CVE-2026-61098

Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware component: Client Bundle. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise...

CVE-2026-60389

Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware component: Messaging Enabler. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Service...

CVE-2026-60153

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Console. Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTPS to...

Incorrect Authorization

Overview Affected versions of this package are vulnerable to Incorrect Authorization in the handling of API requests to /api/v1/teams/id when using a public-only access token. An attacker can retrieve private team repository metadata and private team activity feed entries by sending API requests...

Incorrect Authorization

Overview Affected versions of this package are vulnerable to Incorrect Authorization in the handling of API requests to /api/v1/teams/id when using a public-only access token. An attacker can retrieve private team repository metadata and private team activity feed entries by sending API requests...

Incorrect Authorization

Overview Affected versions of this package are vulnerable to Incorrect Authorization in the handling of API requests to /api/v1/teams/id when using a public-only access token. An attacker can retrieve private team repository metadata and private team activity feed entries by sending API requests...

CVE-2026-65319 Feedbin Unauthenticated Entry Content Disclosure via GET /api/v2/entries/:id/text

Feedbin commit 739884a contains an unauthenticated information disclosure vulnerability that allows unauthenticated attackers to retrieve private article content by sending requests to the entries text API endpoint, which skips the authorization before-action filter entirely. Attackers can iterat...

CVE-2026-62524

The CVE-2026-62524 vulnerability affects Oracle HRMS (US) within Oracle E-Business Suite (US Payroll - General), affecting 12.2.3–12.2.15. The issue allows a low-privileged, network-attacker (via HTTP) to compromise data: unauthorized update/insert/delete and read access to Oracle HRMS (US) data,...

CVE-2026-62504

The CVE-2026-62504 entry concerns Oracle Time and Labor within Oracle E-Business Suite. Affected versions are 12.2.3–12.2.15, and the vulnerability affects the Internal Operations component. An attacker with low privileges who can reach the system over HTTP can potentially compromise Oracle Time ...

CVE-2026-62478

CVE-2026-62478 affects Oracle E-Business Suite’s Oracle Public Sector Financials (Internal Operations) with affected versions 12.2.3–12.2.15. The vulnerability allows a low-privileged attacker with network access over HTTP to compromise the system, potentially taking over Oracle Public Sector Fin...

CVE-2026-62468

...

CVE-2026-62456

...

CVE-2026-61329

...

CVE-2026-61311

...

CVE-2026-61217

CVE-2026-61217 affects Oracle Fusion Middleware’s Oracle Security Service, specifically the Oracle SSL API component, with affected version 12.2.1.4.0. The vulnerability is exploitable by a low-privileged attacker who has network access via TLS and requires user interaction. Impact includes unaut...

CVE-2026-61216

CVE-2026-61216 concerns Oracle E-Business Suite, Oracle Payroll component (Payroll). Affected are 12.2.3–12.2.15. The vulnerability can be exploited by a low-privileged attacker with network access over HTTP to Oracle Payroll, potentially enabling unauthorized update/insert/delete and unauthorize...

CVE-2026-61183

...

CVE-2026-61174

...

CVE-2026-61170

...

CVE-2026-61154

CVE-2026-61154 affects Oracle Commerce Guided Search Platform Services (Oracle Commerce, Forge component) with affected version 11.4.0. An unauthenticated attacker with network access over HTTP can compromise the Guided Search Platform Services, potentially leading to complete takeover. CVSS v3.1...