CVE-2026-60456

...

CVE-2026-60434

...

CVE-2026-60429

CVE-2026-60429 affects Oracle Unified Directory (OUD Core) in Oracle Fusion Middleware. Affected versions are 12.2.1.4.0 and 14.1.2.1.0. The vulnerability allows a low-privileged attacker with LDAP network access to compromise OUD, with potential impact on connected products and complete takeover...

CVE-2026-60419

...

CVE-2026-60417

...

CVE-2026-60410

...

CVE-2026-60411

CVE-2026-60411 affects Oracle TimesTen In-Memory Database, component ttcserver, with affected version 26.1.1.1.0. The vulnerability allows an unauthenticated attacker with access to the physical communication segment to compromise TimesTen, potentially causing a hang or frequent crashes (complete...

CVE-2026-60396

...

CVE-2026-60396

The vulnerability CVE-2026-60396 affects Oracle GoldenGate (Distribution Server executable). Affected supported versions are 21.3-21.21 and 23.4-23.26.1. The issue is exploitable remotely over HTTPS by a high-privilege attacker, with potential takeover of Oracle GoldenGate and impacts to confiden...

CVE-2026-60389

CVE-2026-60389 affects Oracle Fusion Middleware’s Service Delivery Platform, specifically the Messaging Enabler. Affected products/versions are 12.2.1.4.0 and 14.1.2.0.0. The vulnerability is described as easily exploitable with network access over HTTP by an unauthenticated attacker, potentially...

CVE-2026-60380

The CVE-2026-60380 entry concerns Oracle Fusion Middleware’s Service Delivery Platform, specifically the Messaging Enabler component. Affected versions are 12.2.1.4.0 and 14.1.2.0.0. The vulnerability allows an unauthenticated attacker with network access over HTTP to compromise the Service Deliv...

CVE-2026-60349

Affected product: Oracle JDeveloper (Oracle Fusion Middleware), Java Business Objects component. Vulnerable versions: 12.2.1.4.0 and 14.1.2.0.0. Root cause/impact: low-privilege attacker with network access via HTTP can compromise JDeveloper, potentially leading to unauthorized data access or par...

CVE-2026-60347

The CVE-2026-60347 entry concerns Oracle JD Edwards EnterpriseOne Tools (Enterprise Infrastructure Security) affecting version 9.2.26.3. The vulnerability allows a low-privilege, logon-based attacker to modify accessible JD Edwards EnterpriseOne Tools data and potentially cause a partial denial o...

CVE-2026-60337

Technical details about CVE-2026-60337 are not publicly provided in the supplied documents. Monitor Oracle CPU July 2026 advisory and NVD entries for updates on affected versions, impact, and remediation.

CVE-2026-60324

The CVE-2026-60324 entry describes a vulnerability in Oracle MySQL Server and MySQL Cluster (component: Server: Optimizer) affecting MySQL Server 9.7.0–9.7.1 and MySQL Cluster 9.7.0–9.7.1. The issue enables a low-privileged, network-accessible attacker (via multiple protocols) to cause a hang or ...

CVE-2026-60320

...

CVE-2026-60321

...

CVE-2026-60315

...

CVE-2026-60310

Technical details are not publicly available in the provided documents. Monitor for updates.

CVE-2026-60302

The CVE concerns Oracle Coherence within Oracle Fusion Middleware (Core). Affected supported versions are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. The issue is exploitable over TCP by an unauthenticated remote attacker, with potential takeover of Oracle Coherence and impact to confiden...