CVE-2026-61144

The CVE-2026-61144 entry describes a vulnerability in Oracle MySQL 9.7.x (MySQL Server, Cluster) affecting the Server: Optimizer component for versions 9.7.0–9.7.1. An attacker with network access via multiple protocols and high privileges can cause a hang or repeated crashes (complete DoS) in My...

CVE-2026-61144

...

CVE-2026-61144

...

CVE-2026-61140

The CVE-2026-61140 entry affects Oracle WebCenter Sites (WebCenter Sites component) in Oracle Fusion Middleware, specifically version 14.1.2.0.0. The vulnerability is exploitable without authentication over HTTP and can lead to takeover of Oracle WebCenter Sites, with a CVSS v3.1 score of 9.8 (Ne...

CVE-2026-61136

Oracle Commerce Platform (Dynamo Application Framework) is affected in version 11.4.0. The vulnerability allows an unauthenticated attacker over HTTP to perform unauthorized updates, inserts/deletes, read access to data, and cause partial denial of service. CVSS v3.1 base score 7.3 (Confidentiali...

CVE-2026-61138

...

CVE-2026-61137

...

CVE-2026-61138

CVE-2026-61138 affects Oracle E-Business Suite CMRO (Internal Operations) with affected versions 12.2.3–12.2.15. A network-accessible, unauthenticated vulnerability allows compromise via HTTP, potentially leading to unauthorized data access and updates (CVSSv3.1 base 7.5). No exploitation details...

CVE-2026-61138

...

CVE-2026-61137

CVE-2026-61137 affects Oracle Commerce Platform (Dynamo Application Framework) with affected version 11.4.0. An unauthenticated, network-accessible flaw over HTTP can lead to full takeover of the platform (CVSS 3.1: 8.1, C/I/A high). The connected Oracle CPU July 2026 advisory indicates patches e...

CVE-2026-61132

Oracle Commerce Platform (Dynamo Application Framework) vulnerability CVE-2026-61132 affects version 11.4.0. A low privileged attacker can exploit over HTTP with network access, and user interaction is required, to potentially gain unauthorized access to critical data and perform unauthorized upd...

CVE-2026-61132

...

CVE-2026-61127

...

CVE-2026-61127

CVE-2026-61127 affects Oracle Communications Service Catalog and Design (component: Solution Designer). Affected versions are 8.0.0.7.0–8.3.0.2.0. The vulnerability is described as easily exploitable with network access over HTTP by a low-privilege attacker, potentially leading to takeover of the...

CVE-2026-61128

...

CVE-2026-61129

...

CVE-2026-61128

CVE-2026-61128 affects Oracle MySQL products: MySQL Server (Optimizer) and MySQL Cluster, with affected versions MySQL Server 9.7.0–9.7.1 and MySQL Cluster 9.7.0–9.7.1. The vulnerability is described as exploitable by a high-privilege attacker who has network access via multiple protocols, potent...

CVE-2026-61125

Oracle E-Business Suite Configure to Order (Supply to Order Workbench) is affected in versions 12.2.3–12.2.15. A vulnerability allows a low-privilege, network-accessible attacker (via HTTP) to compromise Oracle Configure to Order, with potential scope expansion affecting additional products. Succ...

CVE-2026-61122

...

CVE-2026-61121

Vulnerability CVE-2026-61121 affects Oracle HRMS (UK) within Oracle E-Business Suite (UK Payroll) for versions 12.2.8–12.2.15. The issue allows a low-privilege attacker with network access over HTTP to compromise Oracle HRMS (UK), with potential takeover (CVSS v3.1 base score 8.8; impacts to conf...