CVE-2026-60459

...

CVE-2026-60454

...

CVE-2026-60447

...

CVE-2026-60449

...

CVE-2026-60445

...

CVE-2026-60446

...

CVE-2026-60446

...

CVE-2026-60422

...

CVE-2026-60422

...

CVE-2026-60422

CVE-2026-60422 affects Oracle Fusion Middleware’s Oracle Unified Directory (OUD Core). The vulnerable product is Oracle Unified Directory 14.1.2.1.0. The vulnerability allows a low-privilege attacker who can access OUD via LDAP over the network to compromise the directory, with potential unauthor...

CVE-2026-60423

Affected product: Oracle Unified Directory (OUD Core) within Oracle Fusion Middleware. Vulnerable versions: 12.2.1.4.0 and 14.1.2.1.0. Impact: Low-privilege attacker with network access via LDAP can compromise OUD and potentially take over the directory. Severity: CVSS v3.1 base score 8.8 (HIGH) ...

CVE-2026-60407

...

CVE-2026-60404

...

CVE-2026-60406

...

CVE-2026-60401

...

CVE-2026-60398

Oracle GoldenGate Microservices is affected in 19.1.0.0.0–19.30.0.0, 21.3–21.21, and 23.4–23.26.1. The vulnerability can be exploited by a low-privileged, network-access attacker via HTTP to take over Oracle GoldenGate. CVSS v3.1 base score is 8.8 (C/H, I/H, A/H). No exploitation details are prov...

CVE-2026-60394

...

CVE-2026-60383

The CVE-2026-60383 entry concerns Oracle Fusion Middleware’s Service Delivery Platform, specifically the Messaging Enabler component. Affected versions are 12.2.1.4.0 and 14.1.2.0.0. The vulnerability is described as easily exploitable by a low-privileged user with logon to the infrastructure run...

CVE-2026-60363

CVE-2026-60363 affects Oracle HTTP Server (Apache Plugin) in Oracle Fusion Middleware. Affected: 12.2.1.4.0 and 14.1.2.0.0. The flaw allows unauthenticated, network-based HTTP access that can lead to takeover of Oracle HTTP Server (CVSS 3.1 base score 9.8). Connected sources confirm vulnerable co...

CVE-2026-60344

The CVE-2026-60344 entry concerns Oracle E-Business Suite’s Oracle HRMS (France) with the French HR Payroll component. Affected releases are 12.2.3 through 12.2.15. The issue is exploitable by a low-privilege attacker over HTTP on the network, potentially enabling unauthorized update, insert, or ...