CVE-2026-60495

...

CVE-2026-60490

CVE-2026-60490 affects Oracle JD Edwards EnterpriseOne CRM Foundation (component: CRM Foundation) in the 9.2 line. The vulnerability is exploitable by a low-privilege attacker with network access over HTTP, potentially leading to takeover of the CRM Foundation. CVSS 3.1 base score is 8.8 (Confide...

CVE-2026-60491

CVE-2026-60491 affects Oracle E-Business Suite, Oracle Advanced Inbound Telephony (SDK client integration) for versions 12.2.3–12.2.15. The vulnerability can be exploited remotely over HTTP by a low-privileged user, potentially leading to unauthorized update/insert/delete of Oracle Advanced Inbou...

CVE-2026-60491

...

CVE-2026-60491

...

CVE-2026-60490

...

CVE-2026-60469

CVE-2026-60469 affects Oracle WebCenter Content: Imaging (Core) in Oracle Fusion Middleware. Affected versions: 12.2.1.4.0 and 14.1.2.0.0. The vulnerability is exploitable over HTTP by a low-privilege, network-accessing attacker and requires user interaction. Successful exploitation can lead to u...

CVE-2026-60466

...

CVE-2026-60467

...

CVE-2026-60462

...

CVE-2026-60460

The CVE-2026-60460 entry corresponds to Oracle WebCenter Enterprise Capture (Client Bundle) in Oracle Fusion Middleware. Affected versions are 12.2.1.4.0 and 14.1.2.0.0. The vulnerability can be exploited over NETWORK via T3/IIOP by an unauthenticated attacker to takeover Oracle WebCenter Enterpr...

CVE-2026-60460

...

CVE-2026-60458

...

CVE-2026-60456

...

CVE-2026-60456

CVE-2026-60456 affects Oracle WebCenter Enterprise Capture (Client Bundle) in Oracle Fusion Middleware. Affected versions: 12.2.1.4.0 and 14.1.2.0.0. The issue allows a low-privilege attacker with network access over HTTP to compromise the product, with potential broader impact on related compone...

CVE-2026-60445

...

CVE-2026-60446

...

CVE-2026-60431

...

CVE-2026-60424

CVE-2026-60424 affects Oracle Unified Directory (OUD Core) within Oracle Fusion Middleware. Affected versions are 12.2.1.4.0 and 14.1.2.1.0. The vulnerability is exploitable by an unauthenticated attacker over a network via LDAP to compromise OUD, potentially resulting in takeover. The CVSS score...

CVE-2026-60407

The CVE-2026-60407 affects Oracle TimesTen In-Memory Database (Kubernetes Operator) with an affected build 26.1.1.1.0. The flaw is described as exploitable by a low-privilege user who can log on to the infrastructure where TimesTen runs, potentially leading to compromised TimesTen data and potent...