CVE-2026-60602

...

CVE-2026-60601

The CVE-2026-60601 entry concerns Oracle PeopleSoft Enterprise FIN Common Objects, specifically the Security component. Affected is the 9.2 release. The vulnerability is described as exploitable by a low-privilege user who can log on to the infrastructure where PeopleSoft Enterprise FIN Common Ob...

CVE-2026-60598

...

CVE-2026-60598

The CVE-2026-60598 affects Oracle PeopleSoft: Enterprise CS Student Records (component: Research Tracking) with vulnerable version 9.2.38. A low-privilege user with network access over HTTP can compromise the system, potentially taking over the PeopleSoft CS Student Records process. The CVSS 3.1 ...

CVE-2026-60596

...

CVE-2026-60597

...

CVE-2026-60594

CVE-2026-60594 affects Oracle PeopleSoft Enterprise CS Campus Community (component: Integration and Interfaces) for the 9.2.38 release. The vulnerability is exploitable by a low-privileged attacker over HTTP with network access, potentially leading to takeover of PeopleSoft Enterprise CS Campus C...

CVE-2026-60586

...

CVE-2026-60583

...

CVE-2026-60577

CVE-2026-60577 concerns Oracle E-Business Suite’s Oracle Enterprise Command Center Framework, Core component, in the V16 line. The vulnerability enables a low-privileged, network-accessible attacker (via HTTP) to compromise the Enterprise Command Center Framework, potentially granting unauthorize...

CVE-2026-60579

The CVE affects Oracle E-Business Suite's Oracle Enterprise Command Center Framework (Core) with affected version V16. The vulnerability allows an unauthenticated attacker with access to the physical communication segment to compromise the framework. Impact includes unauthorized creation, deletio...

CVE-2026-60578

CVE-2026-60578 is a vulnerability in the Oracle Enterprise Command Center Framework (Oracle E-Business Suite, Core). Affected product version is V16. The flaw allows a high-privileged attacker with network access over HTTP to compromise the Oracle Enterprise Command Center Framework, with potenti...

CVE-2026-60575

...

CVE-2026-60575

The CVE concerns Oracle E-Business Suite’s Workflow component, specifically the Workflow Notification Mailer. Affected versions are 12.2.3–12.2.15. The issue allows a low-privilege attacker with HTTP network access to perform unauthorized updates/inserts/deletes and reads in Oracle Workflow data,...

CVE-2026-60574

CVE-2026-60574 affects Oracle Content Manager in Oracle E-Business Suite (Cover Letter) versions 12.2.3–12.2.15. A low-privilege attacker with network access via HTTP can achieve unauthorized update/insert/delete and read access, plus partial denial of service. CVSS 3.1 base score 6.3. Oracle CPU...

CVE-2026-60573

Summary: CVE-2026-60573 is a vulnerability in Oracle E-Business Suite’s Oracle Partner Management (Partner Dashboard) affecting 12.2.3–12.2.15. The NVD entry describes an easily exploitable issue where a low-privileged, network-accessible attacker (via HTTPS) can compromise Oracle Partner Managem...

CVE-2026-60570

Oracle GoldenGate (Libraries) is affected in versions 23.4–23.26.1. The vulnerability enables a low-privileged attacker with logon to the infrastructure where GoldenGate executes to compromise the component, potentially taking over Oracle GoldenGate (CVSS v3.1 base score 7.8, C/H/I/H). Mitigation...

CVE-2026-60568

...

CVE-2026-60567

...

CVE-2026-60567

CVE-2026-60567 affects Oracle Fusion Middleware’s Oracle Identity Manager (OIM) Legacy UI component. Affected versions are 12.2.1.4.0 and 14.1.2.1.0. The vulnerability allows unauthenticated, network-accessible attackers via HTTP to compromise OIM, potentially enabling creation, deletion, or modi...