CVE-2026-60650

CVE-2026-60650 affects Oracle WebCenter Content (Web Content Management) within Oracle Fusion Middleware. Affected versions are 12.2.1.4.0 and 14.1.2.0.0. The vulnerability is exploitable over HTTP by a low-privilege, network-access—requiring user interaction—attacker, with the potential for take...

CVE-2026-60641

CVE-2026-60641 affects Oracle WebCenter Content (Content Server) in Oracle Fusion Middleware, with affected versions 12.2.1.4.0 and 14.1.2.0.0. The vulnerability allows an unauthenticated attacker with network access via HTTP to compromise WebCenter Content, requiring user interaction. Impacts in...

CVE-2026-60631

CVE-2026-60631 affects Oracle WebCenter Content (Content Server) in Oracle Fusion Middleware, specifically affected versions 12.2.1.4.0 and 14.1.2.0.0. The vulnerability is exploitable by an unauthenticated attacker who can reach the system over HTTP; attacks require user interaction from a count...

CVE-2026-60624

CVE-2026-60624 affects Oracle MySQL Connector/J in MySQL Connectors, with vulnerable versions 9.7.0–9.7.1. The vulnerability allows an unauthenticated, network-accessible attacker to cause a hang or frequent crashes (complete DoS) of Connector/J, with user interaction required for exploitation an...

CVE-2026-60625

CVE-2026-60625 affects Oracle Data Integrator (Studio) in Oracle Fusion Middleware, with vulnerable versions 12.2.1.4.0 and 14.1.2.0.0. The issue allows a low-privileged user who can log on to the environment where ODI runs to compromise ODI, potentially leading to takeover (CVSS 3.1 base score 7...

CVE-2026-60608

CVE-2026-60608 affects Oracle PeopleSoft Enterprise CS Financial Aid (component: Institutional Methodology Need Analysis) with affected version 9.2.38. The issue allows a low-privilege, logged-in attacker to compromise the Financial Aid module, potentially causing unauthorized creation, deletion ...

CVE-2026-60604

The CVE-2026-60604 entry affects Oracle PeopleSoft Enterprise CS Campus Community (component: Security) with affected version 9.2.38. The vulnerability allows a low-privileged attacker who can reach the system over HTTP to compromise the PeopleSoft Enterprise CS Campus Community, with potential t...

CVE-2026-60551

The CVE-2026-60551 entry concerns Oracle WebCenter Sites (Oracle Fusion Middleware) with affected versions 12.2.1.4.0 and 14.1.2.0.0. The vulnerability affects the WebCenter Sites component and allows an unauthenticated attacker who can reach the service over HTTP to compromise Oracle WebCenter S...

CVE-2026-60528

The CVE-2026-60528 entry concerns Oracle WebLogic Server (Fusion Middleware) with the Console component affecting 14.1.2.0.0 and 15.1.1.0.0. The vulnerability is exploitable by a high-privilege attacker with network access via HTTP, potentially enabling unauthorized creation, deletion or modifica...

CVE-2026-60527

CVE-2026-60527 affects Oracle WebLogic Server (Console component) in 14.1.2.0.0 and 15.1.1.0.0. The vulnerability allows an unauthenticated user with logon to the host running WebLogic to compromise the server, with high confidentiality impact and a local attack vector (scope changed). No exploit...

CVE-2026-60456

CVE-2026-60456 affects Oracle WebCenter Enterprise Capture (Client Bundle) in Oracle Fusion Middleware. Affected versions: 12.2.1.4.0 and 14.1.2.0.0. The issue allows a low-privilege attacker with network access over HTTP to compromise the product, with potential broader impact on related compone...

CVE-2026-60448

CVE-2026-60448 affects Oracle WebCenter Content (Content Server) in Oracle Fusion Middleware, versions 12.2.1.4.0 and 14.1.2.0.0. It allows unauthenticated HTTP-based access to compromise the Content Server, potentially enabling unauthorized data creation/deletion/modification or access to all Co...

CVE-2026-60440

CVE-2026-60440 affects Oracle Fusion Middleware, Service Delivery Platform (Messaging Enabler) with affected versions 12.2.1.4.0 and 14.1.2.0.0. The flaw enables a low-privilege attacker with network access over HTTP to compromise the platform, potentially yielding unauthorized access to critical...

CVE-2026-60427

CVE-2026-60427 affects Oracle Unified Directory (OUD Core) in Oracle Fusion Middleware, impacting versions 12.2.1.4.0 and 14.1.2.1.0. The vulnerability can be exploited by an unauthenticated attacker over the network via LDAP to compromise data integrity and confidentiality, with scope change pot...

CVE-2026-60381

CVE-2026-60381 concerns Oracle Fusion Middleware’s Service Delivery Platform (Messaging Enabler). Affected versions are 12.2.1.4.0 and 14.1.2.0.0. The vulnerability allows an attacker with network access via T3/IIOP and low privileges to compromise the Service Delivery Platform, with potential ta...

CVE-2026-60375

CVE-2026-60375 affects Oracle Fusion Middleware, specifically the Service Delivery Platform component Messaging Enabler. Affected versions are 12.2.1.4.0 and 14.1.2.0.0. The vulnerability allows an unauthenticated attacker with network access via T3/IIOP to compromise the Service Delivery Platfor...

CVE-2026-60326

CVE-2026-60326 affects Oracle Access Manager (Authentication Engine) in Oracle Fusion Middleware. Affected versions: 12.2.1.4.0 and 14.1.2.1.0. The vulnerability enables unauthenticated, network-based access via HTTP to compromise OAM, potentially allowing unauthorized creation, deletion, or modi...

CVE-2026-60322

...

CVE-2026-60311

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are MySQL Server: 9.0.0-9.7.1; MySQL Cluster: 9.0.0-9.7.1. Easily exploitable vulnerability allows low privileged attacker with network access via multiple...

CVE-2026-60302

...