CVE-2026-60519

...

CVE-2026-60521

...

CVE-2026-60502

CVE-2026-60502 affects Oracle WebCenter Content: Imaging (Core) with vulnerable versions 12.2.1.4.0 and 14.1.2.0.0. The vulnerability allows a high-privilege attacker with network access via T3/ IIOP to compromise WebCenter Content: Imaging, potentially leading to takeover. CVSS v3.1 base score 7...

CVE-2026-60471

The CVE-2026-60471 entry concerns Oracle WebCenter Content: Imaging (Core) with affected versions 12.2.1.4.0 and 14.1.2.0.0. The vulnerability allows an unauthenticated attacker with access to the local network segment hosting WebCenter Content: Imaging to compromise the application, potentially ...

CVE-2026-60462

...

CVE-2026-60464

...

CVE-2026-60463

...

CVE-2026-60457

...

CVE-2026-60451

...

CVE-2026-60449

...

CVE-2026-60442

CVE-2026-60442 affects Oracle Fusion Middleware Service Delivery Platform (Messaging Enabler) for 12.2.1.4.0 and 14.1.2.0.0. An unauthenticated attacker with network access over T3/IIOP can compromise the Service Delivery Platform, potentially leading to takeover (CVSS 3.1 base 9.8). Root cause a...

CVE-2026-60431

...

CVE-2026-60429

...

CVE-2026-60395

...

CVE-2026-60388

...

CVE-2026-60356

...

CVE-2026-60331

...

CVE-2026-60327

CVE-2026-60327 affects Oracle Access Manager (Authentication Engine) within Oracle Fusion Middleware. Affects 12.2.1.4.0 and 14.1.2.1.0; the issue allows unauthenticated, network-accessible HTTP compromise of Oracle Access Manager, potentially granting unauthorized access to data. The vulnerabili...

CVE-2026-60320

Summary: CVE-2026-60320 affects Oracle Data Integrator (Oracle Fusion Middleware) Patchset Assistant in versions 12.2.1.4.0 and 14.1.2.0.0. An unauthenticated, network-accessible attacker can exploit via HTTP to gain unauthorized access to data. The base score is 7.5 (CVSSv3.1, HIGH). The connect...

CVE-2026-60304

CVE-2026-60304 affects Oracle Coherence (Core) within Oracle Fusion Middleware. Affects supported versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. The flaw allows a low-privileged, network-accessible attacker (TCP) to cause a hang or repeatable crash (complete denial of service) in Or...