23522 matches found
CVE-2026-61308
...
CVE-2026-61296
...
CVE-2026-61290
A HIGH-severity (CVSS 7.1) vulnerability in Oracle WebCenter Content's Content Server component affects versions 12.2.1.4.0 and 14.1.2.0.0. A low-privileged attacker with network HTTP access can exploit it (requiring human interaction and high complexity) to compromise all three security pillars ...
CVE-2026-61288
...
CVE-2026-61272
Oracle JD Edwards EnterpriseOne Tools (component: Web Runtime SEC , versions 9.2.0.0–9.2.26.4) is affected by a critical (CVSS 9.8) remotely exploitable vulnerability: an unauthenticated attacker over HTTP can fully compromise the application (C/I/A all High). Patch guidance is available in Oracl...
CVE-2026-61258
Affected : Oracle Internet Directory OID LDAP Server component in Oracle Fusion Middleware versions 12.2.1.4.0 and 14.1.2.1.0. Cause : unspecified; classified as "easily exploitable." Impact : unauthenticated network attacker via LDAP can fully compromise the directory (C:H/I:H/A:H, CVSS 9.8 Crit...
CVE-2026-61259
...
CVE-2026-61265
...
CVE-2026-61231
Oracle Fusion Middleware's Virtual Directory Server (versions 12.2.1.4.0 and 14.1.2.0.0) is vulnerable to an easily exploitable LDAP-based attack by low-privileged attackers, enabling full server takeover with HIGH confidentiality, integrity, and availability impact (CVSS 8.8). Oracle's August 20...
CVE-2026-61212
CVE-2026-61212 is a vulnerability in the Runtime Tools component of Oracle WebCenter Portal (Oracle Fusion Middleware), affecting versions 12.2.1.4.0 and 14.1.2.0.0 . A low-privileged attacker with network access via HTTP can exploit this vulnerability to achieve full takeover of Oracle WebCenter...
CVE-2026-61213
Oracle WebCenter Portal Runtime Tools in versions 12.2.1.4.0 and 14.1.2.0.0 is vulnerable to a network-based, low-complexity attack requiring only low privileges, enabling full system compromise (CVSS 8.8). No exploitation details are provided in the documents; Oracle's August 2026 CPU advisory i...
CVE-2026-61066
Oracle Identity Manager (component: OIM Legacy UI) in Fusion Middleware versions 12.2.1.4.0 and 14.1.2.1.0 has a critical (CVSS 9.9) flaw exploitable over RMI by a low-privileged network attacker, leading to full product takeover with scope change affecting additional products. Oracle's August 20...
CVE-2026-61058
...
CVE-2026-61042
CVE-2026-61042 affects Oracle WebCenter Sites (Oracle Fusion Middleware), versions 12.2.1.4.0 and 14.1.2.0.0 . A low-privileged attacker with network access via HTTP can exploit this vulnerability without user interaction to achieve full takeover of the application, with high impact on confidenti...
CVE-2026-61034
Oracle WebCenter Sites (component of Oracle Fusion Middleware) versions 12.2.1.4.0 and 14.1.2.0.0 have a critical (CVSS 9.1) remotely exploitable flaw allowing high-privileged attackers via HTTP to take over the application and impact additional products. No specific root cause or patch details a...
CVE-2026-61034
...
CVE-2026-61032
...
CVE-2026-61029
Oracle WebCenter Sites (component: WebCenter Sites) in Fusion Middleware versions 12.2.1.4.0 and 14.1.2.0.0 is vulnerable to a network-based attack. An unauthenticated remote attacker can compromise the application, potentially impacting additional products (scope change), with CVSS 9.0 critical ...
CVE-2026-61008
A critical (CVSS 9.1) unauthenticated, network-accessible HTTP vulnerability affects Oracle WebCenter Sites 12.2.1.4.0 and 14.1.2.0.0, allowing full confidentiality and integrity compromise. Oracle's August 2026 security advisory is the remediation source. Exploitation details are not provided in...