CVE-2026-60678

The CVE-2026-60678 affects Oracle E-Business Suite, Oracle General Ledger (Internal Operations) in supported 12.2.3–12.2.15 releases. The vulnerability allows a low-privilege attacker with network access via SOAP to compromise Oracle General Ledger, with potential takeover and impact to confident...

CVE-2026-60657

The CVE-2026-60657 entry concerns Oracle WebCenter Content (Content Server) within Oracle Fusion Middleware. Affected versions are 12.2.1.4.0 and 14.1.2.0.0. The vulnerability is exploitable by a low-privilege attacker who has network access via HTTP; exploitation is described as difficult and re...

CVE-2026-60634

CVE-2026-60634 affects Oracle WebCenter Content (Content Server) in Oracle Fusion Middleware. Affected versions are 12.2.1.4.0 and 14.1.2.0.0. The vulnerability allows an unauthenticated, network-accessible attacker to compromise WebCenter Content via HTTP and can lead to takeover; exploitation r...

CVE-2026-60595

CVE-2026-60595 affects Oracle PeopleSoft Enterprise FIN Pay/Bill Management (Paybill Management) on version 9.2. The underlying issue is within Paybill Management, enabling a low-privileged attacker who can log on to the infrastructure where PeopleSoft FIN Pay/Bill Management runs to compromise t...

CVE-2026-60585

The CVE-2026-60585 entry targets Oracle MySQL products (MySQL Server and MySQL Cluster) with a vulnerability in the Server: Replication component. Affected software ranges include MySQL Server 8.4.0–8.4.10 and 9.7.0–9.7.1, and MySQL Cluster 8.0.0–8.0.47, 8.4.0–8.4.10, and 9.7.0–9.7.1. The issue p...

CVE-2026-60558

Oracle WebCenter Sites (WebCenter Sites component) is affected in versions 12.2.1.4.0 and 14.1.2.0.0. The vulnerability allows an unauthenticated, network-accessible attacker over HTTP to compromise the application and can lead to takeover, with CVSS v3.1 base score 8.1 (C/H, I/H, A/H). The conne...

CVE-2026-60529

CVE-2026-60529 affects Oracle WebLogic Server Console in Oracle Fusion Middleware (versions 14.1.2.0.0 and 15.1.1.0.0). The vulnerability enables a high-privilege attacker with network access via HTTP to compromise the server, potentially taking over the WebLogic installation. The connected docum...

CVE-2026-60458

CVE-2026-60458 affects Oracle WebCenter Enterprise Capture (Client Bundle) within Oracle Fusion Middleware. Affected versions are 12.2.1.4.0 and 14.1.2.0.0. The vulnerability is exploitable over the network via T3/IIOP by a low-privilege attacker and can lead to takeover of the product, with CVSS...

CVE-2026-60454

CVE-2026-60454 affects Oracle HTTP Server (Core) in Oracle Fusion Middleware. Affected versions are 12.2.1.4.0 and 14.1.2.0.0. The vulnerability is described as easily exploitable with a low-privilege attacker who can log on to the infrastructure where Oracle HTTP Server runs, potentially leading...

CVE-2026-60450

Oracle WebCenter Content (Content Server) in Oracle Fusion Middleware is affected. Affected versions: 12.2.1.4.0 and 14.1.2.0.0. An unauthenticated attacker with network access via HTTPS can compromise the Content Server, potentially leading to takeover. CVSS 3.1 base score 8.1 (C/I/A). Root caus...

CVE-2026-60452

...

CVE-2026-60445

...

CVE-2026-60437

CVE-2026-60437 affects Oracle Unified Directory (OUD Core) within Oracle Fusion Middleware. Affected support versions are 12.2.1.4.0 and 14.1.2.1.0. The vulnerability enables a high-privilege attacker with network access via LDAP to compromise Oracle Unified Directory, potentially causing unautho...

CVE-2026-60428

...

CVE-2026-60421

...

CVE-2026-60408

CVE-2026-60408 affects Oracle TimesTen In-Memory Database (Kubernetes Operator) with version 26.1.1.1.0. The vulnerability allows a low-privileged attacker with network access over HTTPS to read a subset of TimesTen data. The CVSS v3.1 base score is 4.3 ( Confidentiality impact: Low; Privileges R...

CVE-2026-60408

...

CVE-2026-60407

...

CVE-2026-60403

...

CVE-2026-60403

CVE-2026-60403 affects Oracle TimesTen In-Memory Database (Kubernetes Operator component) with vulnerable version 26.1.1.1.0. An attacker with network access over HTTPS and low privileges can cause the database to hang or crash (DoS). CVSS 3.1 base score 6.5 (A:H; AV:N; AC:L; PR:L). No explicit e...