CVE-2026-60443

CVE-2026-60443 affects Oracle WebCenter Content (Content Server) in Oracle Fusion Middleware. Affected versions: 12.2.1.4.0 and 14.1.2.0.0. It is exploitable with network access via HTTP by a low-privilege user and requires user interaction. Successful attacks can lead to unauthorized creation/de...

CVE-2026-60440

CVE-2026-60440 affects Oracle Fusion Middleware, Service Delivery Platform (Messaging Enabler) with affected versions 12.2.1.4.0 and 14.1.2.0.0. The flaw enables a low-privilege attacker with network access over HTTP to compromise the platform, potentially yielding unauthorized access to critical...

CVE-2026-60431

The CVE-2026-60431 entry affects Oracle HTTP Server (mod_proxy) in Oracle Fusion Middleware, with affected versions 12.2.1.4.0 and 14.1.2.0.0. The issue is exploitable via unauthenticated HTTP access and may allow access to or disclosure of data; the impact is limited to the Oracle HTTP Server co...

CVE-2026-60434

...

CVE-2026-60429

CVE-2026-60429 affects Oracle Unified Directory (OUD Core) in Oracle Fusion Middleware. Affected versions are 12.2.1.4.0 and 14.1.2.1.0. The vulnerability allows a low-privileged attacker with LDAP network access to compromise OUD, with potential impact on connected products and complete takeover...

CVE-2026-60428

...

CVE-2026-60428

CVE-2026-60428 affects Oracle Unified Directory (OUD Core) within Oracle Fusion Middleware, with affected versions 12.2.1.4.0 and 14.1.2.1.0. It is described as unauthenticated, LDAP-accessible, allowing compromise of OUD and potentially unauthorized read, update, insert, or delete of accessible ...

CVE-2026-60424

CVE-2026-60424 affects Oracle Unified Directory (OUD Core) within Oracle Fusion Middleware. Affected versions are 12.2.1.4.0 and 14.1.2.1.0. The vulnerability is exploitable by an unauthenticated attacker over a network via LDAP to compromise OUD, potentially resulting in takeover. The CVSS score...

CVE-2026-60419

CVE-2026-60419 affects Oracle Unified Directory (OUD Core) within Oracle Fusion Middleware. Affected versions are 12.2.1.4.0 and 14.1.2.1.0. The vulnerability allows a low-privileged, network-accessible attacker via LDAP to compromise OUD, potentially taking over the directory service. CVSS 3.1 b...

CVE-2026-60419

...

CVE-2026-60418

...

CVE-2026-60417

...

CVE-2026-60410

...

CVE-2026-60411

CVE-2026-60411 affects Oracle TimesTen In-Memory Database, component ttcserver, with affected version 26.1.1.1.0. The vulnerability allows an unauthenticated attacker with access to the physical communication segment to compromise TimesTen, potentially causing a hang or frequent crashes (complete...

CVE-2026-60408

CVE-2026-60408 affects Oracle TimesTen In-Memory Database (Kubernetes Operator) with version 26.1.1.1.0. The vulnerability allows a low-privileged attacker with network access over HTTPS to read a subset of TimesTen data. The CVSS v3.1 base score is 4.3 ( Confidentiality impact: Low; Privileges R...

CVE-2026-60399

The CVE-2026-60399 entry describes a vulnerability in Oracle GoldenGate (Receiver Service Executable). Affected versions are 19.1.0.0.0–19.30.0.0, 21.3–21.21, and 23.4–23.26.1. An attacker with network access over HTTP and low privileges can cause a hang or crash (DoS) of GoldenGate. CVSS v3.1 ba...

CVE-2026-60396

...

CVE-2026-60395

CVE-2026-60395 concerns Oracle GoldenGate (Admin Server Executable). Affected versions are 19.1.0.0.0–19.30.0.0, 21.3–21.21, and 23.4–23.26.1. The vulnerability can be exploited by a low-privileged attacker with network access via HTTP to gain unauthorized read access to a subset of GoldenGate da...

CVE-2026-60396

The vulnerability CVE-2026-60396 affects Oracle GoldenGate (Distribution Server executable). Affected supported versions are 21.3-21.21 and 23.4-23.26.1. The issue is exploitable remotely over HTTPS by a high-privilege attacker, with potential takeover of Oracle GoldenGate and impacts to confiden...

CVE-2026-60389

CVE-2026-60389 affects Oracle Fusion Middleware’s Service Delivery Platform, specifically the Messaging Enabler. Affected products/versions are 12.2.1.4.0 and 14.1.2.0.0. The vulnerability is described as easily exploitable with network access over HTTP by an unauthenticated attacker, potentially...