CVE-2026-60677

CVE-2026-60677 affects Oracle E-Business Suite’s Oracle Common Modules (Oracle Common Application Components) in versions 12.2.3–12.2.15. The vulnerability allows a low-privileged, network-accessible attacker over HTTP to compromise Oracle Common Application Components, potentially leading to una...

CVE-2026-60675

...

CVE-2026-60673

...

CVE-2026-60667

...

CVE-2026-60666

...

CVE-2026-60663

The CVE-2026-60663 entry relates to Oracle WebCenter Content (Web Content Management) in Oracle Fusion Middleware. Affected versions are 12.2.1.4.0 and 14.1.2.0.0. The flaw is exploitable by a low-privilege, unauthenticated or network-accessing attacker over HTTP, enabling takeover of Oracle WebC...

CVE-2026-60663

...

CVE-2026-60661

CVE-2026-60661 affects Oracle Solaris 11.4 (Filesystems). The vulnerability is exploitable by a low-privilege, logged-in user to compromise Oracle Solaris, with potential scope change affecting additional products and full takeover of Solaris. CVSS 3.1 base score 7.8 (HIGH) with local attack vect...

CVE-2026-60659

...

CVE-2026-60652

...

CVE-2026-60650

...

CVE-2026-60649

...

CVE-2026-60639

...

CVE-2026-60640

CVE-2026-60640 affects Oracle WebCenter Content (Content Server) as part of Oracle Fusion Middleware. Affected versions are 12.2.1.4.0 and 14.1.2.0.0. The vulnerability is described as allowing an unauthenticated attacker with network access via HTTP to compromise WebCenter Content, with human in...

CVE-2026-60636

...

CVE-2026-60634

CVE-2026-60634 affects Oracle WebCenter Content (Content Server) in Oracle Fusion Middleware. Affected versions are 12.2.1.4.0 and 14.1.2.0.0. The vulnerability allows an unauthenticated, network-accessible attacker to compromise WebCenter Content via HTTP and can lead to takeover; exploitation r...

CVE-2026-60627

...

CVE-2026-60615

...

CVE-2026-60608

...

CVE-2026-60606

CVE-2026-60606 affects Oracle PeopleSoft (CC Common Application Objects) on version 9.2. The vulnerability is in the Common Application Objects component and is exploitable without authentication over HTTP, enabling unauthorized creation/modification/deletion of data and access to all CC Common A...