CVE-2026-83061

Oracle Internet Directory (component: OID LDAP Server ), part of Oracle Fusion Middleware, is affected by an easily exploitable vulnerability in supported versions 12.2.1.4.0 and 14.1.2.1.0 . An unauthenticated attacker with network access via LDAP can exploit this vulnerability with low complexi...

CVE-2026-83059

Oracle Internet Directory (component: OID LDAP Server ), part of Oracle Fusion Middleware, is affected in supported versions 12.2.1.4.0 and 14.1.2.1.0 . An unauthenticated attacker with network access via LDAP can exploit this vulnerability to achieve full takeover of the product (C:H/I:H/A:H). T...

CVE-2026-83056

CVE-2026-83056 affects the OID LDAP Server component of Oracle Internet Directory (Oracle Fusion Middleware), specifically versions 12.2.1.4.0 and 14.1.2.1.0 . The vulnerability allows a low-privileged attacker with network access via LDAP to compromise the server. Due to a scope change , success...

CVE-2026-83057

Oracle Internet Directory (OID LDAP Server component of Oracle Fusion Middleware) is affected by a critical vulnerability (CVSS 3.1: 9.9) in supported versions 12.2.1.4.0 and 14.1.2.1.0 . A low-privileged attacker with network access via LDAP can exploit this with low complexity and no user inter...

CVE-2026-83058

CVE-2026-83058 is a critical vulnerability (CVSS 3.1: 9.9) in the OID LDAP Server component of Oracle Internet Directory (Oracle Fusion Middleware), affecting versions 12.2.1.4.0 and 14.1.2.1.0 . A low-privileged attacker with network access via LDAP can exploit this with low complexity and no us...

CVE-2026-83053

Oracle WebCenter Portal (component: Runtime Tools ), part of Oracle Fusion Middleware, is affected in versions 12.2.1.4.0 and 14.1.2.0.0 . A low-privileged attacker with network access via HTTP can exploit this vulnerability with low complexity and no user interaction to achieve full takeover of ...

CVE-2026-83055

Oracle Internet Directory (component: OID LDAP Server ) in Oracle Fusion Middleware is affected in versions 12.2.1.4.0 and 14.1.2.1.0 . A low-privileged attacker with network access via LDAP can exploit this vulnerability to achieve full takeover of the directory service. The scope change indicat...

CVE-2026-83054

CVE-2026-83054 affects the OID LDAP Server component of Oracle Internet Directory (Oracle Fusion Middleware), specifically supported versions 12.2.1.4.0 and 14.1.2.1.0 . The vulnerability is easily exploitable by an unauthenticated attacker with network access via LDAP , allowing full takeover of...

CVE-2026-83052

CVE-2026-83052 affects the Runtime Tools component of Oracle WebCenter Portal (Oracle Fusion Middleware), versions 12.2.1.4.0 and 14.1.2.0.0 . A high-privileged attacker with network access via HTTP can exploit this with low complexity and no user interaction to gain unauthorized access to critic...

CVE-2026-83051

Oracle WebCenter Portal (Oracle Fusion Middleware, component: Runtime Tools ) is affected by an easily exploitable vulnerability in versions 12.2.1.4.0 and 14.1.2.0.0 . An unauthenticated attacker with network access via HTTP can exploit it with low complexity and no user interaction to gain unau...

CVE-2026-83050

CVE-2026-83050 affects the Runtime Tools component of Oracle WebCenter Portal (Oracle Fusion Middleware), versions 12.2.1.4.0 and 14.1.2.0.0 . A low-privileged attacker with network access via HTTP can exploit this with low complexity to gain unauthorized read access to critical data (high confid...

CVE-2026-83049

CVE-2026-83049 affects the Security Framework component of Oracle WebCenter Portal (Oracle Fusion Middleware), versions 12.2.1.4.0 and 14.1.2.0.0 . A low-privileged attacker with network access via HTTP can exploit this vulnerability without user interaction, leading to a scope change where addit...

CVE-2026-83048

CVE-2026-83048 affects the Runtime Tools component of Oracle WebCenter Portal (Oracle Fusion Middleware), versions 12.2.1.4.0 and 14.1.2.0.0 . A low-privileged attacker with network access via HTTP can exploit this vulnerability to gain unauthorized access to critical data or complete access to a...

CVE-2026-83047

CVE-2026-83047 is a vulnerability in the Runtime Tools component of Oracle WebCenter Portal (Oracle Fusion Middleware), affecting versions 12.2.1.4.0 and 14.1.2.0.0 . An unauthenticated attacker with network access via HTTP can exploit this vulnerability with low complexity, resulting in high con...

CVE-2026-83045

Oracle WebCenter Portal (Oracle Fusion Middleware, component: Runtime Tools ) in versions 12.2.1.4.0 and 14.1.2.0.0 is affected by an easily exploitable vulnerability. A low-privileged attacker with network access via HTTP can compromise the product without user interaction. The scope is changed ...

CVE-2026-83043

Oracle WebCenter Portal (component: Composer ) in Oracle Fusion Middleware is affected in supported versions 12.2.1.4.0 and 14.1.2.0.0 . The vulnerability allows an unauthenticated attacker with network access via HTTP to compromise the product, though successful exploitation requires human inter...

CVE-2026-83044

CVE-2026-83044 affects the Oracle XML Gateway component (Install) of Oracle E-Business Suite , versions 12.2.3 through 12.2.15 . A low-privileged attacker with network access via HTTP can exploit this vulnerability to gain unauthorized access to critical data accessible through Oracle XML Gateway...

CVE-2026-83046

CVE-2026-83046 affects Oracle WebCenter Portal (component: Runtime Tools ) in Oracle Fusion Middleware, versions 12.2.1.4.0 and 14.1.2.0.0 . A low-privileged attacker with network access via HTTP can exploit this vulnerability with low complexity and no user interaction. Successful exploitation r...

CVE-2026-83041

This vulnerability affects Oracle WebCenter Portal (component: Portlet Services ) in versions 12.2.1.4.0 and 14.1.2.0.0 of Oracle Fusion Middleware. A low-privilege attacker with network access via HTTP can exploit this vulnerability with low complexity and no user interaction to gain unauthorize...

CVE-2026-83042

Oracle Identity Manager (OIM Legacy UI component) in Oracle Fusion Middleware versions 12.2.1.4.0 and 14.1.2.1.0 is affected by a critical vulnerability (CVSS 3.1 9.8 ). An unauthenticated attacker with network access via HTTP can exploit the flaw to achieve full takeover of the OIM instance, wit...