69422 matches found
CVE-2026-62549
Vulnerability in the Oracle HRMS UK product of Oracle E-Business Suite component: UK Payroll. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle HRMS UK. While the vulnerability...
CVE-2026-62517
...
CVE-2026-62466
Vulnerability in the Oracle Human Resources product of Oracle E-Business Suite component: Data Removal Tool. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Human Resources...
CVE-2026-61329
Vulnerability in the Oracle Price Protection product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Price...
CVE-2026-61262
CVE-2026-61262 affects Oracle Teleservice within Oracle E-Business Suite, specifically the Service Diagnostics Scripts component. Affected versions are 12.2.3 through 12.215. The vulnerability allows an unauthenticated attacker with network access over HTTP to modify data (update/insert/delete) a...
Security Bulletin: IBM DevOps Deploy / IBM UrbanCode Deploy (UCD) is susceptible to multiple Netty vulnerabilities (CVE-2026-45673, CVE-2026-45674, CVE-2026-47691)
Summary Netty is used by IBM UrbanCode Deploy UCD for network communication. CVE-2026-45673, CVE-2026-45674, CVE-2026-47691. Vulnerability Details CVEID:CVE-2026-45673 DESCRIPTION: Netty is a network application framework for development of protocol servers and clients. Prior to versions...
CVE-2026-61205
...
CVE-2026-61157
...
CVE-2026-61148
...
CVE-2026-61091
CVE-2026-61091 affects Oracle Communications Billing and Revenue Management (BRM Server). Affected versions are 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0 and 15.2.0.0.0. The flaw is exploitable locally by a low-privilege user with logon to the infrastructure hosting BRM, potentially leading to takeover ...
CVE-2026-61082
CVE-2026-61082 affects Oracle MySQL Connectors, specifically Connector/J, with vulnerable versions 9.7.0–9.7.1. The vulnerability allows an unauthenticated attacker with network access across multiple protocols to compromise MySQL Connectors, and exploitation requires user interaction. The CVSS 3...
CVE-2026-61062
CVE-2026-61062 affects Oracle PeopleSoft Enterprise FIN Cash Management (Cash Management component) for the 9.2 release. The vulnerability is exploitable locally by a user with logon to the infrastructure where PeopleSoft runs, with low privileges, and can compromise the Cash Management component...
CVE-2026-61047
...
CVE-2026-60842
CVE-2026-60842 affects Oracle Knowledge Management (Oracle E-Business Suite) component Search, with affected versions 12.2.5–12.2.15. The vulnerability allows an unauthenticated attacker with network access via HTTP to compromise Oracle Knowledge Management; exploitation requires human interactio...
CVE-2026-60807
...
CVE-2026-60775
CVE-2026-60775 affects Oracle E-Business Suite Pasta (Internal Operations) with supported affected versions 12.2.3–12.2.15. The vulnerability allows a high-privilege attacker who can log on to the infrastructure where Pasta runs to compromise Pasta, potentially leading to takeover of the Pasta co...
CVE-2026-60763
...
CVE-2026-60723
CVE-2026-60723 affects Oracle Data Integrator (Oracle Fusion Middleware), specifically the Market Place component. Affected versions are 12.2.1.4.0 and 14.1.2.0.0. The vulnerability allows a low-privilege user with logon to the underlying infrastructure to compromise Oracle Data Integrator, with ...
CVE-2026-60652
...
CVE-2026-60537
CVE-2026-60537 affects Oracle Fusion Middleware’s Oracle Managed File Transfer (MFT) Runtime Server. Affects 12.2.1.4.0 and 14.1.2.0.0. The issue allows a low-privileged attacker with network access over HTTP to compromise MFT, with potential takeover of the MFT component and impact to confidenti...