CVE-2026-60501

...

CVE-2026-60499

CVE-2026-60499 affects Oracle JD Edwards EnterpriseOne Solution Advisor (component: Solution Advisor) in the 9.2 line. The vulnerability allows a low-privilege, network-accessible attacker (via HTTP) to take over the JD Edwards EnterpriseOne Solution Advisor; CVSS 3.1 base score 8.8 (C/H/I/H). Th...

CVE-2026-60497

CVE-2026-60497 affects Oracle JD Edwards EnterpriseOne CRM Foundation, specifically the CRM Foundation component in the 9.2 line. The vulnerability is exploitable with network access via JDENET by a low-privilege attacker and can lead to takeover of the CRM Foundation, per the CVSS 3.1 vector (AV...

CVE-2026-60495

The CVE-2026-60495 entry concerns Oracle JD Edwards EnterpriseOne Requirements Planning (component: Requirements Planning) with the affected version reported as 9.2. The vulnerability allows a low-privilege attacker who can access JDENET over the network to compromise the JD Edwards EnterpriseOne...

CVE-2026-60496

...

CVE-2026-60493

CVE-2026-60493 affects Oracle JD Edwards EnterpriseOne Human Resources Management (component: Human Resources) with affected version 9.2. The vulnerability is exploitable over HTTP by a low-privileged, network-attached attacker, potentially leading to takeover with CVSS 3.1 base score 8.8 (C/H, I...

CVE-2026-60491

...

CVE-2026-60472

CVE-2026-60472 concerns Oracle WebCenter Content: Imaging (Core) vulnerability affecting 12.2.1.4.0 and 14.1.2.0.0. The issue allows a low-privileged attacker with network access over HTTP to compromise WebCenter Content: Imaging, with potential takeover consequences. The CVSS 3.1 base score is 8...

CVE-2026-60470

The CVE-2026-60470 entry concerns Oracle Fusion Middleware WebCenter Content: Imaging (Core) with affected versions 12.2.1.4.0 and 14.1.2.0.0. The vulnerability is exploitable over HTTP by a network-Adjacent attacker with low privileges, requiring user interaction, and may lead to unauthorized cr...

CVE-2026-60462

Affected product: Oracle WebCenter Content (Content Server) within Oracle Fusion Middleware. Vulnerable versions: 12.2.1.4.0 and 14.1.2.0.0. Issue: a vulnerability allows an unauthenticated attacker with network access over HTTP to compromise WebCenter Content and potentially take over the applic...

CVE-2026-60460

The CVE-2026-60460 entry corresponds to Oracle WebCenter Enterprise Capture (Client Bundle) in Oracle Fusion Middleware. Affected versions are 12.2.1.4.0 and 14.1.2.0.0. The vulnerability can be exploited over NETWORK via T3/IIOP by an unauthenticated attacker to takeover Oracle WebCenter Enterpr...

CVE-2026-60457

...

CVE-2026-60454

...

CVE-2026-60450

...

CVE-2026-60447

...

CVE-2026-60448

...

CVE-2026-60444

CVE-2026-60444 affects Oracle WebCenter Content (Content Server) in Oracle Fusion Middleware, with affected versions 12.2.1.4.0 and 14.1.2.0.0. The vulnerability allows a low-privileged attacker with network access over HTTP to compromise WebCenter Content, potentially leading to unauthorized dat...

CVE-2026-60442

...

CVE-2026-60443

CVE-2026-60443 affects Oracle WebCenter Content (Content Server) in Oracle Fusion Middleware. Affected versions: 12.2.1.4.0 and 14.1.2.0.0. It is exploitable with network access via HTTP by a low-privilege user and requires user interaction. Successful attacks can lead to unauthorized creation/de...

CVE-2026-60438

CVE-2026-60438 concerns the Oracle HTTP Server component (mod_ssl) within Oracle Fusion Middleware. Affected are supported versions 12.2.1.4.0 and 14.1.2.0.0. An unauthenticated attacker with network access via HTTP can compromise the server, potentially leading to creation, deletion or modificat...