CVE-2026-60607

...

CVE-2026-60608

...

CVE-2026-60606

...

CVE-2026-60604

...

CVE-2026-60606

CVE-2026-60606 affects Oracle PeopleSoft (CC Common Application Objects) on version 9.2. The vulnerability is in the Common Application Objects component and is exploitable without authentication over HTTP, enabling unauthorized creation/modification/deletion of data and access to all CC Common A...

CVE-2026-60599

...

CVE-2026-60600

CVE-2026-60600 affects Oracle PeopleSoft Enterprise FIN Project Costing (component: Projects) for the supported 9.2 version. The vulnerability is exploitable by a local attacker who has logon access to the infrastructure hosting PeopleSoft FIN Project Costing and requires user interaction, with t...

CVE-2026-60599

The CVE-2026-60599 entry applies to Oracle PeopleSoft: Enterprise CS Student Records, specifically the Research Tracking component, affected in version 9.2.38. The vulnerability is exploitable with network access over HTTPS by a low-privilege attacker, leading to unauthorized creation, deletion o...

CVE-2026-60597

...

CVE-2026-60595

...

CVE-2026-60586

CVE-2026-60586 affects Oracle MySQL Connector/J (9.7.0–9.7.1). The vulnerability in MySQL Connectors allows a low-privileged, network-accessing attacker to compromise Connector/J via multiple protocols. Attacks may impact additional products (scope change) and can lead to unauthorized access to d...

CVE-2026-60585

The CVE-2026-60585 entry targets Oracle MySQL products (MySQL Server and MySQL Cluster) with a vulnerability in the Server: Replication component. Affected software ranges include MySQL Server 8.4.0–8.4.10 and 9.7.0–9.7.1, and MySQL Cluster 8.0.0–8.0.47, 8.4.0–8.4.10, and 9.7.0–9.7.1. The issue p...

CVE-2026-60585

...

CVE-2026-60577

CVE-2026-60577 concerns Oracle E-Business Suite’s Oracle Enterprise Command Center Framework, Core component, in the V16 line. The vulnerability enables a low-privileged, network-accessible attacker (via HTTP) to compromise the Enterprise Command Center Framework, potentially granting unauthorize...

CVE-2026-60579

The CVE affects Oracle E-Business Suite's Oracle Enterprise Command Center Framework (Core) with affected version V16. The vulnerability allows an unauthenticated attacker with access to the physical communication segment to compromise the framework. Impact includes unauthorized creation, deletio...

CVE-2026-60578

CVE-2026-60578 is a vulnerability in the Oracle Enterprise Command Center Framework (Oracle E-Business Suite, Core). Affected product version is V16. The flaw allows a high-privileged attacker with network access over HTTP to compromise the Oracle Enterprise Command Center Framework, with potenti...

CVE-2026-60576

The CVE-2026-60576 entry describes a vulnerability in Oracle E-Business Suite's Oracle Enterprise Command Center Framework (component: Core), affected in version V16. An attacker with high privileges can exploit it over HTTP with network access to potentially take over the Oracle Enterprise Comma...

CVE-2026-60575

The CVE concerns Oracle E-Business Suite’s Workflow component, specifically the Workflow Notification Mailer. Affected versions are 12.2.3–12.2.15. The issue allows a low-privilege attacker with HTTP network access to perform unauthorized updates/inserts/deletes and reads in Oracle Workflow data,...

CVE-2026-60572

The CVE-2026-60572 entry concerns Oracle E-Business Suite Integrated SOA Gateway (Web Service Provider) with affected versions 12.2.3–12.2.15. The vulnerability, described as easily exploitable, allows a low-privilege, network-accessible attacker over HTTP to compromise data: unauthorized update/...

CVE-2026-60569

CVE-2026-60569 affects Oracle MySQL Cluster (Cluster: NDB Operator) with affected versions 8.0.0–8.0.47, 8.4.0–8.4.10, and 9.7.0–9.7.1. The issue enables an unauthenticated attacker with access to the infrastructure hosting MySQL Cluster to compromise data, with potential unauthorized access to a...