ROOT-OS-DEBIAN-13-CVE-2025-38660 CVE-2025-38660 in rootio-linux - Patched by Root

Root has patched CVE-2025-38660 in the rootio-linux package for Root:Debian:13. Multiple fixed versions available...

CVE-2026-62472

The CVE-2026-62472 affects Oracle Installed Base in Oracle E-Business Suite (component: Create Item Instance) for versions 12.2.4–12.2.15. An attacker with network access via HTTP and low privileges can cause unauthorized creation, deletion, or modification of critical Oracle Installed Base data,...

CVE-2026-62443

CVE-2026-62443 affects Oracle Contracts Integration in Oracle E-Business Suite (Internal Operations). Affected versions are 12.2.3–12.2.15. An unauthenticated attacker with network access via HTTP can compromise the component, with successful attacks requiring user interaction. Impacts include un...

CVE-2026-61320

CVE-2026-61320 affects Oracle E‑Business Suite Payables (Internal Operations) in 12.2.8–12.2.15. The vulnerability is exploitable over HTTP with low privileges and can lead to takeover of Oracle Payables (CVSS v3.1 base 8.8). Oracle’s July 2026 CPU advisory contains the patches for this issue; ap...

CVE-2026-61299

CVE-2026-61299 affects Oracle E-Business Suite's Oracle Process Manufacturing Logistics (Internal Operations) with affected versions 12.2.3–12.2.15. The vulnerability enables a low-privilege attacker with network access over HTTP to compromise the PM Logistics data, potentially leading to unautho...

CVE-2026-61210

CVE-2026-61210 affects Oracle PeopleSoft Enterprise SCM Manufacturing (component: Security) for the 9.2 release. The vulnerability is exploitable over HTTPS with network access and requires no authentication, enabling an attacker to perform unauthorized creation, deletion, or modification of data...

CVE-2026-61182

CVE-2026-61182 affects Oracle Agile Product Lifecycle Management for Process, Data Import component, version 6.2.4. The description states an easily exploitable, local-privilege scenario where a high-privilege attacker with logon to the hosting infrastructure can compromise the product. CVSS v3.1...

CVE-2026-61178

CVE-2026-61178 affects Oracle Agile Product Lifecycle Management for Process (Installation component) in version 6.2.4. A unauthenticated attacker with network access via TCP can compromise the product, enabling takeover with CVSS 3.1 base score 9.8 (Impact: Confidentiality, Integrity, Availabili...

CVE-2026-61159

CVE-2026-61159 affects Oracle Commerce Guided Search / Oracle Commerce Experience Manager (component: Experience Manager) on version 11.4.0. The issue permits unauthenticated, network‑accessible HTTP access to compromise the product, with impact limited to confidentiality (CVSS 3.1: 7.5). Connect...

CVE-2026-61158

CVE-2026-61158 affects Oracle Commerce Guided Search / Oracle Commerce Experience Manager (component: Experience Manager) and is applicable to version 11.4.0. The vulnerability can be triggered by an unauthenticated attacker with network access via RMI to compromise the Product, potentially leadi...

CVE-2026-61128

CVE-2026-61128 affects Oracle MySQL products: MySQL Server (Optimizer) and MySQL Cluster, with affected versions MySQL Server 9.7.0–9.7.1 and MySQL Cluster 9.7.0–9.7.1. The vulnerability is described as exploitable by a high-privilege attacker who has network access via multiple protocols, potent...

CVE-2026-61125

Oracle E-Business Suite Configure to Order (Supply to Order Workbench) is affected in versions 12.2.3–12.2.15. A vulnerability allows a low-privilege, network-accessible attacker (via HTTP) to compromise Oracle Configure to Order, with potential scope expansion affecting additional products. Succ...

CVE-2026-61099

The CVE-2026-61099 entry concerns Oracle WebCenter Enterprise Capture (Client Bundle) with affected versions 12.2.1.4.0 and 14.1.2.0.0. The vulnerability is exploitable over HTTP by a low-privilege, network-accessible attacker and can result in takeover of Oracle WebCenter Enterprise Capture. CVS...

CVE-2026-61062

CVE-2026-61062 affects Oracle PeopleSoft Enterprise FIN Cash Management (Cash Management component) for the 9.2 release. The vulnerability is exploitable locally by a user with logon to the infrastructure where PeopleSoft runs, with low privileges, and can compromise the Cash Management component...

CVE-2026-61041

Summary (supported): CVE-2026-61041 affects Oracle Demantra Demand Management (Oracle Supply Chain) with affected versions 12.2.3–12.2.15. The issue is exploitable over HTTP by a low-privileged, network-accessible attacker and can lead to takeover of the Demantra module; impacts may extend to rel...

CVE-2026-61039

CVE-2026-61039 affects Oracle E-Business Suite Oracle Advanced Supply Chain Planning (Core) with affected versions 12.2.3–12.2.15. The vulnerability allows a high-privilege attacker with network access via HTTP to take over the affected product. Documented impact is takeover with CVSS v3.1 base s...

CVE-2026-60982

CVE-2026-60982 affects Oracle E-Business Suite US Federal Human Resources (component: Internal Operations). Affected are versions 12.2.3 through 12.2.15. The vulnerability is exploitable with network access via HTTP by a low-privileged attacker and can lead to unauthorized creation, deletion or m...

CVE-2026-60973

Oracle E-Business Tax in Oracle E-Business Suite (Internal Operations) is affected for versions 12.2.3–12.2.15. The vulnerability can be triggered by a low-privilege user who can log on to the infrastructure where Oracle E-Business Tax runs, potentially leading to takeover of Oracle E-Business Ta...

CVE-2026-60901

An Oracle E-Business Suite CVE-2026-60901 affects Oracle Project Intelligence (Internal Operations) in versions 12.2.3–12.2.15. Root cause/impact: high-severity vulnerability allowing a network-based, low-privilege attacker over HTTP to take over Oracle Project Intelligence (CVSS 3.1: 8.8, C/H/I/...

CVE-2026-60793

The CVE-2026-60793 entry concerns Oracle E-Business Suite, Oracle TeleSales (Internal Operations) with affected versions 12.2.3–12.2.15. The vulnerability permits a low-privileged, network-accessible attacker over HTTP to compromise Oracle TeleSales, potentially leading to unauthorized creation, ...