CVE-2026-60686

CVE-2026-60686 affects Oracle E-Business Suite, Oracle U.S. Federal Financials (Internal Operations) with affected 12.2.3–12.2.15. A low-privileged, network-accessible attacker can exploit over HTTP to potentially modify, delete, or read critical data in Oracle U.S. Federal Financials, per the pr...

CVE-2026-60681

...

CVE-2026-60675

CVE-2026-60675 affects Oracle E-Business Suite’s Oracle Applications Framework (OAF) – specifically the Search Bean component – in versions 12.2.3–12.2.15. The vulnerability enables a network-accessible, low-privilege attacker over HTTP to compromise OAF, potentially taking over the framework. CV...

CVE-2026-60667

...

CVE-2026-60653

...

CVE-2026-60651

CVE-2026-60651 affects Oracle WebCenter Content (Web Content Management) in Oracle Fusion Middleware. Affected versions are 12.2.1.4.0 and 14.1.2.0.0. The vulnerability allows an unauthenticated, network-accessible attacker (via HTTP) to compromise WebCenter Content; exploitation requires user in...

CVE-2026-60648

...

CVE-2026-60647

...

CVE-2026-60641

...

CVE-2026-60630

...

CVE-2026-60623

...

CVE-2026-60614

...

CVE-2026-60604

...

CVE-2026-60596

CVE-2026-60596 affects Oracle PeopleSoft, specifically the FIN eSettlements product and its eSettlements component on version 9.2. The vulnerability allows a high-privileged attacker who can log on to the infrastructure where PeopleSoft runs to perform an unauthorized read of a subset of data. CV...

CVE-2026-60594

...

CVE-2026-60593

The CVE-2026-60593 affects Oracle PeopleSoft, specifically the PeopleSoft Enterprise FIN Staffing Front Office ( Staffing Front Office) on version 9.2. The vulnerability allows an unauthenticated attacker with network access over HTTP to potentially create, delete, or modify data in the FIN Staff...

CVE-2026-60572

...

CVE-2026-60556

...

CVE-2026-60542

CVE-2026-60542 affects Oracle Fusion Middleware’s Oracle Business Process Management Suite (Human Workflow) in versions 12.2.1.4.0 and 14.1.2.0.0. The vulnerability allows a low-privileged attacker with network access via T3/IIOP to compromise the BPM Suite; attacks may impact additional products...

CVE-2026-60537

CVE-2026-60537 affects Oracle Fusion Middleware’s Oracle Managed File Transfer (MFT) Runtime Server. Affects 12.2.1.4.0 and 14.1.2.0.0. The issue allows a low-privileged attacker with network access over HTTP to compromise MFT, with potential takeover of the MFT component and impact to confidenti...