CVE-2026-60688

...

CVE-2026-60688

...

CVE-2026-60683

CVE-2026-60683 affects Oracle E-Business Suite’s Oracle Process Manufacturing Regulatory Management (Internal Operations) with affected versions 12.2.3 through 12.2.15. The issue allows a low-privilege, unauthenticated or network-reachable attacker to compromise the Regulatory Management module v...

CVE-2026-60678

The CVE-2026-60678 affects Oracle E-Business Suite, Oracle General Ledger (Internal Operations) in supported 12.2.3–12.2.15 releases. The vulnerability allows a low-privilege attacker with network access via SOAP to compromise Oracle General Ledger, with potential takeover and impact to confident...

CVE-2026-60674

...

CVE-2026-60668

Summary: CVE-2026-60668 affects Oracle PeopleSoft Enterprise HCM Human Resources (French Public Sector Specific) on version 9.2. The vulnerability is exploitable over HTTP by an unauthenticated network attacker, potentially leading to unauthorized data access and, for some data, unauthorized upda...

CVE-2026-60669

...

CVE-2026-60666

The CVE-2026-60666 entry describes a vulnerability in Oracle PeopleSoft Enterprise HCM Human Resources (PeopleSoft HCM HR), affecting the 9.2 release. The issue concerns the Security component and can be exploited by a low-privilege attacker with network access via Oracle Net. Successful exploita...

CVE-2026-60663

The CVE-2026-60663 entry relates to Oracle WebCenter Content (Web Content Management) in Oracle Fusion Middleware. Affected versions are 12.2.1.4.0 and 14.1.2.0.0. The flaw is exploitable by a low-privilege, unauthenticated or network-accessing attacker over HTTP, enabling takeover of Oracle WebC...

CVE-2026-60659

CVE-2026-60659 affects Oracle Solaris 11.4 (Filesystems). The connected documents indicate a local, low-privilege attacker who can log on to the infrastructure where Oracle Solaris runs and compromise the system, leading to unauthorized creation/deletion/modification of data and potential complet...

CVE-2026-60659

...

CVE-2026-60657

...

CVE-2026-60653

This CVE (CVE-2026-60653) concerns Oracle WebCenter Content (Web Content Management) with affected versions 12.2.1.4.0 and 14.1.2.0.0. The vulnerability allows a low-privilege, network-accessible attacker (HTTP) to modify or exfiltrate data, potentially gaining unauthorized access to all Oracle W...

CVE-2026-60650

...

CVE-2026-60647

...

CVE-2026-60644

...

CVE-2026-56746 Netty has a Security Control Bypass via CORS Short-Circuit Failure

Netty is a network application framework for development of protocol servers and clients. Versions 4.2.0.Final through 4.2.15.Final and 4.1.0.Final through 4.1.135.Final, are vulnerable to security control bypass during the origin evaluation process. CorsHandler provides a shortCircuit...

CVE-2026-60638

The CVE-2026-60638 entry concerns Oracle WebCenter Content (Content Server) within Oracle Fusion Middleware. Affected versions are 12.2.1.4.0 and 14.1.2.0.0. The vulnerability is exploitable over HTTP with network access and unauthenticated, though successful exploitation requires user interactio...

CVE-2026-60629

The CVE-2026-60629 entry affects Oracle Fusion Middleware’s Oracle JDeveloper component (Data Visualization Tools). Affected versions are 12.2.1.4.0 and 14.1.2.0.0. The vulnerability is exploitable over HTTP with network access by an unauthenticated attacker, potentially leading to unauthorized d...

CVE-2026-60622

The CVE-2026-60622 entry concerns Oracle Fusion Middleware’s Oracle JDeveloper (Security Framework). Affected: JDeveloper in 12.2.1.4.0 and 14.1.2.0.0. Description: an unauthenticated attacker with network access over HTTP can compromise JDeveloper, yielding unauthorized access to sensitive data ...