CVE-2026-60635

...

CVE-2026-60631

...

CVE-2026-60615

...

CVE-2026-60594

...

CVE-2026-60577

...

CVE-2026-60555

The CVE-2026-60555 entry concerns Oracle WebCenter Sites (Oracle Fusion Middleware WebCenter Sites). Affected supported versions are 12.2.1.4.0 and 14.1.2.0.0. The vulnerability is exploitable without authentication over HTTP and can lead to takeover of Oracle WebCenter Sites, per the description...

CVE-2026-60556

The CVE-2026-60556 entry concerns Oracle WebCenter Sites (Oracle Fusion Middleware). Affected: WebCenter Sites components in Oracle Fusion Middleware versions 12.2.1.4.0 and 14.1.2.0.0. The vulnerability allows an unauthenticated, network-accessible attacker via HTTP to compromise WebCenter Sites...

CVE-2026-60550

...

CVE-2026-60549

CVE-2026-60549 affects Oracle Fusion Middleware’s Oracle Managed File Transfer (MFT Runtime Server) in 12.2.1.4.0 and 14.1.2.0.0. The vulnerability allows a low-privileged attacker with network access over HTTP to compromise Oracle MFT, potentially leading to takeover of the MFT component. The CV...

CVE-2026-60546

...

CVE-2026-60542

CVE-2026-60542 affects Oracle Fusion Middleware’s Oracle Business Process Management Suite (Human Workflow) in versions 12.2.1.4.0 and 14.1.2.0.0. The vulnerability allows a low-privileged attacker with network access via T3/IIOP to compromise the BPM Suite; attacks may impact additional products...

CVE-2026-60536

...

CVE-2026-60531

CVE-2026-60531 affects Oracle Identity Manager Connector (Oracle Fusion Middleware), Core component. Affected versions: 12.2.1.4.0 and 14.1.2.1.0. The issue allows a low-privilege attacker with network access over HTTP to compromise the Oracle Identity Manager Connector, with potential scope expa...

CVE-2026-60525

...

CVE-2026-60523

The CVE-2026-60523 entry affects Oracle WebCenter Content (Content Server) in Oracle Fusion Middleware, with affected versions 12.2.1.4.0 and 14.1.2.0.0. The vulnerability allows network-based exploitation via HTTP, requires user interaction, and can lead to unauthorized data creation/deletion/mo...

CVE-2026-60443

CVE-2026-60443 affects Oracle WebCenter Content (Content Server) in Oracle Fusion Middleware. Affected versions: 12.2.1.4.0 and 14.1.2.0.0. It is exploitable with network access via HTTP by a low-privilege user and requires user interaction. Successful attacks can lead to unauthorized creation/de...

CVE-2026-60409

...

CVE-2026-60406

CVE-2026-60406 affects Oracle TimesTen In-Memory Database (Kubernetes Operator component) with vulnerable version 26.1.1.1.0. The vulnerability allows a high-privilege attacker who can log on to the infrastructure running TimesTen In-Memory Database to compromise the database, potentially taking ...

CVE-2026-60405

...

CVE-2026-60384

CVE-2026-60384 affects Oracle Fusion Middleware’s Service Delivery Platform, specifically the Messaging Enabler. Affected versions are 12.2.1.4.0 and 14.1.2.0.0. An unauthenticated attacker with network access via T3/IIOP can compromise the Service Delivery Platform, with potential takeover and i...