CVE-2026-60410

CVE-2026-60410 : In Oracle TimesTen In-Memory Database, the Kubernetes Operator component is affected (version 26.1.1.1.0). The issue enables a low-privilege attacker who can reach the service over HTTPS to cause a partial denial of service to TimesTen In-Memory Database. The CVSS 3.1 base score ...

CVE-2026-60410

...

CVE-2026-60411

CVE-2026-60411 affects Oracle TimesTen In-Memory Database, component ttcserver, with affected version 26.1.1.1.0. The vulnerability allows an unauthenticated attacker with access to the physical communication segment to compromise TimesTen, potentially causing a hang or frequent crashes (complete...

CVE-2026-60406

...

CVE-2026-60400

...

CVE-2026-60396

...

CVE-2026-60397

...

CVE-2026-60389

CVE-2026-60389 affects Oracle Fusion Middleware’s Service Delivery Platform, specifically the Messaging Enabler. Affected products/versions are 12.2.1.4.0 and 14.1.2.0.0. The vulnerability is described as easily exploitable with network access over HTTP by an unauthenticated attacker, potentially...

CVE-2026-60394

CVE-2026-60394 affects Oracle GoldenGate (Admin Server Executable). Affected versions: 21.3–21.21 and 23.4–23.26.1. An unauthenticated, network-accessible attacker via HTTPS can compromise GoldenGate, leading to unauthorized read access to a subset of data. CVSS v3.1 base score 5.3 (Confidentiali...

CVE-2026-60388

CVE-2026-60388 affects Oracle Fusion Middleware’s Service Delivery Platform, specifically the Messaging Enabler component. Affected versions are 12.2.1.4.0 and 14.1.2.0.0. The vulnerability allows an unauthenticated attacker with network access via T3/IIOP to compromise the Service Delivery Platf...

CVE-2026-60380

...

CVE-2026-60378

CVE-2026-60378 affects Oracle Fusion Middleware Service Delivery Platform, Messaging Enabler component. Affected versions: 12.2.1.4.0 and 14.1.2.0.0. The vulnerability allows an unauthenticated attacker with network access via HTTP to compromise the Service Delivery Platform, potentially taking o...

CVE-2026-60377

The CVE-2026-60377 affects Oracle Fusion Middleware’s Service Delivery Platform (component: Messaging Enabler). Affected versions are 12.2.1.4.0 and 14.1.2.0.0. An attacker with network access via T3/IIOP and low privileges can compromise the Service Delivery Platform, potentially leading to unau...

CVE-2026-60364

...

CVE-2026-60364

Concisely: CVE-2026-60364 affects Oracle Fusion Middleware’s WebLogic Server Proxy Plug-In for Third-Party Web Servers, specifically versions 12.2.1.4.0 and 14.1.2.0.0. The issue allows an unauthenticated attacker to compromise the plug‑in via HTTP, enabling unauthorized creation, deletion or mod...

CVE-2026-60365

...

CVE-2026-60359

...

CVE-2026-60355

...

CVE-2026-60356

...

CVE-2026-60350

CVE-2026-60350 affects Oracle JDeveloper (ADF Faces) within Oracle Fusion Middleware. Affected versions: 12.2.1.4.0 and 14.1.2.0.0. An attacker with low privileges who can log on to the infrastructure where JDeveloper runs can compromise JDeveloper, with potential broader impact on related produc...