CVE-2026-60577

CVE-2026-60577 concerns Oracle E-Business Suite’s Oracle Enterprise Command Center Framework, Core component, in the V16 line. The vulnerability enables a low-privileged, network-accessible attacker (via HTTP) to compromise the Enterprise Command Center Framework, potentially granting unauthorize...

CVE-2026-60579

The CVE affects Oracle E-Business Suite's Oracle Enterprise Command Center Framework (Core) with affected version V16. The vulnerability allows an unauthenticated attacker with access to the physical communication segment to compromise the framework. Impact includes unauthorized creation, deletio...

CVE-2026-60578

CVE-2026-60578 is a vulnerability in the Oracle Enterprise Command Center Framework (Oracle E-Business Suite, Core). Affected product version is V16. The flaw allows a high-privileged attacker with network access over HTTP to compromise the Oracle Enterprise Command Center Framework, with potenti...

CVE-2026-60576

The CVE-2026-60576 entry describes a vulnerability in Oracle E-Business Suite's Oracle Enterprise Command Center Framework (component: Core), affected in version V16. An attacker with high privileges can exploit it over HTTP with network access to potentially take over the Oracle Enterprise Comma...

CVE-2026-60575

The CVE concerns Oracle E-Business Suite’s Workflow component, specifically the Workflow Notification Mailer. Affected versions are 12.2.3–12.2.15. The issue allows a low-privilege attacker with HTTP network access to perform unauthorized updates/inserts/deletes and reads in Oracle Workflow data,...

CVE-2026-60572

The CVE-2026-60572 entry concerns Oracle E-Business Suite Integrated SOA Gateway (Web Service Provider) with affected versions 12.2.3–12.2.15. The vulnerability, described as easily exploitable, allows a low-privilege, network-accessible attacker over HTTP to compromise data: unauthorized update/...

CVE-2026-60569

CVE-2026-60569 affects Oracle MySQL Cluster (Cluster: NDB Operator) with affected versions 8.0.0–8.0.47, 8.4.0–8.4.10, and 9.7.0–9.7.1. The issue enables an unauthenticated attacker with access to the infrastructure hosting MySQL Cluster to compromise data, with potential unauthorized access to a...

CVE-2026-60567

...

CVE-2026-60567

CVE-2026-60567 affects Oracle Fusion Middleware’s Oracle Identity Manager (OIM) Legacy UI component. Affected versions are 12.2.1.4.0 and 14.1.2.1.0. The vulnerability allows unauthenticated, network-accessible attackers via HTTP to compromise OIM, potentially enabling creation, deletion, or modi...

CVE-2026-60565

The CVE-2026-60565 affects Oracle WebCenter Portal (Runtime Tools) within Oracle Fusion Middleware. Affected versions are 12.2.1.4.0 and 14.1.2.0.0. The vulnerability is exploitable with network access over HTTP by a low-privilege attacker and can lead to takeover of Oracle WebCenter Portal, with...

CVE-2026-60564

...

CVE-2026-60562

The CVE-2026-60562 affects Oracle WebCenter Portal (Runtime Tools) in Oracle Fusion Middleware for versions 12.2.1.4.0 and 14.1.2.0.0. It can be exploited by a low-privilege attacker over HTTP to take over WebCenter Portal, with potential scope changes affecting other products. The CVSS 3.1 base ...

CVE-2026-60560

...

CVE-2026-60558

Oracle WebCenter Sites (WebCenter Sites component) is affected in versions 12.2.1.4.0 and 14.1.2.0.0. The vulnerability allows an unauthenticated, network-accessible attacker over HTTP to compromise the application and can lead to takeover, with CVSS v3.1 base score 8.1 (C/H, I/H, A/H). The conne...

CVE-2026-60559

CVE-2026-60559 affects Oracle Access Manager (Authentication Engine) in Oracle Fusion Middleware. Affected versions are 12.2.1.4.0 and 14.1.2.1.0. The vulnerability is exploitable over HTTP without authentication and can lead to unauthorized access to data or full access to Oracle Access Manager ...

CVE-2026-60555

The CVE-2026-60555 entry concerns Oracle WebCenter Sites (Oracle Fusion Middleware WebCenter Sites). Affected supported versions are 12.2.1.4.0 and 14.1.2.0.0. The vulnerability is exploitable without authentication over HTTP and can lead to takeover of Oracle WebCenter Sites, per the description...

CVE-2026-60553

The CVE-2026-60553 affects Oracle WebCenter Sites (Oracle Fusion Middleware) on versions 12.2.1.4.0 and 14.1.2.0.0. The vulnerability is exploitable remotely over HTTP by an unauthenticated attacker, leading to unauthorized creation, deletion or modification of data, or complete access to Oracle ...

CVE-2026-60551

The CVE-2026-60551 entry concerns Oracle WebCenter Sites (Oracle Fusion Middleware) with affected versions 12.2.1.4.0 and 14.1.2.0.0. The vulnerability affects the WebCenter Sites component and allows an unauthenticated attacker who can reach the service over HTTP to compromise Oracle WebCenter S...

CVE-2026-60548

...

CVE-2026-60545

CVE-2026-60545 affects Oracle Fusion Middleware’s Oracle Managed File Transfer (MFT) Runtime Server. Affected versions are 12.2.1.4.0 and 14.1.2.0.0. The vulnerability is exploitable by a low-privilege, unauthenticated or minimally authenticated attacker over HTTP with network access, potentially...