200372 matches found
CVE-2026-62458
Oracle E-Business Suite (component: Internal Operations of Work in Process) versions 12.2.3–12.2.15 are affected by a HIGH-severity (CVSS 7.1) vulnerability exploitable over HTTP by a low-privileged attacker, enabling denial-of-service (hang/crash) and unauthorized data modification. No in-the-wi...
CVE-2026-62442
...
CVE-2026-61332
...
CVE-2026-61326
...
CVE-2026-61319
...
CVE-2026-61295
CVE-2026-61295 affects Oracle WebCenter Content Content Server in Oracle Fusion Middleware versions 12.2.1.4.0 and 14.1.2.0.0. An unauthenticated local attacker can exploit it to gain unauthorized access to critical or all accessible data. CVSS 3.1 base score is 7.1 (HIGH). No exploitation detail...
CVE-2026-61284
A HIGH-severity (CVSS 8.8) flaw in Oracle Enterprise Manager's Application Config Console affects versions 13.5 and 24.1; an HTTP-accessible, low-privilege attacker can fully compromise the platform (C/I/A impacts). Exploitation details and fix version are not provided in the documents; apply Ora...
CVE-2026-61259
...
CVE-2026-61241
...
CVE-2026-61227
...
CVE-2026-61227
CVE-2026-61227 affects the Runtime Tools component of Oracle WebCenter Portal (Oracle Fusion Middleware), versions 12.2.1.4.0 and 14.1.2.0.0 . A low-privileged attacker with network access via HTTP can exploit this vulnerability, though user interaction is required . Due to a scope change , succe...
CVE-2026-61208
...
CVE-2026-61033
Oracle WebCenter Sites component of Oracle Fusion Middleware is affected in versions 12.2.1.4.0 and 14.1.2.0.0. An unauthenticated attacker with network access via HTTP can exploit this easily exploitable flaw to gain unauthorized access to critical data, modify or delete some data, and cause par...
CVE-2026-61029
...
CVE-2026-61007
Oracle WebCenter Sites versions 12.2.1.4.0 and 14.1.2.0.0 are affected by an unauthenticated, network-accessible vulnerability (CVSS 7.5 HIGH) allowing unauthorized access to all site data. Oracle's August 2026 security advisory provides patch details; no exploitation evidence is provided in the ...
CVE-2026-60980
Affected versions are Oracle WebCenter Content Content Server 12.2.1.4.0 and 14.1.2.0.0. An unauthenticated remote attacker via HTTP can compromise data integrity and confidentiality with scope change. Oracle's August 2026 CPU patch resolves this; apply immediately. No in-the-wild exploitation re...
CVE-2026-60971
...
CVE-2026-60947
Oracle WebCenter Enterprise Capture (Oracle Fusion Middleware) is affected in the Client Bundle component at versions 12.2.1.4.0 and 14.1.2.0.0. An unauthenticated remote attacker can exploit the service via RMI to achieve full takeover (confidentiality, integrity, availability all impacted). CVS...