72330 matches found
CVE-2026-61149
CVE-2026-61149 affects Oracle Commerce Guided Search / Oracle Commerce Experience Manager (component: Experience Manager) in Oracle Commerce version 11.4.0. The description indicates an easily exploitable vulnerability allowing a low-privileged attacker with network access via HTTP to compromise ...
CVE-2026-61147
...
CVE-2026-61145
...
CVE-2026-61144
The CVE-2026-61144 entry describes a vulnerability in Oracle MySQL 9.7.x (MySQL Server, Cluster) affecting the Server: Optimizer component for versions 9.7.0–9.7.1. An attacker with network access via multiple protocols and high privileges can cause a hang or repeated crashes (complete DoS) in My...
CVE-2026-61141
...
CVE-2026-61142
...
CVE-2026-61142
CVE-2026-61142 is a vulnerability in Oracle E-Business Suite Oracle Payroll (Internal Operations) affecting 12.2.3–12.2.15. An attacker with network access via HTTP and low privileges can compromise Oracle Payroll, potentially granting unauthorized access to critical data or full access to Oracle...
CVE-2026-61137
...
CVE-2026-61136
...
CVE-2026-61138
CVE-2026-61138 affects Oracle E-Business Suite CMRO (Internal Operations) with affected versions 12.2.3–12.2.15. A network-accessible, unauthenticated vulnerability allows compromise via HTTP, potentially leading to unauthorized data access and updates (CVSSv3.1 base 7.5). No exploitation details...
CVE-2026-61137
...
CVE-2026-61137
CVE-2026-61137 affects Oracle Commerce Platform (Dynamo Application Framework) with affected version 11.4.0. An unauthenticated, network-accessible flaw over HTTP can lead to full takeover of the platform (CVSS 3.1: 8.1, C/I/A high). The connected Oracle CPU July 2026 advisory indicates patches e...
CVE-2026-61135
...
CVE-2026-61134
The CVE-2026-61134 entry concerns Oracle Commerce Platform (Dynamo Application Framework) with affected version 11.4.0. The vulnerability is exploitable by a low-privilege attacker with network access over HTTP, enabling unauthorized creation, deletion or modification of data, or unauthorized acc...
CVE-2026-61130
...
CVE-2026-61132
...
CVE-2026-61128
...
CVE-2026-61129
...
CVE-2026-61127
CVE-2026-61127 affects Oracle Communications Service Catalog and Design (component: Solution Designer). Affected versions are 8.0.0.7.0–8.3.0.2.0. The vulnerability is described as easily exploitable with network access over HTTP by a low-privilege attacker, potentially leading to takeover of the...