CVE-2026-60449

...

CVE-2026-60445

...

CVE-2026-60446

...

CVE-2026-60422

...

CVE-2026-60422

CVE-2026-60422 affects Oracle Fusion Middleware’s Oracle Unified Directory (OUD Core). The vulnerable product is Oracle Unified Directory 14.1.2.1.0. The vulnerability allows a low-privilege attacker who can access OUD via LDAP over the network to compromise the directory, with potential unauthor...

CVE-2026-60423

Affected product: Oracle Unified Directory (OUD Core) within Oracle Fusion Middleware. Vulnerable versions: 12.2.1.4.0 and 14.1.2.1.0. Impact: Low-privilege attacker with network access via LDAP can compromise OUD and potentially take over the directory. Severity: CVSS v3.1 base score 8.8 (HIGH) ...

CVE-2026-60404

...

CVE-2026-60398

Oracle GoldenGate Microservices is affected in 19.1.0.0.0–19.30.0.0, 21.3–21.21, and 23.4–23.26.1. The vulnerability can be exploited by a low-privileged, network-access attacker via HTTP to take over Oracle GoldenGate. CVSS v3.1 base score is 8.8 (C/H, I/H, A/H). No exploitation details are prov...

CVE-2026-60383

The CVE-2026-60383 entry concerns Oracle Fusion Middleware’s Service Delivery Platform, specifically the Messaging Enabler component. Affected versions are 12.2.1.4.0 and 14.1.2.0.0. The vulnerability is described as easily exploitable by a low-privileged user with logon to the infrastructure run...

CVE-2026-60363

CVE-2026-60363 affects Oracle HTTP Server (Apache Plugin) in Oracle Fusion Middleware. Affected: 12.2.1.4.0 and 14.1.2.0.0. The flaw allows unauthenticated, network-based HTTP access that can lead to takeover of Oracle HTTP Server (CVSS 3.1 base score 9.8). Connected sources confirm vulnerable co...

CVE-2026-60344

The CVE-2026-60344 entry concerns Oracle E-Business Suite’s Oracle HRMS (France) with the French HR Payroll component. Affected releases are 12.2.3 through 12.2.15. The issue is exploitable by a low-privilege attacker over HTTP on the network, potentially enabling unauthorized update, insert, or ...

CVE-2026-60337

...

CVE-2026-60335

...

CVE-2026-60335

CVE-2026-60335 affects Oracle WebCenter Content (Content Server) in Oracle Fusion Middleware. Affected versions are 12.2.1.4.0 and 14.1.2.0.0. The vulnerability is exploitable by a high-privilege attacker with network access via HTTP and can lead to takeover of Oracle WebCenter Content (CVSS 3.1 ...

CVE-2026-60327

...

CVE-2026-60322

...

CVE-2026-60323

...

CVE-2026-60321

...

CVE-2026-60305

CVE-2026-60305 affects Oracle Coherence (Core) within Oracle Fusion Middleware. Affected versions are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. The vulnerability is exploitable over TCP with network access by a low-privilege attacker, leading to unauthorized create/delete/modify access ...

CVE-2026-60288

CVE-2026-60288 affects Oracle Coherence (Core) within Oracle Fusion Middleware. Affected versions include 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. The vulnerability is described as easily exploitable with unauthenticated network access via TCP, potentially allowing takeover of Oracle C...