CVE-2026-60458

...

CVE-2026-60437

...

CVE-2026-60429

...

CVE-2026-60426

...

CVE-2026-60423

...

CVE-2026-60405

CVE-2026-60405 affects Oracle TimesTen In-Memory Database (Kubernetes Operator component) with affected version 26.1.1.1.0. The description states a low-privilege, locally authenticated attacker can compromise TimesTen In-Memory Database, potentially allowing unauthorized read access to a subset ...

CVE-2026-60405

...

CVE-2026-60394

...

CVE-2026-60381

CVE-2026-60381 concerns Oracle Fusion Middleware’s Service Delivery Platform (Messaging Enabler). Affected versions are 12.2.1.4.0 and 14.1.2.0.0. The vulnerability allows an attacker with network access via T3/IIOP and low privileges to compromise the Service Delivery Platform, with potential ta...

CVE-2026-60379

...

CVE-2026-60353

...

CVE-2026-60343

...

CVE-2026-60345

CVE-2026-60345 affects Oracle Fusion Middleware’s JDeveloper component (ADF Shared Components). Affected are 12.2.1.4.0 and 14.1.2.0.0. The vulnerability allows a high-privilege attacker with network access via HTTP to compromise Oracle JDeveloper, potentially leading to takeover. CVSS 3.1 base s...

CVE-2026-60342

...

CVE-2026-60340

The CVE-2026-60340 entry applies to Oracle E-Business Suite, specifically the Oracle Project Costing component (Enterprise Command Center). Affected versions are 12.2.3–12.2.15. The vulnerability, described across NVD/Oracle sources, permits a high-privilege attacker with network access over HTTP...

CVE-2026-60331

...

CVE-2026-60323

...

CVE-2026-60323

CVE-2026-60323 affects Oracle Identity Manager (OIM Legacy UI) in Oracle Fusion Middleware, with affected versions 12.2.1.4.0 and 14.1.2.1.0. The vulnerability is exploitable over HTTP by a low-privileged, network-accessible attacker, enabling unauthorized creation, deletion or modification of da...

CVE-2026-60318

...

CVE-2026-60288

CVE-2026-60288 affects Oracle Coherence (Core) within Oracle Fusion Middleware. Affected versions include 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. The vulnerability is described as easily exploitable with unauthenticated network access via TCP, potentially allowing takeover of Oracle C...