CVE-2026-60534

The CVE-2026-60534 vulnerability affects Oracle Fusion Middleware’s Oracle Identity Manager Connector (component: PeopleSoft Applications). Affected versions are 12.2.1.4.0 and 14.1.2.1.0. The issue enables a high-privilege attacker with network access via HTTP to compromise the Oracle Identity M...

CVE-2026-60530

...

CVE-2026-60532

The CVE concerns Oracle Identity Manager Connector (Oracle Fusion Middleware) for PeopleSoft Applications, affected in 12.2.1.4.0 and 14.1.2.1.0. It is exploitable over HTTP with network access by an unauthenticated attacker, potentially allowing takeover of the Oracle Identity Manager Connector ...

CVE-2026-60529

CVE-2026-60529 affects Oracle WebLogic Server Console in Oracle Fusion Middleware (versions 14.1.2.0.0 and 15.1.1.0.0). The vulnerability enables a high-privilege attacker with network access via HTTP to compromise the server, potentially taking over the WebLogic installation. The connected docum...

CVE-2026-60526

...

CVE-2026-60525

CVE-2026-60525 affects Oracle WebCenter Content (Content Server) in Oracle Fusion Middleware; vulnerable versions are 12.2.1.4.0 and 14.1.2.0.0. The issue can be triggered by a low-privilege user over HTTP with network access, potentially leading to unauthorized creation, deletion or modification...

CVE-2026-60524

CVE-2026-60524 affects Oracle WebCenter Enterprise Capture (Client Bundle) in Oracle Fusion Middleware, with affected versions 12.2.1.4.0 and 14.1.2.0.0. The issue allows a low-privileged attacker who can reach via network (T3, IIOP) to compromise the product, potentially taking over the WebCente...

CVE-2026-60522

The CVE-2026-60522 entry affects Oracle WebCenter Content (Content Server) in Oracle Fusion Middleware. Affected are 12.2.1.4.0 and 14.1.2.0.0. The flaw allows a low-privilege attacker with network access via HTTP to compromise WebCenter Content, with user interaction required. Consequences inclu...

CVE-2026-60519

...

CVE-2026-60501

...

CVE-2026-60499

CVE-2026-60499 affects Oracle JD Edwards EnterpriseOne Solution Advisor (component: Solution Advisor) in the 9.2 line. The vulnerability allows a low-privilege, network-accessible attacker (via HTTP) to take over the JD Edwards EnterpriseOne Solution Advisor; CVSS 3.1 base score 8.8 (C/H/I/H). Th...

CVE-2026-60497

CVE-2026-60497 affects Oracle JD Edwards EnterpriseOne CRM Foundation, specifically the CRM Foundation component in the 9.2 line. The vulnerability is exploitable with network access via JDENET by a low-privilege attacker and can lead to takeover of the CRM Foundation, per the CVSS 3.1 vector (AV...

CVE-2026-60496

...

CVE-2026-60495

The CVE-2026-60495 entry concerns Oracle JD Edwards EnterpriseOne Requirements Planning (component: Requirements Planning) with the affected version reported as 9.2. The vulnerability allows a low-privilege attacker who can access JDENET over the network to compromise the JD Edwards EnterpriseOne...

CVE-2026-60493

CVE-2026-60493 affects Oracle JD Edwards EnterpriseOne Human Resources Management (component: Human Resources) with affected version 9.2. The vulnerability is exploitable over HTTP by a low-privileged, network-attached attacker, potentially leading to takeover with CVSS 3.1 base score 8.8 (C/H, I...

CVE-2026-60491

...

CVE-2026-60472

CVE-2026-60472 concerns Oracle WebCenter Content: Imaging (Core) vulnerability affecting 12.2.1.4.0 and 14.1.2.0.0. The issue allows a low-privileged attacker with network access over HTTP to compromise WebCenter Content: Imaging, with potential takeover consequences. The CVSS 3.1 base score is 8...

CVE-2026-60470

The CVE-2026-60470 entry concerns Oracle Fusion Middleware WebCenter Content: Imaging (Core) with affected versions 12.2.1.4.0 and 14.1.2.0.0. The vulnerability is exploitable over HTTP by a network-Adjacent attacker with low privileges, requiring user interaction, and may lead to unauthorized cr...

CVE-2026-60462

Affected product: Oracle WebCenter Content (Content Server) within Oracle Fusion Middleware. Vulnerable versions: 12.2.1.4.0 and 14.1.2.0.0. Issue: a vulnerability allows an unauthenticated attacker with network access over HTTP to compromise WebCenter Content and potentially take over the applic...

CVE-2026-60460

The CVE-2026-60460 entry corresponds to Oracle WebCenter Enterprise Capture (Client Bundle) in Oracle Fusion Middleware. Affected versions are 12.2.1.4.0 and 14.1.2.0.0. The vulnerability can be exploited over NETWORK via T3/IIOP by an unauthenticated attacker to takeover Oracle WebCenter Enterpr...