CVE-2026-60398

Oracle GoldenGate Microservices is affected in 19.1.0.0.0–19.30.0.0, 21.3–21.21, and 23.4–23.26.1. The vulnerability can be exploited by a low-privileged, network-access attacker via HTTP to take over Oracle GoldenGate. CVSS v3.1 base score is 8.8 (C/H, I/H, A/H). No exploitation details are prov...

CVE-2026-60394

...

CVE-2026-60387

The CVE-2026-60387 entry concerns Oracle Fusion Middleware Service Delivery Platform (Messaging Enabler) with affected versions 12.2.1.4.0 and 14.1.2.0.0. The vulnerability is exploitable remotely over network protocols T3/IIOP, allowing an unauthenticated attacker to compromise the Platform and ...

CVE-2026-60386

CVE-2026-60386 affects Oracle Fusion Middleware Service Delivery Platform, Messaging Enabler component, in versions 12.2.1.4.0 and 14.1.2.0.0. An unauthenticated attacker with network access via HTTP can compromise the platform, potentially taking over the service. CVSS v3.1 base score 9.8 (CRITI...

CVE-2026-60384

CVE-2026-60384 affects Oracle Fusion Middleware’s Service Delivery Platform, specifically the Messaging Enabler. Affected versions are 12.2.1.4.0 and 14.1.2.0.0. An unauthenticated attacker with network access via T3/IIOP can compromise the Service Delivery Platform, with potential takeover and i...

CVE-2026-60382

...

CVE-2026-60381

...

CVE-2026-60376

CVE-2026-60376 affects Oracle Fusion Middleware’s Service Delivery Platform, specifically the Messaging Enabler component, in versions 12.2.1.4.0 and 14.1.2.0.0. The issue allows an unauthenticated attacker with network access via T3/IIOP to compromise the Service Delivery Platform, potentially t...

CVE-2026-60375

...

CVE-2026-60364

...

CVE-2026-60365

...

CVE-2026-60363

...

CVE-2026-60363

...

CVE-2026-60360

...

CVE-2026-60357

...

CVE-2026-60353

...

CVE-2026-60350

...

CVE-2026-60349

...

CVE-2026-60343

...

CVE-2026-60340

The CVE-2026-60340 entry applies to Oracle E-Business Suite, specifically the Oracle Project Costing component (Enterprise Command Center). Affected versions are 12.2.3–12.2.15. The vulnerability, described across NVD/Oracle sources, permits a high-privilege attacker with network access over HTTP...