CVE-2026-60623

...

CVE-2026-60577

...

CVE-2026-60549

...

CVE-2026-60548

The CVE concerns Oracle Fusion Middleware’s Oracle SOA Suite (Integration Business Insight) with affected versions 12.2.1.4.0 and 14.1.2.0.0. The issue is exploitable over HTTP with network access by a low-privileged attacker, potentially leading to unauthorized access to critical data or full ac...

CVE-2026-60496

...

CVE-2026-60460

...

CVE-2026-60423

Affected product: Oracle Unified Directory (OUD Core) within Oracle Fusion Middleware. Vulnerable versions: 12.2.1.4.0 and 14.1.2.1.0. Impact: Low-privilege attacker with network access via LDAP can compromise OUD and potentially take over the directory. Severity: CVSS v3.1 base score 8.8 (HIGH) ...

CVE-2026-60417

...

CVE-2026-60408

...

CVE-2026-60397

...

CVE-2026-60386

...

CVE-2026-60312

CVE-2026-60312 affects Oracle WebLogic Server (Fusion Middleware Core). Affected versions: 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, 15.1.1.0.0. The vulnerability allows an unauthenticated attacker with network access via T3 or IIOP to compromise the server and potentially takeover the Oracle WebLogic ...

CVE-2026-60302

...

CVE-2026-60295

...

CVE-2026-60230

CVE-2026-60230 affects Oracle Coherence (Core) within Oracle Fusion Middleware. Affects versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. The vulnerability allows an unauthenticated attacker with network access via TCP to compromise Oracle Coherence, potentially taking over the service....

CVE-2026-60206

...

CVE-2026-47058

CVE-2026-47058 affects Oracle Java SE (Scripting) on 8u491, 8u491-perf, and 11.0.31. The vulnerability enables an unauthenticated attacker over network protocols to compromise data confidentiality and integrity, potentially leading to unauthorized creation, deletion, or modification of data. The ...

CVE-2026-47040

...

CVE-2026-47032

...

CVE-2026-46988

The vulnerability affects Oracle Enterprise Manager Base Platform (Connector Framework) with affected versions 13.5 and 24.1. The root cause is not explicitly detailed in the provided documents, but the issue enables a high-privilege attacker who can reach the service over HTTPS to compromise the...