072

CVE-2026-83072 is an easily exploitable vulnerability in the Search Bean [Incl. Advanced] component of Oracle Applications Framework within Oracle E-Business Suite , affecting supported versions 12.2.3 through 12.2.15 . A low-privileged attacker with network access via HTTP can compromise the com...

CVE-2026-83071

Oracle Business Intelligence Enterprise Edition (part of Oracle Analytics) has a vulnerability in its Machine Learning component affecting versions 8.2.0.0.0 and 26.01.0.0.0 . The flaw is locally exploitable with low privileges and no user interaction, allowing an attacker with logon access to th...

CVE-2026-83069

CVE-2026-83069 affects the Framework component of Oracle Fusion Middleware Control , versions 12.2.1.4.0 and 14.1.2.0.0 . A low-privileged attacker with network access via HTTP can exploit this with low complexity and no user interaction to achieve a full takeover of the product (CVSS 3.1: 8.8, H...

CVE-2026-83068

CVE-2026-83068 affects Oracle Enterprise Manager for Oracle Database (component: Core ), version 24.1 . An easily exploitable vulnerability allows a low-privileged attacker with network access via HTTP to compromise the product, with a scope change meaning attacks may significantly impact additio...

CVE-2026-83070

CVE-2026-83070 affects Oracle PeopleSoft Enterprise PRTL Interaction Hub (component: Enterprise Portal ), specifically version 9.1 . A low-privileged attacker with network access via HTTP can exploit this vulnerability to gain unauthorized access to critical data or complete access to all Interac...

CVE-2026-83066

CVE-2026-83066 affects the OID LDAP Server component of Oracle Internet Directory (Oracle Fusion Middleware), specifically supported versions 12.2.1.4.0 and 14.1.2.1.0 . The vulnerability is easily exploitable by an unauthenticated attacker with network access via T3 or IIOP , potentially resulti...

CVE-2026-83065

CVE-2026-83065 affects Oracle WebCenter Portal (component: Runtime Tools ) within Oracle Fusion Middleware, version 14.1.2.0.0 . The vulnerability allows an unauthenticated attacker with access to the physical communication segment adjacent to the host to compromise the product, resulting in full...

CVE-2026-83067

Oracle JDeveloper (Oracle Fusion Middleware, component ADF Shared Components ) in versions 12.2.1.4.0 and 14.1.2.0.0 is affected by an easily exploitable vulnerability allowing a low-privileged attacker with network access via HTTP to compromise the application. Successful exploitation can lead t...

CVE-2026-83064

Oracle WebCenter Portal (part of Oracle Fusion Middleware ), specifically the Runtime Tools component, is affected by a network-accessible, low-complexity vulnerability in supported versions 12.2.1.4.0 and 14.1.2.0.0 . A high-privileged attacker with HTTP access can achieve takeover of the produc...

CVE-2026-83062

Oracle Internet Directory (component: OID LDAP Server ) in Oracle Fusion Middleware versions 12.2.1.4.0 and 14.1.2.1.0 contains an easily exploitable vulnerability that allows an unauthenticated attacker with network access via LDAP to fully take over the directory service. The CVSS 3.1 score is ...

CVE-2026-83063

CVE-2026-83063 is a high-severity vulnerability in the OID LDAP Server component of Oracle Internet Directory (Oracle Fusion Middleware), affecting supported versions 12.2.1.4.0 and 14.1.2.1.0 . A high-privileged attacker with network access via LDAP can exploit this with low complexity to achiev...

CVE-2026-83060

Oracle Internet Directory (OID LDAP Server) in Oracle Fusion Middleware versions 12.2.1.4.0 and 14.1.2.1.0 is affected by an easily exploitable vulnerability that allows an unauthenticated attacker with network access via LDAP to compromise the service. Successful exploitation can result in full ...