CVE-2026-60748

High-privileged network attacker can exploit the Internal Operations component in Oracle E-Business Suite 12.2.3–12.2.15 to gain full read access to General Ledger data and limited write access, with scope change potentially affecting additional Oracle products. CVSS 3.1 score 7.6 (HIGH). No expl...

CVE-2026-60737

Oracle Web Services Manager 12.2.1.4.0 and 14.1.2.0.0 (Web Services Security component) is critically vulnerable (CVSS 9.1): an unauthenticated remote attacker can read, create, delete or modify all accessible data. Oracle's August 2026 CPU patch is the official fix. No exploitation details or Po...

EUVD-2026-61414

Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware component: Composer. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle WebCenter...

EUVD-2026-61412

Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware component: Composer. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle WebCenter...

EUVD-2026-61415

Vulnerability in the Oracle Web Services Manager product of Oracle Fusion Middleware component: Web Services Security. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

CVE-2026-60733

Oracle WebCenter Portal (Composer component) versions 12.2.1.4.0 and 14.1.2.0.0 are affected by a HIGH-severity (CVSS 7.7) network-exploitable flaw requiring low privileges. A low-privileged HTTP attacker can read, create, delete, or modify data and cause partial DoS; scope change means other pro...

CVE-2026-60730

CVE-2026-60730 affects Oracle WebCenter Portal's Composer component (versions 12.2.1.4.0 and 14.1.2.0.0) in Oracle Fusion Middleware. A low-privileged remote attacker can exploit it via HTTP, achieving full CIA compromise with scope change (CVSS 9.9 Critical). No exploit code is provided; Oracle'...

EUVD-2026-61409

Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware component: OIM Legacy UI. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Identit...

CVE-2026-60729

The Composer component of Oracle WebCenter Portal (versions 12.2.1.4.0 and 14.1.2.0.0) is vulnerable to an easily exploitable, low-privilege network attack via HTTP, enabling full product takeover (CVSS 8.8: C/H, I/H, A/H). No exploitation evidence or patch version is provided; Oracle's August 20...

CVE-2026-60728

Oracle WebCenter Portal (component: Portlet Services), versions 12.2.1.4.0 and 14.1.2.0.0, is vulnerable to an unauthenticated, network-accessible attack (CVSS 9.1) causing unauthorized data access and denial-of-service. Patch guidance is not provided in the documents; monitor Oracle's August 202...

EUVD-2026-61411

Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware component: Composer. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle WebCenter...

CVE-2026-60727

CVE-2026-60727 affects the OIM Legacy UI component of Oracle Identity Manager (versions 12.2.1.4.0 and 14.1.2.1.0). An unauthenticated attacker with network access via HTTP can fully compromise the application, scoring CVSS 9.8. No patch or remediation details are provided in the documents; custo...

EUVD-2026-61410

Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware component: Portlet Services. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

EUVD-2026-61406

Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware component: OIM Legacy UI. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Identit...

EUVD-2026-61408

Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware component: Authentication Engine. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

CVE-2026-60721

CVE-2026-60721 is a critical (CVSS 9.8) flaw in Oracle Identity Manager's OIM Legacy UI component, affecting versions 12.2.1.4.0 and 14.1.2.1.0. An unauthenticated attacker with network HTTP access can fully compromise the application (confidentiality, integrity, availability all rated HIGH). No ...

CVE-2026-60726

Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware component: Authentication Engine. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

EUVD-2026-61403

Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware component: OIM Legacy UI. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Identity...

EUVD-2026-61405

Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware component: OIM Legacy UI. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Identity...

CVE-2026-60720

A critical vulnerability (CVSS 9.9) in Oracle Identity Manager's OIM Legacy UI affects versions 12.2.1.4.0 and 14.1.2.1.0, allowing a low-privileged network attacker via HTTP to take over OIM and impact additional products. No root cause, exploit, or patch details are provided in the documents; O...