CVE-2026-60157

Oracle GoldenGate (Service Manager) is affected in versions 19.1.0.0.0–19.29.0.0, 21.3–21.21, and 23.4–23.26.1.0.0. The vulnerability allows a low-privilege attacker with network access over HTTP to compromise GoldenGate, potentially taking over the service. CVSS 3.1 base score is 8.8 (Confidenti...

CVE-2026-60155

...

CVE-2026-60146

...

CVE-2026-47064

...

CVE-2026-47063

...

CVE-2026-47052

CVE-2026-47052 is a vulnerability in Oracle MySQL Server and MySQL Cluster (InnoDB) affecting MySQL Server 8.4.0–8.4.10, 9.7.0–9.7.1 and MySQL Cluster 8.0.0–8.0.47, 8.4.0–8.4.10, 9.7.0–9.7.1. The issue enables a high-privilege attacker with network access via multiple protocols to cause a hang or...

CVE-2026-47046

...

CVE-2026-47045

CVE-2026-47045 affects the JDBC component in Oracle Database Server. Affected supported versions are 19.3–19.31, 21.3–21.22, and 23.4.0–23.26.2. The vulnerability allows a high-privileged attacker with network access via Oracle Net to compromise JDBC, requiring user interaction from a non-attacke...

CVE-2026-47044

...

CVE-2026-47041

...

CVE-2026-47035

...

CVE-2026-47035

...

CVE-2026-47028

...

CVE-2026-47023

The CVE-2026-47023 entry affects Oracle MySQL products: MySQL Server (versions 8.4.0–8.4.10, 9.7.0–9.7.1) and MySQL Cluster (8.0.0–8.0.47, 8.4.0–8.4.10, 9.7.0–9.7.1). It is described as an easily exploitable vulnerability allowing a high-privilege attacker, over network via multiple protocols, to...

CVE-2026-47017

The CVE-2026-47017 affects Oracle PeopleSoft Enterprise PeopleTools, specifically the Process Scheduler component, with affected versions 8.61 and 8.62. The vulnerability is exploitable over a network via HTTP by a low-privilege attacker and requires user interaction. Successful attacks can lead ...

CVE-2026-47007

CVE-2026-47007 affects Oracle Communications Pricing Design Center (On-premise Deployment). Affects versions 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0 and 15.2.0.0.0. The vulnerability allows a low-privileged user who can log on to the infrastructure running Oracle Communications Pricing Design Center t...

CVE-2026-47003

CVE-2026-47003 affects Oracle Enterprise Manager Base Platform, specifically the UI Framework. Affected versions are 13.5 and 24.1. The vulnerability is exploitable over a network via HTTPS by an unauthenticated attacker, potentially leading to unauthorized access to critical data or the entire s...

CVE-2026-47004

CVE-2026-47004 affects Oracle Enterprise Manager Base Platform (Self Update Framework) in versions 13.5 and 24.1. The vulnerability allows a low-privileged attacker with HTTPS network access to compromise the Base Platform, potentially leading to takeover. The provided documents do not specify ex...

CVE-2026-47000

Oracle Enterprise Manager Base Platform (Security Framework) is affected in version 24.1. The CVE-2026-47000 entry indicates an easily exploitable vulnerability that allows a low-privileged, network-accessing attacker (HTTPS) to compromise the Base Platform. Successful attacks can lead to unautho...

CVE-2026-46994

CVE-2026-46994 affects Oracle Enterprise Manager Base Platform (Oracle Enterprise Manager) - Agent Next Gen component. Affected supported versions are 13.5 and 24.1. The vulnerability allows an unauthenticated attacker with network access over HTTPS to compromise the Base Platform, potentially le...