CVE-2026-60543

CVE-2026-60543 affects Oracle SOA Suite (Fusion Middleware) in the B2B Engine component, with affected versions 12.2.1.4.0 and 14.1.2.0.0. The vulnerability is described as unauthenticated, network-accessible via HTTP, allowing compromise of the Oracle SOA Suite and potential takeover. The CVSS v...

CVE-2026-60541

...

CVE-2026-60539

...

CVE-2026-60537

...

CVE-2026-60537

CVE-2026-60537 affects Oracle Fusion Middleware’s Oracle Managed File Transfer (MFT) Runtime Server. Affects 12.2.1.4.0 and 14.1.2.0.0. The issue allows a low-privileged attacker with network access over HTTP to compromise MFT, with potential takeover of the MFT component and impact to confidenti...

CVE-2026-60534

...

CVE-2026-60530

CVE-2026-60530 is a vulnerability in Oracle HTTP Server (Oracle Fusion Middleware), specifically in the mod_http2.so component. Affected software/version: Oracle HTTP Server 14.1.2.0.0. The issue enables a low-privileged attacker who can log on to the infrastructure where Oracle HTTP Server runs ...

CVE-2026-60532

...

CVE-2026-60527

...

CVE-2026-60528

...

CVE-2026-60526

...

CVE-2026-60523

The CVE-2026-60523 entry affects Oracle WebCenter Content (Content Server) in Oracle Fusion Middleware, with affected versions 12.2.1.4.0 and 14.1.2.0.0. The vulnerability allows network-based exploitation via HTTP, requires user interaction, and can lead to unauthorized data creation/deletion/mo...

CVE-2026-60523

...

CVE-2026-60520

...

CVE-2026-60521

...

CVE-2026-60519

...

CVE-2026-60501

...

CVE-2026-60503

...

CVE-2026-60499

...

CVE-2026-60497

CVE-2026-60497 affects Oracle JD Edwards EnterpriseOne CRM Foundation, specifically the CRM Foundation component in the 9.2 line. The vulnerability is exploitable with network access via JDENET by a low-privilege attacker and can lead to takeover of the CRM Foundation, per the CVSS 3.1 vector (AV...