12132 matches found
CVE-2026-61308
A medium-severity (CVSS 6.8) vulnerability in the Networking component of Oracle Java SE (8u501 through 26.0.2), GraalVM for JDK (17.0.20, 21.0.12), and GraalVM Enterprise Edition (21.3.19) allows unauthenticated remote attackers via HTTP to access critical data with high confidentiality impact; ...
CVE-2026-61290
A HIGH-severity (CVSS 7.1) vulnerability in Oracle WebCenter Content's Content Server component affects versions 12.2.1.4.0 and 14.1.2.0.0. A low-privileged attacker with network HTTP access can exploit it (requiring human interaction and high complexity) to compromise all three security pillars ...
CVE-2026-61288
...
CVE-2026-61284
A HIGH-severity (CVSS 8.8) flaw in Oracle Enterprise Manager's Application Config Console affects versions 13.5 and 24.1; an HTTP-accessible, low-privilege attacker can fully compromise the platform (C/I/A impacts). Exploitation details and fix version are not provided in the documents; apply Ora...
CVE-2026-61273
...
CVE-2026-61259
...
CVE-2026-61229
Oracle WebCenter Portal (Fusion Middleware) Runtime Tools component, versions 12.2.1.4.0 and 14.1.2.0.0, is vulnerable to a HIGH-severity (CVSS 8.1) unauthenticated remote HTTP attack requiring high complexity; successful exploitation can fully compromise the application. No specific root cause o...
CVE-2026-61227
CVE-2026-61227 affects the Runtime Tools component of Oracle WebCenter Portal (Oracle Fusion Middleware), versions 12.2.1.4.0 and 14.1.2.0.0 . A low-privileged attacker with network access via HTTP can exploit this vulnerability, though user interaction is required . Due to a scope change , succe...
CVE-2026-61124
The Runtime Tools component of Oracle WebCenter Portal (versions 12.2.1.4.0 and 14.1.2.0.0) has a network-reachable, easily exploitable flaw requiring only human interaction. An unauthenticated attacker can achieve high-integrity data modification or deletion and partial denial of service. No exp...
CVE-2026-61118
...
CVE-2026-61022
...
CVE-2026-61008
A critical (CVSS 9.1) unauthenticated, network-accessible HTTP vulnerability affects Oracle WebCenter Sites 12.2.1.4.0 and 14.1.2.0.0, allowing full confidentiality and integrity compromise. Oracle's August 2026 security advisory is the remediation source. Exploitation details are not provided in...
CVE-2026-61008
...
CVE-2026-60967
The nVision component of Oracle PeopleSoft Enterprise PeopleTools (versions 8.61-8.63) is affected by a HIGH severity vulnerability (CVSS 8.8). An unauthenticated attacker with network access via HTTP can exploit it with low complexity, requiring only user interaction, to compromise the applicati...
CVE-2026-60946
...
CVE-2026-60933
...
CVE-2026-60895
A vulnerability in Oracle Unified Directory's OUD Core component affects versions 12.2.1.4.0 and 14.1.2.1.0. A low-privileged network attacker exploiting via LDAP can gain unauthorized creation, deletion, or modification access to critical data. CVSS 3.1 score is 6.8 (Medium), with high confident...
CVE-2026-60902
CVE-2026-60902 is a vulnerability in the Tuxedo component of Oracle PeopleSoft Enterprise PeopleTools , affecting versions 8.61–8.63 . A low-privileged attacker with local logon access can exploit this vulnerability (with high attack complexity) to achieve full system takeover , resulting in high...