CVE-2026-60611

...

CVE-2026-60605

...

CVE-2026-60603

...

CVE-2026-60595

CVE-2026-60595 affects Oracle PeopleSoft Enterprise FIN Pay/Bill Management (Paybill Management) on version 9.2. The underlying issue is within Paybill Management, enabling a low-privileged attacker who can log on to the infrastructure where PeopleSoft FIN Pay/Bill Management runs to compromise t...

CVE-2026-60588

The CVE-2026-60588 entry concerns Oracle E-Business Suite’s Oracle Enterprise Asset Management, specifically the Work Definition Issues component. Affected versions are 12.2.3–12.2.15. The vulnerability, exploitable by a low-privilege attacker with network access over HTTPS, can lead to unauthori...

CVE-2026-60588

...

CVE-2026-60583

...

CVE-2026-60577

...

CVE-2026-60566

The CVE-2026-60566 entry affects Oracle WebCenter Portal (Oracle Fusion Middleware), specifically the Runtime Tools component. Affected versions are 12.2.1.4.0 and 14.1.2.0.0. The vulnerability allows an unauthenticated attacker with network access over HTTP to compromise the WebCenter Portal, wi...

CVE-2026-60559

...

CVE-2026-60552

...

CVE-2026-60537

...

CVE-2026-60531

CVE-2026-60531 affects Oracle Identity Manager Connector (Oracle Fusion Middleware), Core component. Affected versions: 12.2.1.4.0 and 14.1.2.1.0. The issue allows a low-privilege attacker with network access over HTTP to compromise the Oracle Identity Manager Connector, with potential scope expa...

CVE-2026-60527

...

CVE-2026-60497

CVE-2026-60497 affects Oracle JD Edwards EnterpriseOne CRM Foundation, specifically the CRM Foundation component in the 9.2 line. The vulnerability is exploitable with network access via JDENET by a low-privilege attacker and can lead to takeover of the CRM Foundation, per the CVSS 3.1 vector (AV...

CVE-2026-60491

CVE-2026-60491 affects Oracle E-Business Suite, Oracle Advanced Inbound Telephony (SDK client integration) for versions 12.2.3–12.2.15. The vulnerability can be exploited remotely over HTTP by a low-privileged user, potentially leading to unauthorized update/insert/delete of Oracle Advanced Inbou...

CVE-2026-60490

...

CVE-2026-60490

CVE-2026-60490 affects Oracle JD Edwards EnterpriseOne CRM Foundation (component: CRM Foundation) in the 9.2 line. The vulnerability is exploitable by a low-privilege attacker with network access over HTTP, potentially leading to takeover of the CRM Foundation. CVSS 3.1 base score is 8.8 (Confide...

CVE-2026-60491

...

CVE-2026-60469

CVE-2026-60469 affects Oracle WebCenter Content: Imaging (Core) in Oracle Fusion Middleware. Affected versions: 12.2.1.4.0 and 14.1.2.0.0. The vulnerability is exploitable over HTTP by a low-privilege, network-accessing attacker and requires user interaction. Successful exploitation can lead to u...