10713 matches found
CVE-2026-61188
...
CVE-2026-61182
CVE-2026-61182 affects Oracle Agile Product Lifecycle Management for Process, Data Import component, version 6.2.4. The description states an easily exploitable, local-privilege scenario where a high-privilege attacker with logon to the hosting infrastructure can compromise the product. CVSS v3.1...
CVE-2026-61175
...
CVE-2026-61178
CVE-2026-61178 affects Oracle Agile Product Lifecycle Management for Process (Installation component) in version 6.2.4. A unauthenticated attacker with network access via TCP can compromise the product, enabling takeover with CVSS 3.1 base score 9.8 (Impact: Confidentiality, Integrity, Availabili...
CVE-2026-61174
CVE-2026-61174 affects Oracle Product Lifecycle Analytics (Oracle Supply Chain), specifically the Installation Issues component in version 3.6.1. The issue allows a locally authenticated, non-privileged user to compromise the analytics product, with potential unauthorized read/write access to dat...
CVE-2026-61166
...
CVE-2026-61165
...
CVE-2026-61159
CVE-2026-61159 affects Oracle Commerce Guided Search / Oracle Commerce Experience Manager (component: Experience Manager) on version 11.4.0. The issue permits unauthenticated, network‑accessible HTTP access to compromise the product, with impact limited to confidentiality (CVSS 3.1: 7.5). Connect...
CVE-2026-61158
CVE-2026-61158 affects Oracle Commerce Guided Search / Oracle Commerce Experience Manager (component: Experience Manager) and is applicable to version 11.4.0. The vulnerability can be triggered by an unauthenticated attacker with network access via RMI to compromise the Product, potentially leadi...
CVE-2026-61155
...
CVE-2026-61128
CVE-2026-61128 affects Oracle MySQL products: MySQL Server (Optimizer) and MySQL Cluster, with affected versions MySQL Server 9.7.0–9.7.1 and MySQL Cluster 9.7.0–9.7.1. The vulnerability is described as exploitable by a high-privilege attacker who has network access via multiple protocols, potent...
CVE-2026-61125
Oracle E-Business Suite Configure to Order (Supply to Order Workbench) is affected in versions 12.2.3–12.2.15. A vulnerability allows a low-privilege, network-accessible attacker (via HTTP) to compromise Oracle Configure to Order, with potential scope expansion affecting additional products. Succ...
CVE-2026-61119
...
CVE-2026-61114
...
CVE-2026-61109
...
CVE-2026-61102
Vulnerability detail available for CVE-2026-61102 affecting Oracle Banking Trade Finance (Oracle Financial Services Applications) Infrastructure component. Affected versions are 14.6.0–14.8.0. The issue is exploitable over HTTP with network access by a low-privileged attacker, potentially allowin...
CVE-2026-61099
The CVE-2026-61099 entry concerns Oracle WebCenter Enterprise Capture (Client Bundle) with affected versions 12.2.1.4.0 and 14.1.2.0.0. The vulnerability is exploitable over HTTP by a low-privilege, network-accessible attacker and can result in takeover of Oracle WebCenter Enterprise Capture. CVS...
CVE-2026-61094
...