CVE-2026-60708

CVE-2026-60708 affects Oracle E-Business Suite, Oracle Process Manufacturing Financials (Internal Operations). Affected versions are 12.2.3–12.2.15. The vulnerability can be triggered by a low-privileged attacker over HTTP with network access, potentially enabling creation, deletion or modificati...

CVE-2026-60701

CVE-2026-60701 is a vulnerability in Oracle E-Business Suite’s Oracle Universal Work Queue, specifically the Work Provider Site Level Administration component. Affected versions are 12.2.3–12.2.15. The issue can be exploited by a high-privilege attacker with network access via HTTP to compromise ...

CVE-2026-60700

...

CVE-2026-60692

CVE-2026-60692 affects Oracle E-Business Suite’s Oracle Enterprise Asset Management (Internal Operations) with affected versions 12.2.3 through 12.2.15. The vulnerability can be exploited by a low-privileged attacker over HTTP from the network, with no user interaction required, leading to takeov...

CVE-2026-60692

...

CVE-2026-60685

...

CVE-2026-60677

...

CVE-2026-60666

...

CVE-2026-60663

...

CVE-2026-60652

...

CVE-2026-60646

...

CVE-2026-60639

...

CVE-2026-60603

CVE-2026-60603 affects Oracle PeopleSoft: PeopleSoft Enterprise CS Student Records, Australian Features component, versions 9.2.38. A low-privileged attacker with network access over HTTP can compromise the affected system, potentially taking over the PeopleSoft CS Student Records instance (CVSS ...

CVE-2026-60602

The CVE affects Oracle PeopleSoft Enterprise CS Student Financials Billing (component: Billing), specifically version 9.2.38. It describes a vulnerability that lets a low-privileged user with network access via HTTP compromise the system and potentially takeover PeopleSoft CS Student Financials. ...

CVE-2026-60600

CVE-2026-60600 affects Oracle PeopleSoft Enterprise FIN Project Costing (component: Projects) for the supported 9.2 version. The vulnerability is exploitable by a local attacker who has logon access to the infrastructure hosting PeopleSoft FIN Project Costing and requires user interaction, with t...

CVE-2026-60572

The CVE-2026-60572 entry concerns Oracle E-Business Suite Integrated SOA Gateway (Web Service Provider) with affected versions 12.2.3–12.2.15. The vulnerability, described as easily exploitable, allows a low-privilege, network-accessible attacker over HTTP to compromise data: unauthorized update/...

CVE-2026-60567

CVE-2026-60567 affects Oracle Fusion Middleware’s Oracle Identity Manager (OIM) Legacy UI component. Affected versions are 12.2.1.4.0 and 14.1.2.1.0. The vulnerability allows unauthenticated, network-accessible attackers via HTTP to compromise OIM, potentially enabling creation, deletion, or modi...

CVE-2026-60557

CVE-2026-60557 affects Oracle WebCenter Sites (Oracle Fusion Middleware) in versions 12.2.1.4.0 and 14.1.2.0.0. The issue allows an unauthenticated attacker with network access over HTTP to compromise WebCenter Sites, with human interaction required for exploitation. Impact per sources: potential...

CVE-2026-60552

...

CVE-2026-60526

CVE-2026-60526 is a vulnerability in Oracle Java SE (component: Installation). It affects Oracle Java SE 8u491 and 8u491-perf. The issue is exploitable by a low-privileged user with logon to the infrastructure where Oracle Java SE runs; exploitation is difficult (high attack complexity) and requi...