261902 matches found
CVE-2026-60657
...
CVE-2026-60653
This CVE (CVE-2026-60653) concerns Oracle WebCenter Content (Web Content Management) with affected versions 12.2.1.4.0 and 14.1.2.0.0. The vulnerability allows a low-privilege, network-accessible attacker (HTTP) to modify or exfiltrate data, potentially gaining unauthorized access to all Oracle W...
CVE-2026-60650
...
CVE-2026-60647
...
CVE-2026-60644
...
CVE-2026-56746 Netty has a Security Control Bypass via CORS Short-Circuit Failure
Netty is a network application framework for development of protocol servers and clients. Versions 4.2.0.Final through 4.2.15.Final and 4.1.0.Final through 4.1.135.Final, are vulnerable to security control bypass during the origin evaluation process. CorsHandler provides a shortCircuit...
CVE-2026-60638
The CVE-2026-60638 entry concerns Oracle WebCenter Content (Content Server) within Oracle Fusion Middleware. Affected versions are 12.2.1.4.0 and 14.1.2.0.0. The vulnerability is exploitable over HTTP with network access and unauthenticated, though successful exploitation requires user interactio...
CVE-2026-60629
The CVE-2026-60629 entry affects Oracle Fusion Middleware’s Oracle JDeveloper component (Data Visualization Tools). Affected versions are 12.2.1.4.0 and 14.1.2.0.0. The vulnerability is exploitable over HTTP with network access by an unauthenticated attacker, potentially leading to unauthorized d...
CVE-2026-60622
The CVE-2026-60622 entry concerns Oracle Fusion Middleware’s Oracle JDeveloper (Security Framework). Affected: JDeveloper in 12.2.1.4.0 and 14.1.2.0.0. Description: an unauthenticated attacker with network access over HTTP can compromise JDeveloper, yielding unauthorized access to sensitive data ...
CVE-2026-60618
...
CVE-2026-60620
CVE-2026-60620 affects Oracle JD Edwards EnterpriseOne Configurator (component: Configuration Management) in the 9.2 series. An attacker with network access via HTTP and low privileges can potentially cause a hang or persistent crash (DOS) of JD Edwards EnterpriseOne Configurator, and may also pe...
CVE-2026-60613
The CVE-2026-60613 affects Oracle PeopleSoft (CS Student Records, Research Tracking) with vulnerable version 9.2.38. The issue allows a high-privilege attacker who can access via HTTP on the network to potentially take over PeopleSoft Enterprise CS Student Records. The CVSS 3.1 base score is 6.6 ...
CVE-2026-60612
CVE-2026-60612 affects Oracle PeopleSoft Enterprise CS Financial Aid, component Commonline Loans, with affected version 9.2.38. The vulnerability is described as difficult to exploit but allows a low-privileged, network-accessible attacker (via HTTP) to compromise CS Financial Aid, enabling unaut...
CVE-2026-60611
...
CVE-2026-60610
...
CVE-2026-60611
CVE-2026-60611 affects Oracle’s PeopleSoft Enterprise CS Campus Community (Security) for version 9.2.38. An unauthenticated attacker over HTTP can read a subset of data. CVSS v3.1 base score is 5.3 (Confidentiality: Low). No explicit remediation or patch details are provided in the connected docu...
CVE-2026-60610
CVE-2026-60610 affects Oracle PeopleSoft Enterprise CS Campus Community (component: Security), with affected version 9.2.38. The vulnerability allows an unauthenticated attacker with network access via HTTPS to compromise the PeopleSoft CS Campus Community and may lead to unauthorized access to d...
CVE-2026-60609
...