CVE-2026-61301

CVE-2026-61301 affects Oracle E-Business Suite, Oracle Process Manufacturing Financials (Internal Operations) with affected versions 12.2.3–12.2.15. The vulnerability allows a network-exposed, low-privilege attacker (via HTTP) to compromise data integrity and confidentiality; impact on availabili...

CVE-2026-61207

...

CVE-2026-61102

Vulnerability detail available for CVE-2026-61102 affecting Oracle Banking Trade Finance (Oracle Financial Services Applications) Infrastructure component. Affected versions are 14.6.0–14.8.0. The issue is exploitable over HTTP with network access by a low-privileged attacker, potentially allowin...

CVE-2026-61056

CVE-2026-61056 concerns Oracle PeopleSoft Enterprise FIN Grants (component: Grants) with affected version 9.2. The vulnerability allows an unauthenticated, network-accessible attacker (via HTTP) to compromise FIN Grants, potentially performing unauthorized updates, inserts, or deletes on accessib...

CVE-2026-60987

...

CVE-2026-60763

CVE-2026-60763 affects Oracle Applications Manager in Oracle E-Business Suite (component: Command Line - RapidClone). Affected versions: 12.2.3–12.2.15. The vulnerability allows an unauthenticated attacker with access to the infrastructure where Oracle Applications Manager runs to compromise the ...

CVE-2026-60630

CVE-2026-60630 concerns Oracle APEX, affecting the Installation component in APEX versions 24.1, 24.2, and 26.1. The vulnerability allows a low-privilege, logon-enabled attacker to compromise Oracle APEX, potentially leading to unauthorized access to sensitive data or complete access to all Oracl...

CVE-2026-60552

...

CVE-2026-60490

CVE-2026-60490 affects Oracle JD Edwards EnterpriseOne CRM Foundation (component: CRM Foundation) in the 9.2 line. The vulnerability is exploitable by a low-privilege attacker with network access over HTTP, potentially leading to takeover of the CRM Foundation. CVSS 3.1 base score is 8.8 (Confide...

CVE-2026-60458

...

CVE-2026-60424

CVE-2026-60424 affects Oracle Unified Directory (OUD Core) within Oracle Fusion Middleware. Affected versions are 12.2.1.4.0 and 14.1.2.1.0. The vulnerability is exploitable by an unauthenticated attacker over a network via LDAP to compromise OUD, potentially resulting in takeover. The CVSS score...

CVE-2026-60284

...

CVE-2026-60201

CVE-2026-60201 affects Oracle WebLogic Server (Oracle Fusion Middleware Core) and targets multiple supported versions: 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. The connected sources state that the vulnerability is "difficult to exploit" but allows an unauthenticated attacker with netwo...

CVE-2026-60145

...

CVE-2026-47055

CVE-2026-47055 affects Oracle VM VirtualBox Core in version 7.2.12. The vulnerability allows a high-privilege attacker with local logon to compromise VirtualBox, potentially enabling unauthorized update/insert/delete of some VirtualBox data. CVSS 3.1 base score is 3.2 (LOW) with a local attack ve...

CVE-2026-46903

...

CVE-2026-46783

Technical details are not publicly available in the provided documents. Monitor for updates regarding affected products, components, and remediation once disclosed.

PT-2026-47092

Name of the Vulnerable Software and Affected Versions jq versions prior to 1.8.2 Description Comparing two deeply nested arrays using the == operator can lead to a denial of service through stack exhaustion caused by uncontrolled recursion. The issue occurs within the recursive structural...

CVE-2026-34324

Oracle Life Sciences InForm (App Server) is affected in versions 7.0.1.0 and 7.0.1.1. The vulnerability allows an unauthenticated, network-accessible attacker (via HTTP) to read and modify data, potentially enabling unauthorized updates/inserts/deletes and reading a subset of data. No exploitatio...

CVE-2026-22008

...