CVE-2026-60718

CVE-2026-60718 affects Oracle MySQL products: MySQL Server (Server: JSON) and MySQL Cluster, versioned 9.7.0–9.7.1. The vulnerability, arising in the Server JSON component, allows a low-privileged, network-accessible attacker via multiple protocols to cause a hang or frequent crash (DoS) of the M...

CVE-2026-60723

CVE-2026-60723 affects Oracle Data Integrator (Oracle Fusion Middleware), specifically the Market Place component. Affected versions are 12.2.1.4.0 and 14.1.2.0.0. The vulnerability allows a low-privilege user with logon to the underlying infrastructure to compromise Oracle Data Integrator, with ...

CVE-2026-60719

CVE-2026-60719 affects Oracle Analytics’ Oracle BI Publisher Web Service API. Affected: 8.2.0.0.0, 12.2.1.4.0, 26.01.0.0.0. A low-privilege attacker with network access over HTTP can compromise Oracle BI Publisher, potentially exposing or altering confidential data across Oracle BI Publisher data...

CVE-2026-60714

...

CVE-2026-60717

...

CVE-2026-60713

...

CVE-2026-60711

...

CVE-2026-60712

...

CVE-2026-60710

...

CVE-2026-60710

...

CVE-2026-60710

The CVE-2026-60710 entry concerns Oracle EDI Gateway (Oracle E-Business Suite) in the Internal Operations component, affected in versions 12.2.3–12.2.15. The vulnerability is exploitable over a network via HTTP by a low-privileged attacker, leading to unauthorized creation, deletion, or modificat...

CVE-2026-60708

...

CVE-2026-60709

...

CVE-2026-60704

...

CVE-2026-60704

...

CVE-2026-60706

...

CVE-2026-60700

The CVE-2026-60700 entry concerns Oracle E-Business Suite Oracle Universal Work Queue (UWQ) server issues. Affected are 12.2.3–12.2.15; the flaw allows unauthenticated, HTTP-accessible remote compromise, with human interaction required, leading to unauthorized creation/deletion/modification of UW...

CVE-2026-60697

...

CVE-2026-60695

The CVE-2026-60695 entry concerns Oracle E-Business Suite’s Oracle Enterprise Asset Management (Internal Operations) with affected versions 12.2.3–12.2.15. The vulnerability, described across NVD/NVD mirror entries, allows a highly-privileged attacker who can reach the system over HTTP to comprom...

CVE-2026-60694

The CVE-2026-60694 entry is associated with Oracle Enterprise Asset Management (Oracle E-Business Suite) Internal Operations, affected on 12.2.3–12.2.15. The vulnerability is exploitable by a low-privileged attacker with network access over HTTP and requires user interaction. Successful exploitat...