11045 matches found
CVE-2026-61124
The Runtime Tools component of Oracle WebCenter Portal (versions 12.2.1.4.0 and 14.1.2.0.0) has a network-reachable, easily exploitable flaw requiring only human interaction. An unauthenticated attacker can achieve high-integrity data modification or deletion and partial denial of service. No exp...
CVE-2026-61118
...
CVE-2026-61022
...
CVE-2026-61008
A critical (CVSS 9.1) unauthenticated, network-accessible HTTP vulnerability affects Oracle WebCenter Sites 12.2.1.4.0 and 14.1.2.0.0, allowing full confidentiality and integrity compromise. Oracle's August 2026 security advisory is the remediation source. Exploitation details are not provided in...
CVE-2026-61008
...
CVE-2026-60967
The nVision component of Oracle PeopleSoft Enterprise PeopleTools (versions 8.61-8.63) is affected by a HIGH severity vulnerability (CVSS 8.8). An unauthenticated attacker with network access via HTTP can exploit it with low complexity, requiring only user interaction, to compromise the applicati...
CVE-2026-60946
...
CVE-2026-60933
...
CVE-2026-60902
CVE-2026-60902 is a vulnerability in the Tuxedo component of Oracle PeopleSoft Enterprise PeopleTools , affecting versions 8.61–8.63 . A low-privileged attacker with local logon access can exploit this vulnerability (with high attack complexity) to achieve full system takeover , resulting in high...
CVE-2026-60895
A vulnerability in Oracle Unified Directory's OUD Core component affects versions 12.2.1.4.0 and 14.1.2.1.0. A low-privileged network attacker exploiting via LDAP can gain unauthorized creation, deletion, or modification access to critical data. CVSS 3.1 score is 6.8 (Medium), with high confident...
CVE-2026-60865
...
CVE-2026-60866
...
CVE-2026-60873
...
CVE-2026-60865
Oracle Fusion Middleware's Service Delivery Platform Messaging Enabler component (versions 14.1.2.0.0 and 12.2.1.4.0) is vulnerable to network-based HTTP attacks by high-privileged attackers, allowing unauthorized access to critical data with scope-change impact across additional products. CVSS 3...
CVE-2026-60853
...
CVE-2026-60849
Oracle Unified Directory (OUD Core) versions 12.2.1.4.0 and 14.1.2.1.0 have a HIGH-severity (CVSS 8.5) LDAP network vulnerability exploitable by low-privileged attackers, enabling full product takeover with scope change; Oracle's August 2026 CPU advisory is the primary remediation source.
CVE-2026-60830
...
CVE-2026-60781
...