CVE-2026-61300

...

CVE-2026-61296

...

CVE-2026-61290

A HIGH-severity (CVSS 7.1) vulnerability in Oracle WebCenter Content's Content Server component affects versions 12.2.1.4.0 and 14.1.2.0.0. A low-privileged attacker with network HTTP access can exploit it (requiring human interaction and high complexity) to compromise all three security pillars ...

CVE-2026-61290

...

CVE-2026-61288

...

CVE-2026-61288

...

CVE-2026-61284

A HIGH-severity (CVSS 8.8) flaw in Oracle Enterprise Manager's Application Config Console affects versions 13.5 and 24.1; an HTTP-accessible, low-privilege attacker can fully compromise the platform (C/I/A impacts). Exploitation details and fix version are not provided in the documents; apply Ora...

CVE-2026-61284

...

CVE-2026-61273

...

CVE-2026-61268

...

CVE-2026-61265

...

CVE-2026-61265

...

CVE-2026-61231

Oracle Fusion Middleware's Virtual Directory Server (versions 12.2.1.4.0 and 14.1.2.0.0) is vulnerable to an easily exploitable LDAP-based attack by low-privileged attackers, enabling full server takeover with HIGH confidentiality, integrity, and availability impact (CVSS 8.8). Oracle's August 20...

CVE-2026-61229

Oracle WebCenter Portal (Fusion Middleware) Runtime Tools component, versions 12.2.1.4.0 and 14.1.2.0.0, is vulnerable to a HIGH-severity (CVSS 8.1) unauthenticated remote HTTP attack requiring high complexity; successful exploitation can fully compromise the application. No specific root cause o...

CVE-2026-61198

...

CVE-2026-61124

...

CVE-2026-61008

...

CVE-2026-61001

...

CVE-2026-60996

...

CVE-2026-60991

Oracle Identity Manager Connector (Core component, versions 12.2.1.4.0 and 14.1.2.1.0) has an easily exploitable local vulnerability allowing low-privileged attackers to fully compromise the product; Oracle's August 2026 CPU addresses it — apply patches from https://www.oracle.com/security-alerts...