CVE-2026-60623

CVE-2026-60623 affects Oracle MySQL Connector/J in MySQL Connectors. Affected versions are 9.7.0–9.7.1. The vulnerability is exploitable with network access via multiple protocols by a low-privilege attacker and can lead to unauthorized creation, deletion, or modification of data, unauthorized ac...

CVE-2026-60623

...

CVE-2026-60621

CVE-2026-60621 affects Oracle JD Edwards EnterpriseOne Tools (Web Runtime Security) with vulnerable version 9.2.26.3. The issue allows an unauthenticated attacker, over HTTP, to compromise JD Edwards EnterpriseOne Tools, potentially taking over the tools. CVSS 3.1 base score is 8.1 (HIGH) with ne...

CVE-2026-60616

The CVE-2026-60616 entry concerns Oracle PeopleSoft (CS Campus Community) 9.2.38. The vulnerability affects the Security component and can be exploited by an unauthenticated attacker over HTTP with network access, potentially leading to unauthorized data access and unauthorized update/insert/dele...

CVE-2026-60615

...

CVE-2026-60617

The CVE-2026-60617 entry concerns Oracle PeopleSoft: PeopleSoft Enterprise CS Campus Community (Security) affected in version 9.2.38. The vulnerability is exploitable remotely over HTTP by an unauthenticated attacker, allowing unauthorized creation, deletion or modification of data across the Cam...

CVE-2026-60617

...

CVE-2026-60607

CVE-2026-60607 affects Oracle PeopleSoft: PeopleSoft Enterprise CS Financial Aid, FM Need Analysis Calculator, version 9.2.38. The vulnerability allows a low-privileged user who can log on to the infrastructure running PeopleSoft Enterprise CS Financial Aid to compromise the component, potentiall...

CVE-2026-60607

...

CVE-2026-60608

...

CVE-2026-60604

...

CVE-2026-60606

...

CVE-2026-60606

CVE-2026-60606 affects Oracle PeopleSoft (CC Common Application Objects) on version 9.2. The vulnerability is in the Common Application Objects component and is exploitable without authentication over HTTP, enabling unauthorized creation/modification/deletion of data and access to all CC Common A...

CVE-2026-60600

CVE-2026-60600 affects Oracle PeopleSoft Enterprise FIN Project Costing (component: Projects) for the supported 9.2 version. The vulnerability is exploitable by a local attacker who has logon access to the infrastructure hosting PeopleSoft FIN Project Costing and requires user interaction, with t...

CVE-2026-60599

...

CVE-2026-60599

The CVE-2026-60599 entry applies to Oracle PeopleSoft: Enterprise CS Student Records, specifically the Research Tracking component, affected in version 9.2.38. The vulnerability is exploitable with network access over HTTPS by a low-privilege attacker, leading to unauthorized creation, deletion o...

CVE-2026-60597

...

CVE-2026-60595

...

CVE-2026-60586

CVE-2026-60586 affects Oracle MySQL Connector/J (9.7.0–9.7.1). The vulnerability in MySQL Connectors allows a low-privileged, network-accessing attacker to compromise Connector/J via multiple protocols. Attacks may impact additional products (scope change) and can lead to unauthorized access to d...

CVE-2026-60585

The CVE-2026-60585 entry targets Oracle MySQL products (MySQL Server and MySQL Cluster) with a vulnerability in the Server: Replication component. Affected software ranges include MySQL Server 8.4.0–8.4.10 and 9.7.0–9.7.1, and MySQL Cluster 8.0.0–8.0.47, 8.4.0–8.4.10, and 9.7.0–9.7.1. The issue p...