CVE-2026-47021

...

CVE-2026-47017

The CVE-2026-47017 affects Oracle PeopleSoft Enterprise PeopleTools, specifically the Process Scheduler component, with affected versions 8.61 and 8.62. The vulnerability is exploitable over a network via HTTP by a low-privilege attacker and requires user interaction. Successful attacks can lead ...

CVE-2026-47014

CVE-2026-47014 affects Oracle E-Business Suite, Oracle Product Workbench (Security) with affected versions 12.2.3–12.2.15. An attacker with network access via HTTP and low privileges can potentially read/write data, leading to unauthorized creation, deletion, or modification of data across Oracle...

CVE-2026-47015

...

CVE-2026-47011

...

CVE-2026-47013

CVE-2026-47013 affects Oracle Java SE (JavaFX) with Java 8u491. Vulnerability allows unauthenticated network access to compromise Java SE, potentially causing a partial denial of service via APIs that load untrusted data, impacting client deployments using sandboxed Java Web Start/applets. Connec...

CVE-2026-47012

The CVE-2026-47012 entry concerns Oracle MySQL: Server (Optimizer) in MySQL Server and MySQL Cluster. Affects MySQL Server versions 8.4.0–8.4.10 and 9.7.0–9.7.1; MySQL Cluster 8.0.0–8.0.47, 8.4.0–8.4.10, and 9.7.0–9.7.1. The vulnerability is exploitable by a high-privilege attacker with network a...

CVE-2026-47009

...

CVE-2026-47005

...

CVE-2026-47007

CVE-2026-47007 affects Oracle Communications Pricing Design Center (On-premise Deployment). Affects versions 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0 and 15.2.0.0.0. The vulnerability allows a low-privileged user who can log on to the infrastructure running Oracle Communications Pricing Design Center t...

CVE-2026-47004

CVE-2026-47004 affects Oracle Enterprise Manager Base Platform (Self Update Framework) in versions 13.5 and 24.1. The vulnerability allows a low-privileged attacker with HTTPS network access to compromise the Base Platform, potentially leading to takeover. The provided documents do not specify ex...

CVE-2026-47003

CVE-2026-47003 affects Oracle Enterprise Manager Base Platform, specifically the UI Framework. Affected versions are 13.5 and 24.1. The vulnerability is exploitable over a network via HTTPS by an unauthenticated attacker, potentially leading to unauthorized access to critical data or the entire s...

CVE-2026-47004

...

CVE-2026-46998

...

CVE-2026-47000

Oracle Enterprise Manager Base Platform (Security Framework) is affected in version 24.1. The CVE-2026-47000 entry indicates an easily exploitable vulnerability that allows a low-privileged, network-accessing attacker (HTTPS) to compromise the Base Platform. Successful attacks can lead to unautho...

CVE-2026-46997

...

CVE-2026-46995

CVE-2026-46995 affects Oracle Enterprise Manager Base Platform (component: Metadata Plugin) in versions 13.5 and 24.1. The vulnerability allows a low-privilege, network-accessible attacker over HTTPS to compromise the Base Platform, potentially leading to full takeover (CVSS 3.1 base score 8.8). ...

CVE-2026-46997

CVE-2026-46997 affects Oracle Enterprise Manager Base Platform (Metadata Plugin) with vulnerable versions 13.5 and 24.1. The flaw allows a low-privilege, network-authenticated attacker (via HTTPS) to compromise data integrity, potentially enabling unauthorized creation, deletion, or modification ...

CVE-2026-46995

...

CVE-2026-46994

CVE-2026-46994 affects Oracle Enterprise Manager Base Platform (Oracle Enterprise Manager) - Agent Next Gen component. Affected supported versions are 13.5 and 24.1. The vulnerability allows an unauthenticated attacker with network access over HTTPS to compromise the Base Platform, potentially le...