CVE-2026-60173

CVE-2026-60173 affects Oracle Analytics’ BI Publisher component (BI Platform Security). Affected supported versions are 8.2.0.0.0 and 12.2.1.4.0. The vulnerability is exploitable over HTTP by an unauthenticated network attacker and can lead to takeover of Oracle BI Publisher, with a CVSS v3.1 bas...

CVE-2026-60172

CVE-2026-60172 affects Oracle Autonomous Health Framework (AHF) via the Developer triaging platform. Versions 26.0.0, 26.1.0, and 26.2.0 are affected. The vulnerability is locally exploitable and requires high privileges with user interaction; successful exploitation can lead to takeover of AHF a...

CVE-2026-60172

...

CVE-2026-60169

...

CVE-2026-60170

Affected product: Oracle Hospitality Simphony (Oracle Food and Beverage Applications), component: POS. Vulnerable versions: 19.8-19.8.5, 19.9-19.9.3, and 19.10. The CVE describes an easily exploitable, unauthenticated network exploit via HTTP that could lead to unauthorized access to critical dat...

CVE-2026-60169

...

CVE-2026-60166

...

CVE-2026-60166

CVE-2026-60166 affects Oracle Java SE JavaFX. Affected product/version: Oracle Java SE 8u491. The vulnerability arises in JavaFX components and can be triggered by network-accessible vectors, with exploitation requiring user interaction. Successful exploitation could lead to unauthorized read acc...

CVE-2026-60167

...

CVE-2026-60165

CVE-2026-60165 is a vulnerability in Oracle Cost Management within Oracle E-Business Suite (component: Enterprise Command Center). Affected product/version is EBS V16. The issue allows a high-privilege attacker with network access over HTTP to compromise Oracle Cost Management, enabling unauthori...

CVE-2026-60163

...

CVE-2026-60160

...

CVE-2026-60162

...

CVE-2026-60162

The CVE-2026-60162 entry concerns Oracle VM VirtualBox (Core) affecting version 7.2.12. The vulnerability is described as exploitable by a high-privilege attacker who has local logon to the infrastructure where VirtualBox runs, potentially leading to unauthorized access to critical data and parti...

CVE-2026-60158

...

CVE-2026-60157

Oracle GoldenGate (Service Manager) is affected in versions 19.1.0.0.0–19.29.0.0, 21.3–21.21, and 23.4–23.26.1.0.0. The vulnerability allows a low-privilege attacker with network access over HTTP to compromise GoldenGate, potentially taking over the service. CVSS 3.1 base score is 8.8 (Confidenti...

CVE-2026-60155

...

CVE-2026-60154

...

CVE-2026-60150

...

CVE-2026-60149

CVE-2026-60149 affects Oracle E-Business Suite Oracle Workflow, specifically the Workflow Notification Mailer, with affected versions 12.2.3–12.2.15. The vulnerability is described as allowing a high-privilege user who can log into the infrastructure running Oracle Workflow to cause a hang or rep...