29891 matches found
CVE-2026-60205
Oracle WebLogic Server (Fusion Middleware Core) is affected in versions 12.2.1.4.0 and 14.1.2.0.0. The CVE-2026-60205 vulnerability allows unauthenticated, network-accessed takeover via TCP, with CVSS 3.1 base score 9.8 (CRITICAL). Documents do not provide exploit code, in-the-wild exploitation s...
CVE-2026-60206
...
CVE-2026-60202
...
CVE-2026-60181
...
CVE-2026-60174
Technical details for CVE-2026-60174 are not publicly available in the provided documents. Monitor for updates from Oracle and CVE/NVD sources.
CVE-2026-60172
CVE-2026-60172 affects Oracle Autonomous Health Framework (AHF) via the Developer triaging platform. Versions 26.0.0, 26.1.0, and 26.2.0 are affected. The vulnerability is locally exploitable and requires high privileges with user interaction; successful exploitation can lead to takeover of AHF a...
CVE-2026-60166
CVE-2026-60166 affects Oracle Java SE JavaFX. Affected product/version: Oracle Java SE 8u491. The vulnerability arises in JavaFX components and can be triggered by network-accessible vectors, with exploitation requiring user interaction. Successful exploitation could lead to unauthorized read acc...
CVE-2026-60159
...
CVE-2026-60145
The CVE-2026-60145 entry concerns Oracle MySQL: Server (Optimizer) and MySQL Cluster. Affected versions are MySQL Server 8.4.0–8.4.10 and 9.7.0–9.7.1; MySQL Cluster 8.0.0–8.0.47, 8.4.0–8.4.10, and 9.7.0–9.7.1. The vulnerability can be exploited by a high-privilege attacker with network access via...
CVE-2026-47059
CVE-2026-47059 affects Oracle Java SE and Oracle GraalVM offerings (Java SE component 2D). Affected versions include Oracle Java SE: 8u491, 8u491-perf, 11.0.31, 17.0.19, 21.0.11, 25.0.3, 26.0.1; Oracle GraalVM for JDK: 17.0.19 and 21.0.11; Oracle GraalVM Enterprise Edition: 21.3.18. The vulnerabi...
CVE-2026-47054
...
CVE-2026-47046
...
CVE-2026-47040
CVE-2026-47040 describes a vulnerability in the Oracle Net Services component of Oracle Database Server. Affected are 19.3–19.31, 21.3–21.22, and 23.4.0–23.26.2. An unauthenticated attacker with network access via Oracle Net can compromise Oracle Net Services, potentially leading to unauthorized ...
CVE-2026-47040
...
CVE-2026-47038
CVE-2026-47038 affects Oracle Database Server’s RDBMS component. Supported vulnerable versions: 19.3–19.31, 21.3–21.22, and 23.4.0–23.26.2. An attacker with high privileges and network access via Oracle Net can exploit this to perform unauthorized updates/inserts/deletes on some RDBMS data. CVSS ...
CVE-2026-47032
CVE-2026-47032 affects Oracle Siebel CRM End User (component: Redwood UI). Affected versions: 24.4–26.3. The issue is exploitable with network access via HTTP by a high-privilege attacker and requires user interaction; may impact additional products (scope change) and can cause a partial denial o...
CVE-2026-47028
...
CVE-2026-47028
The CVE-2026-47028 entry concerns Oracle E-Business Suite’s Document Management and Collaboration (Attachments) with affected versions 12.2.3–12.2.15. The underlying issue allows a low-privilege, network-accessible attacker (HTTP) to compromise DMC, enabling unauthorized creation, deletion, or mo...