CVE-2026-60677

...

CVE-2026-60675

CVE-2026-60675 affects Oracle E-Business Suite’s Oracle Applications Framework (OAF) – specifically the Search Bean component – in versions 12.2.3–12.2.15. The vulnerability enables a network-accessible, low-privilege attacker over HTTP to compromise OAF, potentially taking over the framework. CV...

CVE-2026-60675

...

CVE-2026-60673

...

CVE-2026-60673

The CVE-2026-60673 entry concerns Oracle BI Publisher (Oracle Analytics) with affected XML Services. Affected versions are 8.2.0.0.0, 12.2.1.4.0, and 26.01.0.0.0. The vulnerability is exploitable by a low-privilege attacker who has network access via HTTP, leading to unauthorized access to Oracle...

CVE-2026-60673

...

CVE-2026-60669

...

CVE-2026-60666

...

CVE-2026-60667

...

CVE-2026-60664

...

CVE-2026-60663

The CVE-2026-60663 entry relates to Oracle WebCenter Content (Web Content Management) in Oracle Fusion Middleware. Affected versions are 12.2.1.4.0 and 14.1.2.0.0. The flaw is exploitable by a low-privilege, unauthenticated or network-accessing attacker over HTTP, enabling takeover of Oracle WebC...

CVE-2026-60665

...

CVE-2026-60663

...

CVE-2026-60658

...

CVE-2026-60661

CVE-2026-60661 affects Oracle Solaris 11.4 (Filesystems). The vulnerability is exploitable by a low-privilege, logged-in user to compromise Oracle Solaris, with potential scope change affecting additional products and full takeover of Solaris. CVSS 3.1 base score 7.8 (HIGH) with local attack vect...

CVE-2026-60659

...

CVE-2026-60657

...

CVE-2026-60653

This CVE (CVE-2026-60653) concerns Oracle WebCenter Content (Web Content Management) with affected versions 12.2.1.4.0 and 14.1.2.0.0. The vulnerability allows a low-privilege, network-accessible attacker (HTTP) to modify or exfiltrate data, potentially gaining unauthorized access to all Oracle W...

CVE-2026-60654

...

CVE-2026-60652

The CVE-2026-60652 entry concerns Oracle WebCenter Content (Web Content Management) within Oracle Fusion Middleware. Affected supported versions are 12.2.1.4.0 and 14.1.2.0.0. The vulnerability is exploitable remotely over HTTP by a low-privileged attacker and, despite low privileges, requires us...