CVE-2026-61166

...

CVE-2026-61166

...

CVE-2026-61168

...

CVE-2026-61163

...

CVE-2026-61164

CVE-2026-61164 affects Oracle Commerce Guided Search / Oracle Commerce Experience Manager (Content Acquisition System) with affected version 11.4.0. The vulnerability can be exploited by an unauthenticated attacker over HTTPS from network access to compromise data, enabling unauthorized create/de...

CVE-2026-61163

...

CVE-2026-61162

The CVE-2026-61162 affects Oracle Commerce Guided Search / Oracle Commerce Experience Manager (Endeca Application Controller) with affected version 11.4.0. The vulnerability allows a low-privilege, logged-in attacker to compromise the system, potentially causing unauthorized creation, deletion or...

CVE-2026-61154

CVE-2026-61154 affects Oracle Commerce Guided Search Platform Services (Oracle Commerce, Forge component) with affected version 11.4.0. An unauthenticated attacker with network access over HTTP can compromise the Guided Search Platform Services, potentially leading to complete takeover. CVSS v3.1...

CVE-2026-61154

...

CVE-2026-61150

...

CVE-2026-61144

The CVE-2026-61144 entry describes a vulnerability in Oracle MySQL 9.7.x (MySQL Server, Cluster) affecting the Server: Optimizer component for versions 9.7.0–9.7.1. An attacker with network access via multiple protocols and high privileges can cause a hang or repeated crashes (complete DoS) in My...

CVE-2026-61136

...

CVE-2026-61129

CVE-2026-61129 affects Oracle Commerce Platform ATG Portals, version 11.4.0. The vulnerability allows an unauthenticated, remote attacker over HTTP to compromise the platform, with CVSS v3.1 base score 9.8 (Impact: Confidentiality, Integrity, Availability). The connected Oracle CPU July 2026 advi...

CVE-2026-61121

...

CVE-2026-61116

...

CVE-2026-61117

...

CVE-2026-61115

The CVE-2026-61115 entry describes a vulnerability in Oracle E-Business Suite’s Oracle Order Management, specifically the Product Diagnostic Tools component. Affected versions are 12.2.3 through 12.2.15. The flaw is exploitable over a network via HTTP by a high-privilege attacker and can lead to ...

CVE-2026-61111

...

CVE-2026-61104

...

CVE-2026-61093

The CVE-2026-61093 entry concerns Oracle MySQL: Server (Optimizer) with affected MySQL Server 9.7.0–9.7.1 and MySQL Cluster 9.7.0–9.7.1. The vulnerability allows a low-privilege attacker who can reach the server over multiple protocols to cause the MySQL Server/Cluster to hang or crash (complete ...