CVE-2026-34324

Oracle Life Sciences InForm (App Server) is affected in versions 7.0.1.0 and 7.0.1.1. The vulnerability allows an unauthenticated, network-accessible attacker (via HTTP) to read and modify data, potentially enabling unauthorized updates/inserts/deletes and reading a subset of data. No exploitatio...

CVE-2026-34317

CVE-2026-34317 affects Oracle MySQL Shell (Shell: Core Client). Affected versions are 8.0.0–8.0.45, 8.4.0–8.4.8, and 9.0.0–9.6.0. The vulnerability exists in the Core Client component and can be exploited by a user who has logon to the environment where MySQL Shell executes, indicating a local at...

CVE-2026-34312

...

CVE-2026-34313

...

CVE-2026-34307

The CVE-2026-34307 entry concerns Oracle PeopleSoft/PeopleTools (Workflow) with affected versions 8.61–8.62. The vulnerability is exploitable over HTTP by a low-privilege attacker, requiring user interaction, and can lead to unauthorized update/insert/delete and read access to PeopleSoft data, wi...

CVE-2026-34296

CVE-2026-34296 affects Oracle Agile Product Lifecycle Management for Process (Product Quality Management) in version 6.2.4. The vulnerability, exploitable by a low-privileged user with network access over HTTP, can lead to unauthorized read access to a subset of data. The provided documents speci...

CVE-2026-34289

...

CVE-2026-34289

CVE-2026-34289 affects Oracle Fusion Middleware, specifically the Oracle Identity Manager Connector (component: Core) with an affected version of 12.2.1.4.0. The entry states a vulnerability that is exploitable without authentication over HTTPS by a network-accessible attacker, potentially leadin...

CVE-2026-34288

Oracle Fusion Middleware: Oracle Identity Manager Connector (Core) version 12.2.1.4.0 is impacted. The vulnerability allows an unauthenticated attacker with network access via HTTP to compromise the Oracle Identity Manager Connector, potentially leading to unauthorized access to sensitive data. T...

CVE-2026-34286

Oracle Fusion Middleware’s Oracle Identity Manager Connector (component: Core) on version 12.2.1.4.0 is affected by CVE-2026-34286. The vulnerability allows an unauthenticated attacker with network access via HTTPS to compromise the Oracle Identity Manager Connector, potentially leading to unauth...

CVE-2026-34283

CVE-2026-34283 affects Oracle Fusion Middleware’s Oracle Identity Manager (Identity Console) with vulnerable versions 12.2.1.4.0 and 14.1.2.0.0. The issue enables an unauthenticated attacker, over HTTP, to compromise Oracle Identity Manager; however, exploitation requires user interaction. The vu...

CVE-2026-34281

CVE-2026-34281 concerns Oracle Solaris 11.4, specifically a vulnerability in the Kernel component. Affects the kernel on Oracle Solaris 11.4; exploitation requires low privileges and local logon. Successful exploitation can lead to a hang or frequently repeatable crash (complete DoS) of Oracle So...

CVE-2026-34280

...

CVE-2026-22019

...

CVE-2026-22017

...

CVE-2026-22011

...

CVE-2026-22013

...

CVE-2026-22008

...

CVE-2026-22001

...

CVE-2026-22001

The CVE affects Oracle MySQL Server (component: Server: Information Schema). Affected versions: 8.0.0–8.0.45, 8.4.0–8.4.8, and 9.0.0–9.6.0. The vulnerability allows a high-privileged attacker with network access (via multiple protocols) to read an unauthorized subset of MySQL data. CVSS v3.1 base...