CVE-2026-60979

CVE-2026-60979 affects Oracle E-Business Suite Oracle Scripting (Internal Operations) in versions 12.2.3–12.2.15. The vulnerability enables unauthenticated, network-accessible attackers (via HTTP) to compromise Oracle Scripting, with potential takeover and high impact on confidentiality, integrit...

CVE-2026-60898

CVE-2026-60898 affects Oracle E-Business Suite’s Oracle Warehouse Management (Internal Operations) with affected product versions 12.2.3 through 12.2.15. The vulnerability is exploitable by a low-privilege attacker over HTTP with network access, potentially leading to takeover of Oracle Warehouse...

CVE-2026-60859

...

CVE-2026-60667

...

CVE-2026-60542

CVE-2026-60542 affects Oracle Fusion Middleware’s Oracle Business Process Management Suite (Human Workflow) in versions 12.2.1.4.0 and 14.1.2.0.0. The vulnerability allows a low-privileged attacker with network access via T3/IIOP to compromise the BPM Suite; attacks may impact additional products...

CVE-2026-60466

...

CVE-2026-60407

...

CVE-2026-60406

...

CVE-2026-60321

...

CVE-2026-60253

CVE-2026-60253 affects Oracle Coherence (Core) within Oracle Fusion Middleware. Impacted versions: 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, 15.1.1.0.0. An unauthenticated, network-accessible attacker via TCP can take over Oracle Coherence. CVSS v3.1 base score 9.8 (C/H/I/A). Exploitation details are n...

CVE-2026-62178

REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-61427. Reason: This candidate is a duplicate of CVE-2026-61427. Notes: All CVE users should reference CVE-2026-61427 instead of this candidate...

MINI-GM5J-9923-F5C4

Bulletin has no description...

PT-2026-55839

Name of the Vulnerable Software and Affected Versions kas versions prior to 5.4 Description Internal SSH key setup triggered by SSH PRIVATE KEY or SSH PRIVATE KEY FILE creates a /.ssh/config file when no user-specific SSH configuration exists. The ssh no host key check function in kas/libcmds.py...

MINI-WG6V-2MRH-HQRC

Bulletin has no description...

CVE-2026-46958

...

CVE-2026-46867

Technical details for CVE-2026-46867 are not publicly provided in the supplied documents. Monitor for updates from Oracle and CVE records for affected products, components, and remediation guidance.

MINI-4QX4-RP45-395C

Bulletin has no description...

MINI-CWCP-WRPF-RV72

Bulletin has no description...

CVE-2026-34314

Oracle Financial Services Analytical Applications Infrastructure (OFSAAI), specifically the Platform component, is affected in versions 8.0.7.9, 8.0.8.7, and 8.1.2.5. The vulnerability allows a low-privilege, unauthenticated attacker with network access via HTTP to cause unauthorized creation, de...

CVE-2026-22003

CVE-2026-22003 affects Oracle Java SE (Hotspot) and Oracle GraalVM Enterprise Edition. Affected: Oracle Java SE 8u481 and 8u481-b50; GraalVM EE 21.3.17. The vulnerability allows a low-privilege, locally authenticated attacker to compromise the runtime and may lead to unauthorized data modificatio...