CVE-2026-61154

CVE-2026-61154 affects Oracle Commerce Guided Search Platform Services (Oracle Commerce, Forge component) with affected version 11.4.0. An unauthenticated attacker with network access over HTTP can compromise the Guided Search Platform Services, potentially leading to complete takeover. CVSS v3.1...

CVE-2026-61154

...

CVE-2026-61150

...

CVE-2026-61147

...

CVE-2026-61144

The CVE-2026-61144 entry describes a vulnerability in Oracle MySQL 9.7.x (MySQL Server, Cluster) affecting the Server: Optimizer component for versions 9.7.0–9.7.1. An attacker with network access via multiple protocols and high privileges can cause a hang or repeated crashes (complete DoS) in My...

CVE-2026-61136

...

CVE-2026-61129

CVE-2026-61129 affects Oracle Commerce Platform ATG Portals, version 11.4.0. The vulnerability allows an unauthenticated, remote attacker over HTTP to compromise the platform, with CVSS v3.1 base score 9.8 (Impact: Confidentiality, Integrity, Availability). The connected Oracle CPU July 2026 advi...

CVE-2026-61121

...

CVE-2026-61116

...

CVE-2026-61117

...

CVE-2026-61115

The CVE-2026-61115 entry describes a vulnerability in Oracle E-Business Suite’s Oracle Order Management, specifically the Product Diagnostic Tools component. Affected versions are 12.2.3 through 12.2.15. The flaw is exploitable over a network via HTTP by a high-privilege attacker and can lead to ...

CVE-2026-61111

...

CVE-2026-61104

...

CVE-2026-61096

...

CVE-2026-61093

The CVE-2026-61093 entry concerns Oracle MySQL: Server (Optimizer) with affected MySQL Server 9.7.0–9.7.1 and MySQL Cluster 9.7.0–9.7.1. The vulnerability allows a low-privilege attacker who can reach the server over multiple protocols to cause the MySQL Server/Cluster to hang or crash (complete ...

CVE-2026-61085

CVE-2026-61085 affects Oracle PeopleSoft. In the Oracle PeopleSoft SCM Inventory product (component: Security), version 9.2 is affected. The vulnerability can be exploited remotely over HTTPS by an unauthenticated attacker to gain unauthorized access to sensitive data or potentially full access t...

CVE-2026-61080

...

CVE-2026-61073

The CVE-2026-61073 affects Oracle PeopleSoft, specifically the FIN Common Objects Brazil product (component: Purchasing) with affected version 9.1. The vulnerability enables unauthenticated, network-accessible (via HTTP) compromise of PeopleSoft Enterprise FIN Common Objects Brazil, potentially l...

CVE-2026-61059

CVE-2026-61059 affects Oracle PeopleSoft (Enterprise SCM Order Management) 9.2 in the Security component. The vulnerability, exploitable via HTTP with network access and no authentication, can lead to unauthorized creation, deletion, or modification of data and potentially complete access to acce...

CVE-2026-61051

CVE-2026-61051 affects Oracle E-Business Suite, Concurrent Processing component BI Publisher Integration. Affects 12.2.3–12.2.15; vulnerability allows a low-privileged attacker with HTTP network access to perform unauthorized update/insert/delete and read operations on Oracle Concurrent Processin...