CVE-2026-60175

CVE-2026-60175 affects Oracle Database Server RDBMS: vulnerable versions are 19.3–19.31, 21.3–21.22, and 23.4.0–23.26.2. An attacker with Authenticated User privilege and network access via Oracle Net can exploit this low-privilege access to compromise the RDBMS and achieve takeover. CVSS 3.1 bas...

CVE-2026-60172

...

CVE-2026-60171

Vulnerability CVE-2026-60171 affects Oracle MySQL 8.0 MySQL Cluster (Server: Optimizer). Affected versions are 8.0.0–8.0.47. The issue allows a high-privilege attacker with network access via multiple protocols to cause a hang or frequent crash (complete DOS) of MySQL Cluster. CVSS 3.1 base score...

CVE-2026-60172

CVE-2026-60172 affects Oracle Autonomous Health Framework (AHF) via the Developer triaging platform. Versions 26.0.0, 26.1.0, and 26.2.0 are affected. The vulnerability is locally exploitable and requires high privileges with user interaction; successful exploitation can lead to takeover of AHF a...

CVE-2026-60171

...

CVE-2026-60173

CVE-2026-60173 affects Oracle Analytics’ BI Publisher component (BI Platform Security). Affected supported versions are 8.2.0.0.0 and 12.2.1.4.0. The vulnerability is exploitable over HTTP by an unauthenticated network attacker and can lead to takeover of Oracle BI Publisher, with a CVSS v3.1 bas...

CVE-2026-60169

...

CVE-2026-60170

Affected product: Oracle Hospitality Simphony (Oracle Food and Beverage Applications), component: POS. Vulnerable versions: 19.8-19.8.5, 19.9-19.9.3, and 19.10. The CVE describes an easily exploitable, unauthenticated network exploit via HTTP that could lead to unauthorized access to critical dat...

CVE-2026-60169

...

CVE-2026-60165

CVE-2026-60165 is a vulnerability in Oracle Cost Management within Oracle E-Business Suite (component: Enterprise Command Center). Affected product/version is EBS V16. The issue allows a high-privilege attacker with network access over HTTP to compromise Oracle Cost Management, enabling unauthori...

CVE-2026-60167

...

CVE-2026-60166

...

CVE-2026-60166

CVE-2026-60166 affects Oracle Java SE JavaFX. Affected product/version: Oracle Java SE 8u491. The vulnerability arises in JavaFX components and can be triggered by network-accessible vectors, with exploitation requiring user interaction. Successful exploitation could lead to unauthorized read acc...

CVE-2026-60164

...

CVE-2026-60163

...

CVE-2026-60160

...

CVE-2026-60160

...

CVE-2026-60162

The CVE-2026-60162 entry concerns Oracle VM VirtualBox (Core) affecting version 7.2.12. The vulnerability is described as exploitable by a high-privilege attacker who has local logon to the infrastructure where VirtualBox runs, potentially leading to unauthorized access to critical data and parti...

CVE-2026-60162

...

CVE-2026-60157

Oracle GoldenGate (Service Manager) is affected in versions 19.1.0.0.0–19.29.0.0, 21.3–21.21, and 23.4–23.26.1.0.0. The vulnerability allows a low-privilege attacker with network access over HTTP to compromise GoldenGate, potentially taking over the service. CVSS 3.1 base score is 8.8 (Confidenti...