CVE-2026-61234

...

CVE-2026-61223

CVE-2026-61223 concerns Oracle Communications Converged Application Server (Security component). Affected versions are 8.2 and 8.3. The issue is accessible without authentication over TCP/IP and, per the description, can lead to takeover of the Converged Application Server with high impact on con...

CVE-2026-61190

CVE-2026-61190 affects Oracle Agile Engineering Data Management (Oracle Supply Chain), specifically the Install component, version 6.2.1. The vulnerability allows a low-privilege attacker who has network access via HTTP to compromise the system. Successful exploitation requires user interaction a...

CVE-2026-61181

CVE-2026-61181 affects Oracle Agile Product Lifecycle Management for Process (Product Quality Management) with affected version 6.2.4. The vulnerability is exploitable over a network (HTTP) by a low-privilege attacker and requires user interaction; it may lead to unauthorized data access and pote...

CVE-2026-61167

...

CVE-2026-61161

...

CVE-2026-61160

CVE-2026-61160 affects Oracle Commerce Guided Search / Oracle Commerce Experience Manager (component: Experience Manager) in 11.4.0. The vulnerability allows a low-privileged, network-accessible attacker over HTTP to compromise the product, potentially leading to unauthorized access to data and a...

CVE-2026-61143

...

CVE-2026-61121

Vulnerability CVE-2026-61121 affects Oracle HRMS (UK) within Oracle E-Business Suite (UK Payroll) for versions 12.2.8–12.2.15. The issue allows a low-privilege attacker with network access over HTTP to compromise Oracle HRMS (UK), with potential takeover (CVSS v3.1 base score 8.8; impacts to conf...

CVE-2026-61117

...

CVE-2026-61096

...

CVE-2026-61095

...

CVE-2026-61087

CVE-2026-61087 affects Oracle PeopleSoft Enterprise FIN Payables (v9.2) — a vulnerability in the Security component that an unauthenticated, network-accessing attacker can exploit via HTTP to access or compromise FIN Payables data. The CVSSv3.1 base score is 7.5 (Impact: Confidentiality) with vec...

CVE-2026-61083

CVE-2026-61083 affects Oracle E-Business Suite’s Performance Management, specifically the Appraisals component, with affected versions 12.2.3–12.2.15. The vulnerability permits a low-privileged, network-accessing attacker (via HTTP) to compromise Oracle Performance Management, enabling unauthoriz...

CVE-2026-61081

...

CVE-2026-61065

CVE-2026-61065 affects Oracle Access Manager (Oracle Fusion Middleware), specifically the Authentication Engine. Affected versions are 12.2.1.4.0 and 14.1.2.1.0. The entry describes an easily exploitable vulnerability that allows an unauthenticated attacker with network access via HTTP to comprom...

CVE-2026-61055

The CVE-2026-61055 vulnerability affects Oracle PeopleSoft, specifically the SCM Order Management component (Security) in the 9.2 line. Affected: PeopleSoft Enterprise SCM Order Management. Root cause details are not provided beyond the vulnerability’s existence. Impact per the entry: high confid...

CVE-2026-61010

Oracle E-Business Suite’s Oracle Process Manufacturing Systems (Internal Operations) is affected in versions 12.2.3–12.2.15. The vulnerability allows a network-accessible, low-privileged attacker (via HTTP) to compromise the system, potentially leading to complete takeover (CVSS 3.1 base score 8....

CVE-2026-61000

CVE-2026-61000 affects Oracle Process Manufacturing Systems within Oracle E-Business Suite (component: Internal Operations). Affected are EBS versions 12.2.3 through 12.2.15. The vulnerability is exploitable over a network via HTTP by a low-privileged attacker, potentially leading to unauthorized...

CVE-2026-60945

CVE-2026-60945 affects Oracle E-Business Suite’s Oracle Learning Management (Internal Operations) with affected versions 12.2.3–12.2.15. The vulnerability allows a low-privileged attacker who can access over HTTP to compromise Oracle Learning Management, requiring user interaction. Impact include...