CVE-2026-61233

...

CVE-2026-61225

...

CVE-2026-61218

CVE-2026-61218 affects Oracle E-Business Suite Secure Enterprise Search (component: Search Integration Engine) and is exploitable on affected 12.2.3–12.2.15 installations. The vulnerability allows a low-privileged user with network access over HTTP to compromise the Secure Enterprise Search, pote...

CVE-2026-61221

This CVE concerns Oracle Item Master in Oracle E-Business Suite, affecting versions 12.2.3–12.2.15 (component: iSet‑up bugs). The vulnerability is exploitable by a low-privilege attacker with network access over HTTP, enabling unauthorized updates/inserts/deletes to some Oracle Item Master data a...

CVE-2026-61220

...

CVE-2026-61202

...

CVE-2026-61183

...

CVE-2026-61179

...

CVE-2026-61181

...

CVE-2026-61178

...

CVE-2026-61174

...

CVE-2026-61170

CVE-2026-61170 affects Oracle Agile PLM 9.3.6 (Oracle Supply Chain, component: Security). The description states an unauthenticated attacker with network access via HTTP can compromise Oracle Agile PLM, potentially taking over the system. CVSS 3.1 base score 8.1 (HIGH) with network attack vector,...

CVE-2026-61166

...

CVE-2026-61166

...

CVE-2026-61168

...

CVE-2026-61164

CVE-2026-61164 affects Oracle Commerce Guided Search / Oracle Commerce Experience Manager (Content Acquisition System) with affected version 11.4.0. The vulnerability can be exploited by an unauthenticated attacker over HTTPS from network access to compromise data, enabling unauthorized create/de...

CVE-2026-61163

...

CVE-2026-61163

...

CVE-2026-61162

The CVE-2026-61162 affects Oracle Commerce Guided Search / Oracle Commerce Experience Manager (Endeca Application Controller) with affected version 11.4.0. The vulnerability allows a low-privilege, logged-in attacker to compromise the system, potentially causing unauthorized creation, deletion or...

CVE-2026-61154

CVE-2026-61154 affects Oracle Commerce Guided Search Platform Services (Oracle Commerce, Forge component) with affected version 11.4.0. An unauthenticated attacker with network access over HTTP can compromise the Guided Search Platform Services, potentially leading to complete takeover. CVSS v3.1...