CVE-2026-60735

CVE-2026-60735 affects Oracle E-Business Suite, Oracle Sales Offline (Internal Operations) in versions 12.2.3–12.2.15. An attacker with low privilege gains network access via HTTP to compromise Oracle Sales Offline, enabling unauthorized creation, deletion or modification of data and potentially ...

CVE-2026-60712

...

CVE-2026-60706

...

CVE-2026-60703

The CVE-2026-60703 entry concerns Oracle Interaction Blending (Internal Operations) in Oracle E-Business Suite, affected on 12.2.3–12.2.15. A local, low-privileged attacker with logon can compromise Oracle Interaction Blending, potentially leading to unauthorized creation, deletion or modificatio...

CVE-2026-60681

...

CVE-2026-60669

The CVE-2026-60669 entry concerns Oracle PeopleSoft Enterprise HCM Global Payroll Mexico (component: Global Payroll for Mexico) with affected version 9.2. A low-privilege, network-accessible (via HTTP) attacker can access and modify data, potentially causing unauthorized data changes and a partia...

CVE-2026-60650

CVE-2026-60650 affects Oracle WebCenter Content (Web Content Management) within Oracle Fusion Middleware. Affected versions are 12.2.1.4.0 and 14.1.2.0.0. The vulnerability is exploitable over HTTP by a low-privilege, network-access—requiring user interaction—attacker, with the potential for take...

CVE-2026-60641

CVE-2026-60641 affects Oracle WebCenter Content (Content Server) in Oracle Fusion Middleware, with affected versions 12.2.1.4.0 and 14.1.2.0.0. The vulnerability allows an unauthenticated attacker with network access via HTTP to compromise WebCenter Content, requiring user interaction. Impacts in...

CVE-2026-60631

CVE-2026-60631 affects Oracle WebCenter Content (Content Server) in Oracle Fusion Middleware, specifically affected versions 12.2.1.4.0 and 14.1.2.0.0. The vulnerability is exploitable by an unauthenticated attacker who can reach the system over HTTP; attacks require user interaction from a count...

CVE-2026-60624

CVE-2026-60624 affects Oracle MySQL Connector/J in MySQL Connectors, with vulnerable versions 9.7.0–9.7.1. The vulnerability allows an unauthenticated, network-accessible attacker to cause a hang or frequent crashes (complete DoS) of Connector/J, with user interaction required for exploitation an...

CVE-2026-60625

CVE-2026-60625 affects Oracle Data Integrator (Studio) in Oracle Fusion Middleware, with vulnerable versions 12.2.1.4.0 and 14.1.2.0.0. The issue allows a low-privileged user who can log on to the environment where ODI runs to compromise ODI, potentially leading to takeover (CVSS 3.1 base score 7...

CVE-2026-60625

...

CVE-2026-60619

...

CVE-2026-60612

...

CVE-2026-60608

CVE-2026-60608 affects Oracle PeopleSoft Enterprise CS Financial Aid (component: Institutional Methodology Need Analysis) with affected version 9.2.38. The issue allows a low-privilege, logged-in attacker to compromise the Financial Aid module, potentially causing unauthorized creation, deletion ...

CVE-2026-60604

The CVE-2026-60604 entry affects Oracle PeopleSoft Enterprise CS Campus Community (component: Security) with affected version 9.2.38. The vulnerability allows a low-privileged attacker who can reach the system over HTTP to compromise the PeopleSoft Enterprise CS Campus Community, with potential t...

CVE-2026-60562

...

CVE-2026-60551

The CVE-2026-60551 entry concerns Oracle WebCenter Sites (Oracle Fusion Middleware) with affected versions 12.2.1.4.0 and 14.1.2.0.0. The vulnerability affects the WebCenter Sites component and allows an unauthenticated attacker who can reach the service over HTTP to compromise Oracle WebCenter S...

CVE-2026-60527

CVE-2026-60527 affects Oracle WebLogic Server (Console component) in 14.1.2.0.0 and 15.1.1.0.0. The vulnerability allows an unauthenticated user with logon to the host running WebLogic to compromise the server, with high confidentiality impact and a local attack vector (scope changed). No exploit...

CVE-2026-60528

The CVE-2026-60528 entry concerns Oracle WebLogic Server (Fusion Middleware) with the Console component affecting 14.1.2.0.0 and 15.1.1.0.0. The vulnerability is exploitable by a high-privilege attacker with network access via HTTP, potentially enabling unauthorized creation, deletion or modifica...