← Terug naar overzicht

Oracle has patched 153 vulnerabilities across multiple Oracle Fusion Middleware products including WebLogic Server, Access Manager, Forms, Internet Directory, and Platform Security for Java. Of these, 66 are rated critical and 78 can be exploited remotely without authentication. Five vulnerabilities (CVE-2026-71133, CVE-2026-83099, CVE-2026-83059, CVE-2026-83020, CVE-2026-83021) carry the maximum CVSS score of 10.0. Successful exploitation can lead to arbitrary code execution, authentication bypass, unauthorized data access, data modification or deletion, and Denial-of-Service. The NCSC advises organizations to prioritize applying security updates for the critical vulnerabilities immediately.

Affected products

  • Oracle Access Manager
  • Oracle Coherence
  • Oracle Data Integrator
  • Oracle Forms
  • Oracle Fusion Middleware Control
  • Oracle Helidon
  • Oracle Identity Manager
  • Oracle Identity Manager Connector
  • Oracle Internet Directory
  • Oracle JDeveloper
  • Oracle Managed File Transfer
  • Oracle Middleware Common Libraries and Tools
  • Oracle Platform Security for Java
  • Oracle Service Delivery Platform
  • Oracle Web Services Manager
  • Oracle WebCenter Content
  • Oracle WebCenter Enterprise Capture
  • Oracle WebCenter Portal
  • Oracle WebCenter Sites
  • Oracle WebLogic Server

Related CVE's

  • CVE-2026-71133
  • CVE-2026-83020
  • CVE-2026-83021
  • CVE-2026-83059
  • CVE-2026-83099

Categories

  • Enterprise Applications
  • Identity & Access
  • Web Technologies
  • Zero-Day Vulnerabilities