The 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0 versions of Coherence installed on the remote host are affected by multiple vulnerabilities as referenced in the September 2026 CSPU advisory.

  - Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported     versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable     vulnerability allows low privileged attacker with network access via multiple protocols to compromise     Oracle Coherence. Successful attacks of this vulnerability can result in takeover of Oracle Coherence.
    (CVE-2026-83410)

  - Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported     versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable     vulnerability allows low privileged attacker with network access via TCP to compromise Oracle Coherence.     Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification     access to critical data or all Oracle Coherence accessible data as well as unauthorized access to     critical data or complete access to all Oracle Coherence accessible data. (CVE-2026-83412)

  - Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported     versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable     vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Coherence.     Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of     service (partial DOS) of Oracle Coherence. (CVE-2026-83416)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Oracle WebLogic Server installed on the remote host are affected by multiple vulnerabilities as referenced in the September 2026 CSPU advisory.

  - Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: TopLink     Integration). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0.
    Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise     Oracle WebLogic Server. While the vulnerability is in Oracle WebLogic Server, attacks may significantly     impact additional products (scope change). Successful attacks of this vulnerability can result in takeover     of Oracle WebLogic Server. (CVE-2026-83038)

  - Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported     versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable     vulnerability allows unauthenticated attacker with network access via T3, IIOP to compromise Oracle WebLogic     Server. Successful attacks of this vulnerability can result in takeover of Oracle WebLogic Server.
    (CVE-2026-70748)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The versions of Oracle Database Server installed on the remote host are affected by multiple vulnerabilities as referenced in the September 2026 CSPU advisory.

  - Vulnerability in the RDBMS component of Oracle Database Server. Supported versions that are affected are     19.3-19.32, 21.3-21.23 and 23.4.0-23.26.3. Easily exploitable vulnerability allows low privileged attacker     having Execute on DBMS_REDEFINITION privilege with network access via Oracle Net to compromise RDBMS.
    Successful attacks of this vulnerability can result in takeover of RDBMS. (CVE-2026-83271)

  - Vulnerability in the RDBMS component of Oracle Database Server. Supported versions that are affected are     19.3-19.32, 21.3-21.23 and 23.4.0-23.26.3. Easily exploitable vulnerability allows low privileged attacker     having Create DB Link privilege with network access via Oracle Net to compromise RDBMS. Successful attacks     of this vulnerability can result in takeover of RDBMS. (CVE-2026-83348)

  - Vulnerability in the RDBMS component of Oracle Database Server. Supported versions that are affected are     23.4.0-23.26.3. Easily exploitable vulnerability allows low privileged attacker having Create Table     privilege with network access via Oracle Net to compromise RDBMS. Successful attacks of this vulnerability     can result in takeover of RDBMS. (CVE-2026-83160)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Oracle Identity Manager installed on the remote host are affected by multiple vulnerabilities as referenced in the September 2026 CSPU advisory.

  - Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: Core).
    Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows     unauthenticated attacker with network access via HTTP to compromise Oracle Identity Manager. Successful     attacks of this vulnerability can result in takeover of Oracle Identity Manager. (CVE-2026-70913)

  - Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Legacy UI).
    Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows     unauthenticated attacker with network access via HTTP to compromise Oracle Identity Manager. Successful     attacks of this vulnerability can result in takeover of Oracle Identity Manager. (CVE-2026-83042)

  - Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: Core).
    Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability     allows low privileged attacker with network access via HTTP to compromise Oracle Identity Manager.
    Successful attacks of this vulnerability can result in takeover of Oracle Identity Manager.
    (CVE-2026-71047)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The 7.2.16 version of VM VirtualBox installed on the remote Windows host is affected by multiple vulnerabilities as referenced in the September 2026 CSPU advisory.

  - Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The     supported version that is affected is 7.2.16. Easily exploitable vulnerability allows low privileged     attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM     VirtualBox. Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox.
    (CVE-2026-87268, CVE-2026-87269, CVE-2026-87270, CVE-2026-87271)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0 versions of Coherence installed on the remote host are affected by a vulnerability as referenced in the September 2026 CSPU advisory.

  - Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported     versions that are affected are 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability     allows low privileged attacker with network access via HTTP to compromise Oracle Coherence. Successful     attacks of this vulnerability can result in takeover of Oracle Coherence. (CVE-2026-83411)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The 7.2.16 version of VM VirtualBox installed on the remote host is affected by multiple vulnerabilities as referenced in the September 2026 CSPU advisory.

  - Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The     supported version that is affected is 7.2.16. Easily exploitable vulnerability allows low privileged     attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM     VirtualBox. Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox.
    (CVE-2026-87267, CVE-2026-87272, CVE-2026-87273)

  - Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The     supported version that is affected is 7.2.16. Easily exploitable vulnerability allows high privileged     attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM     VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact     additional products (scope change). Successful attacks of this vulnerability can result in takeover of     Oracle VM VirtualBox. (CVE-2026-87274, CVE-2026-87275, CVE-2026-87276, CVE-2026-87277, CVE-2026-87278,     CVE-2026-87279)

  - Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The     supported version that is affected is 7.2.16. Easily exploitable vulnerability allows low privileged     attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM     VirtualBox. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang     or frequently repeatable crash (complete DOS) of Oracle VM VirtualBox. (CVE-2026-87280, CVE-2026-87281,     CVE-2026-87282, CVE-2026-87283, CVE-2026-87284, CVE-2026-87285)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Oracle Analytics Server 8.2.0.0.0 installed on the remote host is affected by multiple vulnerabilities as referenced in the September 2026 CSPU advisory.

  - Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component:
    Analytics Web General). Supported versions that are affected are 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0.
    Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to     compromise Oracle Business Intelligence Enterprise Edition. While the vulnerability is in Oracle Business     Intelligence Enterprise Edition, attacks may significantly impact additional products (scope change).
    (CVE-2026-83304)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Oracle WebLogic Server installed on the remote host is affected by a vulnerability as referenced in the September 2026 CSPU advisory.

  - Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Web Container).
    Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0 and 14.1.2.0.0. Easily exploitable     vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic     Server. While the vulnerability is in Oracle WebLogic Server, attacks may significantly impact additional     products (scope change). Successful attacks of this vulnerability can result in takeover of Oracle WebLogic     Server. (CVE-2026-83021)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The versions of Oracle E-Business Suite installed on the remote host are affected by multiple vulnerabilities as referenced in the September 2026 CSPU advisory.

  - Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component:
    Personalization). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability     allows unauthenticated attacker with network access via SOAP to compromise Oracle Applications Framework.
    Successful attacks of this vulnerability can result in takeover of Oracle Applications Framework.
    (CVE-2026-83327)

  - Vulnerability in the Oracle Document Management and Collaboration product of Oracle E-Business Suite     (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily     exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle     Document Management and Collaboration. Successful attacks of this vulnerability can result in takeover of     Oracle Document Management and Collaboration. (CVE-2026-83452)

  - Vulnerability in the Oracle Mobile Application Server product of Oracle E-Business Suite (component: MWA     Terminal Server). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability     allows unauthenticated attacker with network access via TCP to compromise Oracle Mobile Application Server.
    Successful attacks of this vulnerability can result in takeover of Oracle Mobile Application Server.
    (CVE-2026-83462)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Oracle Analytics Server 26.01.0.0.0 installed on the remote host is affected by multiple vulnerabilities as referenced in the September 2026 CSPU advisory.

  - Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component:
    Analytics Web General). Supported versions that are affected are 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0.
    Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to     compromise Oracle Business Intelligence Enterprise Edition. While the vulnerability is in Oracle Business     Intelligence Enterprise Edition, attacks may significantly impact additional products (scope change).
    (CVE-2026-83304)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The 13.5.0.0 and 24.1.0.0 versions of Enterprise Manager Cloud Control installed on the remote host are affected by multiple vulnerabilities as referenced in the September 2026 CSPU advisory.

  - Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager     (component: Agent Next Gen (Apache Mina)). Supported versions that are affected are 13.5 and 24.1. Easily     exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle     Enterprise Manager Base Platform. Successful attacks of this vulnerability can result in takeover of Oracle     Enterprise Manager Base Platform. (CVE-2026-41635)

  - Vulnerability in the Oracle Enterprise Manager for Fusion Middleware product of Oracle Enterprise Manager     (component: Metrics). Supported versions that are affected are 13.5 and 24.1. Easily exploitable     vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Enterprise     Manager for Fusion Middleware. Successful attacks of this vulnerability can result in takeover of Oracle     Enterprise Manager for Fusion Middleware. (CVE-2026-83355)

  - Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager     (component: OMS (Eclipse Jetty)). The supported version that is affected is 24.1. Easily exploitable     vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Enterprise     Manager Base Platform. (CVE-2026-2332)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Oracle Business Intelligence Enterprise Edition 12.2.1.4.0 installed on the remote host is affected by multiple vulnerabilities as referenced in the September 2026 CSPU advisory.

  - Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component:
    Platform Security). The supported version that is affected is 12.2.1.4.0. Easily exploitable vulnerability     allows low privileged attacker with network access via HTTP to compromise Oracle Business Intelligence     Enterprise Edition. While the vulnerability is in Oracle Business Intelligence Enterprise Edition, attacks     may significantly impact additional products (scope change). (CVE-2026-83282)

  - Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component:
    Platform Security). The supported version that is affected is 12.2.1.4.0. Easily exploitable vulnerability     allows unauthenticated attacker with network access via HTTP to compromise Oracle Business Intelligence     Enterprise Edition. Successful attacks of this vulnerability can result in takeover of Oracle Business     Intelligence Enterprise Edition. (CVE-2026-83283)

  - Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component:
    Analytics Web General). Supported versions that are affected are 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0.
    Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to     compromise Oracle Business Intelligence Enterprise Edition. While the vulnerability is in Oracle Business     Intelligence Enterprise Edition, attacks may significantly impact additional products (scope change).
    (CVE-2026-83304)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The 15.1.1.0.0 version of Coherence installed on the remote host is affected by multiple vulnerabilities as referenced in the September 2026 CSPU advisory.

  - Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). The     supported version that is affected is 15.1.1.0.0. Difficult to exploit vulnerability allows low     privileged attacker with network access via HTTP to compromise Oracle Coherence. While the vulnerability     is in Oracle Coherence, attacks may significantly impact additional products (scope change). Successful     attacks of this vulnerability can result in unauthorized access to critical data or complete access to     all Oracle Coherence accessible data. (CVE-2026-83354)

  - Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). The     supported version that is affected is 15.1.1.0.0. Difficult to exploit vulnerability allows low     privileged attacker with logon to the infrastructure where Oracle Coherence executes to compromise Oracle     Coherence. Successful attacks of this vulnerability can result in unauthorized read access to a subset of     Oracle Coherence accessible data. (CVE-2026-83414)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
346314	Oracle Coherence (September 2026 CSPU)	Nessus	Misc.	9/16/2026	9/23/2026	high
348179	Oracle WebLogic Server (September 2026 CSPU)	Nessus	Misc.	9/18/2026	9/21/2026	critical
348187	Oracle Database Server (September 2026 CSPU)	Nessus	Databases	9/18/2026	9/21/2026	high
348188	Oracle Identity Manager (September 2026 CSPU)	Nessus	Misc.	9/18/2026	9/21/2026	critical
347962	Oracle VM VirtualBox Windows (September 2026 CSPU)	Nessus	Windows	9/18/2026	9/21/2026	high
346313	Oracle Coherence CVE-2026-83411 (September 2026 CSPU)	Nessus	Misc.	9/16/2026	9/17/2026	high
347963	Oracle VM VirtualBox (September 2026 CSPU)	Nessus	Misc.	9/18/2026	9/21/2026	high
348192	Oracle Analytics Server (OAS 8.2) (September 2026 CSPU)	Nessus	Misc.	9/18/2026	9/23/2026	high
348180	Oracle WebLogic Server CVE-2026-83021 (September 2026 CSPU)	Nessus	Misc.	9/18/2026	9/18/2026	critical
349717	Oracle E-Business Suite (September 2026 CSPU)	Nessus	Misc.	9/24/2026	9/25/2026	critical
348190	Oracle Analytics Server (OAS 26.01) (September 2026 CSPU)	Nessus	Misc.	9/18/2026	9/23/2026	high
347981	Oracle Enterprise Manager Cloud Control (September 2026 CSPU)	Nessus	Misc.	9/18/2026	9/21/2026	medium
348191	Oracle Business Intelligence Enterprise Edition (September 2026 CSPU)	Nessus	Misc.	9/18/2026	9/23/2026	critical
346312	Oracle Coherence 15.1.1.0.x < 15.1.1.0.5 Multiple Vulnerabilities (September 2026 CSPU)	Nessus	Misc.	9/16/2026	9/17/2026	medium

Detections

Analytics

Plugins Search

high

critical

high

critical

high

high

high

high

critical

critical

high

medium

critical

medium