CVE-2026-60825

CVE-2026-60825 affects Oracle iSupport within Oracle E-Business Suite (component: Internal Operations). Affected are EBS versions 12.2.3–12.2.15. The vulnerability is exploitable by a high-privilege attacker over HTTP with network access and can lead to takeover of Oracle iSupport. CVSS 3.1 base ...

CVE-2026-60750

...

CVE-2026-60749

CVE-2026-60749 is a vulnerability in Oracle Assets (Oracle E-Business Suite), affecting 12.2.3–12.2.15 of the Internal Operations component. The issue is exploitable over the network (HTTP) by a low-privileged attacker and can lead to unauthorized creation, deletion or modification of critical da...

CVE-2026-60665

...

CVE-2026-60657

...

CVE-2026-60636

CVE-2026-60636 affects Oracle WebCenter Content (Content Server) in Oracle Fusion Middleware. Affected supported versions are 12.2.1.4.0 and 14.1.2.0.0. The vulnerability is exploitable over HTTP by an unauthenticated attacker and, with user interaction, can lead to takeover of Oracle WebCenter C...

CVE-2026-60631

...

CVE-2026-60616

...

CVE-2026-60581

CVE-2026-60581 affects Oracle E-Business Suite, Oracle Enterprise Command Center Framework (Core), version V16. An unauthenticated attacker with access to the physical network segment attached to the hardware running the framework can compromise and potentially take over the Oracle Enterprise Com...

CVE-2026-60548

The CVE concerns Oracle Fusion Middleware’s Oracle SOA Suite (Integration Business Insight) with affected versions 12.2.1.4.0 and 14.1.2.0.0. The issue is exploitable over HTTP with network access by a low-privileged attacker, potentially leading to unauthorized access to critical data or full ac...

CVE-2026-60423

...

CVE-2026-60405

CVE-2026-60405 affects Oracle TimesTen In-Memory Database (Kubernetes Operator component) with affected version 26.1.1.1.0. The description states a low-privilege, locally authenticated attacker can compromise TimesTen In-Memory Database, potentially allowing unauthorized read access to a subset ...

CVE-2026-60405

...

CVE-2026-60394

...

CVE-2026-60381

CVE-2026-60381 concerns Oracle Fusion Middleware’s Service Delivery Platform (Messaging Enabler). Affected versions are 12.2.1.4.0 and 14.1.2.0.0. The vulnerability allows an attacker with network access via T3/IIOP and low privileges to compromise the Service Delivery Platform, with potential ta...

CVE-2026-60353

...

CVE-2026-60343

...

CVE-2026-60345

CVE-2026-60345 affects Oracle Fusion Middleware’s JDeveloper component (ADF Shared Components). Affected are 12.2.1.4.0 and 14.1.2.0.0. The vulnerability allows a high-privilege attacker with network access via HTTP to compromise Oracle JDeveloper, potentially leading to takeover. CVSS 3.1 base s...

CVE-2026-60342

...

CVE-2026-60340

The CVE-2026-60340 entry applies to Oracle E-Business Suite, specifically the Oracle Project Costing component (Enterprise Command Center). Affected versions are 12.2.3–12.2.15. The vulnerability, described across NVD/Oracle sources, permits a high-privilege attacker with network access over HTTP...