CVE-2026-62473

CVE-2026-62473 affects Oracle E-Business Suite Installed Base (component: Create Item Instance). Affected: 12.2.3–12.2.15. An attacker with network access via HTTP and low privileges can compromise Oracle Installed Base, enabling unauthorized creation, deletion or modification of critical data, u...

CVE-2026-62445

...

CVE-2026-61327

CVE-2026-61327 affects Oracle E-Business Suite's Oracle Bills of Materials (component: Internal Operations) on supported 12.2.13–12.2.15. The vulnerability allows a low-privileged, unauthenticated (network access via HTTP) attacker to unauthorizedly create, delete, or modify critical data within ...

CVE-2026-61316

...

CVE-2026-61311

The CVE-2026-61311 entry affects Oracle E-Business Suite’s Oracle Product Hub (Internal Operations) with affected versions 12.2.3–12.2.15. The vulnerability allows a low-privileged attacker with network access over HTTP to take over Oracle Product Hub, per the NVD entry and Oracle security alert....

CVE-2026-61257

...

CVE-2026-61234

CVE-2026-61234 affects Oracle PeopleSoft Enterprise FIN Common Objects Brazil (component: eProcurement), with affected version 9.1. Affected in unauthenticated, network-accessible via HTTP; impacts include unauthorized create/delete/modify of data and full data access (C/H I/H A:N). The root caus...

CVE-2026-61226

...

CVE-2026-61202

CVE-2026-61202 affects Oracle Solaris (Utility) with targeted impact on versions 11.3 and 11.4. The vulnerability is exploitable by a low-privilege user who can log on to the infrastructure where Oracle Solaris runs, resulting in compromised Solaris and potential scope expansion to other products...

CVE-2026-61188

...

CVE-2026-61172

...

CVE-2026-61151

...

CVE-2026-61148

Summary: CVE-2026-61148 affects Oracle Commerce Guided Search / Oracle Commerce Experience Manager (component: Experience Manager) with affected version 11.4.0. The vulnerability is exploitable by a low-privilege user over HTTP with network access and can lead to takeover of the Guided Search/Exp...

CVE-2026-61128

CVE-2026-61128 affects Oracle MySQL products: MySQL Server (Optimizer) and MySQL Cluster, with affected versions MySQL Server 9.7.0–9.7.1 and MySQL Cluster 9.7.0–9.7.1. The vulnerability is described as exploitable by a high-privilege attacker who has network access via multiple protocols, potent...

CVE-2026-61116

...

CVE-2026-61106

...

CVE-2026-61106

CVE-2026-61106 affects Oracle GoldenGate, specifically the Config Service Executable. Affected versions are 23.4 through 23.26.2. The vulnerability is exploitable remotely over HTTP by an unauthenticated attacker, with potential for takeover of Oracle GoldenGate and impacts to confidentiality, in...

CVE-2026-61088

...

CVE-2026-61085

...

CVE-2026-61063

CVE-2026-61063 describes a vulnerability in Oracle PeopleSoft: SCM Supplier Contract Management (component: Security) for the 9.2 line. The vulnerability allows a local, low-privilege user with logon to the infrastructure where PeopleSoft SCM Supplier Contract Management runs to compromise the af...