68165 matches found
CVE-2026-62549
Vulnerability in the Oracle HRMS UK product of Oracle E-Business Suite component: UK Payroll. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle HRMS UK. While the vulnerability...
CVE-2026-61262
CVE-2026-61262 affects Oracle Teleservice within Oracle E-Business Suite, specifically the Service Diagnostics Scripts component. Affected versions are 12.2.3 through 12.215. The vulnerability allows an unauthenticated attacker with network access over HTTP to modify data (update/insert/delete) a...
CVE-2026-61091
CVE-2026-61091 affects Oracle Communications Billing and Revenue Management (BRM Server). Affected versions are 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0 and 15.2.0.0.0. The flaw is exploitable locally by a low-privilege user with logon to the infrastructure hosting BRM, potentially leading to takeover ...
CVE-2026-61082
CVE-2026-61082 affects Oracle MySQL Connectors, specifically Connector/J, with vulnerable versions 9.7.0–9.7.1. The vulnerability allows an unauthenticated attacker with network access across multiple protocols to compromise MySQL Connectors, and exploitation requires user interaction. The CVSS 3...
CVE-2026-61062
CVE-2026-61062 affects Oracle PeopleSoft Enterprise FIN Cash Management (Cash Management component) for the 9.2 release. The vulnerability is exploitable locally by a user with logon to the infrastructure where PeopleSoft runs, with low privileges, and can compromise the Cash Management component...
CVE-2026-60842
CVE-2026-60842 affects Oracle Knowledge Management (Oracle E-Business Suite) component Search, with affected versions 12.2.5–12.2.15. The vulnerability allows an unauthenticated attacker with network access via HTTP to compromise Oracle Knowledge Management; exploitation requires human interactio...
CVE-2026-60775
CVE-2026-60775 affects Oracle E-Business Suite Pasta (Internal Operations) with supported affected versions 12.2.3–12.2.15. The vulnerability allows a high-privilege attacker who can log on to the infrastructure where Pasta runs to compromise Pasta, potentially leading to takeover of the Pasta co...
CVE-2026-60723
CVE-2026-60723 affects Oracle Data Integrator (Oracle Fusion Middleware), specifically the Market Place component. Affected versions are 12.2.1.4.0 and 14.1.2.0.0. The vulnerability allows a low-privilege user with logon to the underlying infrastructure to compromise Oracle Data Integrator, with ...
CVE-2026-60537
CVE-2026-60537 affects Oracle Fusion Middleware’s Oracle Managed File Transfer (MFT) Runtime Server. Affects 12.2.1.4.0 and 14.1.2.0.0. The issue allows a low-privileged attacker with network access over HTTP to compromise MFT, with potential takeover of the MFT component and impact to confidenti...
CVE-2026-60527
CVE-2026-60527 affects Oracle WebLogic Server (Console component) in 14.1.2.0.0 and 15.1.1.0.0. The vulnerability allows an unauthenticated user with logon to the host running WebLogic to compromise the server, with high confidentiality impact and a local attack vector (scope changed). No exploit...
CVE-2026-60427
CVE-2026-60427 affects Oracle Unified Directory (OUD Core) in Oracle Fusion Middleware, impacting versions 12.2.1.4.0 and 14.1.2.1.0. The vulnerability can be exploited by an unauthenticated attacker over the network via LDAP to compromise data integrity and confidentiality, with scope change pot...
CVE-2026-60418
CVE-2026-60418 concerns Oracle Fusion Middleware’s Oracle Unified Directory (OUD Core). Affected are 12.2.1.4.0 and 14.1.2.1.0. The vulnerability can be exploited by a high-privilege attacker with network access via LDAP to compromise OUD, potentially resulting in takeover of Oracle Unified Direc...
