149911 matches found
CVE-2026-60596
CVE-2026-60596 affects Oracle PeopleSoft, specifically the FIN eSettlements product and its eSettlements component on version 9.2. The vulnerability allows a high-privileged attacker who can log on to the infrastructure where PeopleSoft runs to perform an unauthorized read of a subset of data. CV...
CVE-2026-60587
...
CVE-2026-60580
CVE-2026-60580 affects Oracle E-Business Suite’s Oracle Enterprise Command Center Framework (Core) in version V16. The vulnerability allows an unauthenticated attacker with access to the physical network segment connected to the hardware hosting the framework to compromise it, potentially leading...
CVE-2026-60577
...
CVE-2026-60576
...
CVE-2026-60566
The CVE-2026-60566 entry affects Oracle WebCenter Portal (Oracle Fusion Middleware), specifically the Runtime Tools component. Affected versions are 12.2.1.4.0 and 14.1.2.0.0. The vulnerability allows an unauthenticated attacker with network access over HTTP to compromise the WebCenter Portal, wi...
CVE-2026-60556
...
CVE-2026-60550
...
CVE-2026-60548
The CVE concerns Oracle Fusion Middleware’s Oracle SOA Suite (Integration Business Insight) with affected versions 12.2.1.4.0 and 14.1.2.0.0. The issue is exploitable over HTTP with network access by a low-privileged attacker, potentially leading to unauthorized access to critical data or full ac...
CVE-2026-60545
...
CVE-2026-60543
...
CVE-2026-60541
CVE-2026-60541 describes a vulnerability in the Oracle SOA Suite (Oracle Fusion Middleware, Enterprise Scheduling System) affecting versions 12.2.1.4.0 and 14.1.2.0.0. The flaw allows an unauthenticated, network-access attacker via HTTP to compromise Oracle SOA Suite, with potential takeover and ...
CVE-2026-60538
...
CVE-2026-60535
CVE-2026-60535 affects Oracle Fusion Middleware’s Oracle Identity Manager Connector (component: PeopleSoft Applications). Affected supported versions: 12.2.1.4.0 and 14.1.2.1.0. The vulnerability allows an unauthenticated, network-accessible attacker to compromise the Oracle Identity Manager Conn...
CVE-2026-60499
...
CVE-2026-60491
CVE-2026-60491 affects Oracle E-Business Suite, Oracle Advanced Inbound Telephony (SDK client integration) for versions 12.2.3–12.2.15. The vulnerability can be exploited remotely over HTTP by a low-privileged user, potentially leading to unauthorized update/insert/delete of Oracle Advanced Inbou...
CVE-2026-60468
CVE-2026-60468 affects Oracle WebCenter Content: Imaging (Core) in 12.2.1.4.0 and 14.1.2.0.0. The vulnerability permits a low-privileged, network (HTTP) attacker to access or modify WebCenter Content: Imaging data, per CVSS 3.1 base score 7.1 (C:H, I:L). Affected component is the Imaging Core; th...
CVE-2026-60465
CVE-2026-60465 affects Oracle WebCenter Content: Imaging (Core) and is exploitable remotely via network access (T3, IIOP) on affected 12.2.1.4.0 and 14.1.2.0.0 installations. Successful exploitation can lead to takeover of WebCenter Content: Imaging with full confidentiality, integrity, and avail...