CVE-2026-47046

...

CVE-2026-47045

...

CVE-2026-47045

CVE-2026-47045 affects the JDBC component in Oracle Database Server. Affected supported versions are 19.3–19.31, 21.3–21.22, and 23.4.0–23.26.2. The vulnerability allows a high-privileged attacker with network access via Oracle Net to compromise JDBC, requiring user interaction from a non-attacke...

CVE-2026-47044

...

CVE-2026-47044

...

CVE-2026-47045

...

CVE-2026-47041

...

CVE-2026-47037

CVE-2026-47037 affects Oracle Access Manager, a component of Oracle Fusion Middleware. The vulnerability is in the Authentication Engine for the affected product version 14.1.2.1.0 and is exploitable remotely over HTTP with low privileges, with potential for takeover of Oracle Access Manager as d...

CVE-2026-47035

...

CVE-2026-47035

...

CVE-2026-47034

...

CVE-2026-47034

CVE-2026-47034 affects Oracle Java SE 8u491 (JavaFX component). The vulnerability allows an unauthenticated attacker with network access via multiple protocols to compromise Java SE, with user interaction required. Impact includes possible unauthorized update/insert/delete of data accessible by J...

CVE-2026-47033

...

CVE-2026-47032

...

CVE-2026-47031

...

CVE-2026-47028

...

CVE-2026-47030

...

CVE-2026-47030

CVE-2026-47030 affects Oracle Java SE (JavaFX) with an impacted version of 8u491. The vulnerability is described as affecting client deployments that load untrusted code in sandboxed Java Web Start/applets, allowing a network-based, unauthenticated attacker to cause unauthorized updates or deleti...

CVE-2026-47027

CVE-2026-47027 affects Oracle Java SE (Libraries) across multiple supported versions: Oracle Java SE 8u491, 8u491-perf, 11.0.31, 17.0.19, 21.0.11, 25.0.3, 26.0.1; Oracle GraalVM for JDK: 17.0.19, 21.0.11; Oracle GraalVM Enterprise Edition: 21.3.18. The vulnerability allows an unauthenticated atta...

CVE-2026-47026

CVE-2026-47026 affects Oracle PeopleSoft Enterprise PeopleTools (OpenSearch Dashboards component) with affected versions 8.61 and 8.62. The vulnerability is exploitable over HTTP by a network-accessible, unauthenticated attacker and requires human interaction from a user other than the attacker. ...