CVE-2026-60495

The CVE-2026-60495 entry concerns Oracle JD Edwards EnterpriseOne Requirements Planning (component: Requirements Planning) with the affected version reported as 9.2. The vulnerability allows a low-privilege attacker who can access JDENET over the network to compromise the JD Edwards EnterpriseOne...

CVE-2026-60496

...

CVE-2026-60494

...

CVE-2026-60493

...

CVE-2026-60490

CVE-2026-60490 affects Oracle JD Edwards EnterpriseOne CRM Foundation (component: CRM Foundation) in the 9.2 line. The vulnerability is exploitable by a low-privilege attacker with network access over HTTP, potentially leading to takeover of the CRM Foundation. CVSS 3.1 base score is 8.8 (Confide...

CVE-2026-60465

CVE-2026-60465 affects Oracle WebCenter Content: Imaging (Core) and is exploitable remotely via network access (T3, IIOP) on affected 12.2.1.4.0 and 14.1.2.0.0 installations. Successful exploitation can lead to takeover of WebCenter Content: Imaging with full confidentiality, integrity, and avail...

CVE-2026-60465

...

CVE-2026-60464

...

CVE-2026-60464

CVE-2026-60464 affects Oracle WebCenter Content: Imaging (Core) in Oracle Fusion Middleware. Affected versions are 12.2.1.4.0 and 14.1.2.0.0. The vulnerability enables a low-privileged attacker with network access via HTTP to compromise WebCenter Content: Imaging, potentially leading to takeover ...

CVE-2026-60450

...

CVE-2026-60451

...

CVE-2026-60448

...

CVE-2026-60449

...

CVE-2026-60444

CVE-2026-60444 affects Oracle WebCenter Content (Content Server) in Oracle Fusion Middleware, with affected versions 12.2.1.4.0 and 14.1.2.0.0. The vulnerability allows a low-privileged attacker with network access over HTTP to compromise WebCenter Content, potentially leading to unauthorized dat...

CVE-2026-60442

...

CVE-2026-60443

CVE-2026-60443 affects Oracle WebCenter Content (Content Server) in Oracle Fusion Middleware. Affected versions: 12.2.1.4.0 and 14.1.2.0.0. It is exploitable with network access via HTTP by a low-privilege user and requires user interaction. Successful attacks can lead to unauthorized creation/de...

CVE-2026-60440

CVE-2026-60440 affects Oracle Fusion Middleware, Service Delivery Platform (Messaging Enabler) with affected versions 12.2.1.4.0 and 14.1.2.0.0. The flaw enables a low-privilege attacker with network access over HTTP to compromise the platform, potentially yielding unauthorized access to critical...

CVE-2026-60431

The CVE-2026-60431 entry affects Oracle HTTP Server (mod_proxy) in Oracle Fusion Middleware, with affected versions 12.2.1.4.0 and 14.1.2.0.0. The issue is exploitable via unauthenticated HTTP access and may allow access to or disclosure of data; the impact is limited to the Oracle HTTP Server co...

CVE-2026-60428

...

CVE-2026-60428

CVE-2026-60428 affects Oracle Unified Directory (OUD Core) within Oracle Fusion Middleware, with affected versions 12.2.1.4.0 and 14.1.2.1.0. It is described as unauthenticated, LDAP-accessible, allowing compromise of OUD and potentially unauthorized read, update, insert, or delete of accessible ...