CVE-2026-60438

CVE-2026-60438 concerns the Oracle HTTP Server component (mod_ssl) within Oracle Fusion Middleware. Affected are supported versions 12.2.1.4.0 and 14.1.2.0.0. An unauthenticated attacker with network access via HTTP can compromise the server, potentially leading to creation, deletion or modificat...

CVE-2026-60436

CVE-2026-60436 affects Oracle Unified Directory (OUD Core) in Oracle Fusion Middleware, with vulnerable versions 12.2.1.4.0 and 14.1.2.1.0. The vulnerability allows unauthenticated, network-accessible LDAP attackers to cause the OUD service to hang or crash (complete DOS). CVSS v3.1 base score 7....

CVE-2026-60431

...

CVE-2026-60430

...

CVE-2026-60428

CVE-2026-60428 affects Oracle Unified Directory (OUD Core) within Oracle Fusion Middleware, with affected versions 12.2.1.4.0 and 14.1.2.1.0. It is described as unauthenticated, LDAP-accessible, allowing compromise of OUD and potentially unauthorized read, update, insert, or delete of accessible ...

CVE-2026-60426

...

CVE-2026-60421

CVE-2026-60421 affects Oracle Unified Directory (OUD Core) in Oracle Fusion Middleware. Affected: 12.2.1.4.0 and 14.1.2.1.0. The vulnerability allows a low-privileged attacker with network access via LDAP to compromise OUD, potentially leading to unauthorized creation, deletion or modification of...

CVE-2026-60420

Technical details about CVE-2026-60420 are not publicly provided in the supplied documents. Monitor for updates.

CVE-2026-60410

CVE-2026-60410 : In Oracle TimesTen In-Memory Database, the Kubernetes Operator component is affected (version 26.1.1.1.0). The issue enables a low-privilege attacker who can reach the service over HTTPS to cause a partial denial of service to TimesTen In-Memory Database. The CVSS 3.1 base score ...

CVE-2026-60410

...

CVE-2026-60411

CVE-2026-60411 affects Oracle TimesTen In-Memory Database, component ttcserver, with affected version 26.1.1.1.0. The vulnerability allows an unauthenticated attacker with access to the physical communication segment to compromise TimesTen, potentially causing a hang or frequent crashes (complete...

CVE-2026-60406

...

CVE-2026-60400

...

CVE-2026-60396

...

CVE-2026-60397

...

CVE-2026-60394

CVE-2026-60394 affects Oracle GoldenGate (Admin Server Executable). Affected versions: 21.3–21.21 and 23.4–23.26.1. An unauthenticated, network-accessible attacker via HTTPS can compromise GoldenGate, leading to unauthorized read access to a subset of data. CVSS v3.1 base score 5.3 (Confidentiali...

CVE-2026-60389

CVE-2026-60389 affects Oracle Fusion Middleware’s Service Delivery Platform, specifically the Messaging Enabler. Affected products/versions are 12.2.1.4.0 and 14.1.2.0.0. The vulnerability is described as easily exploitable with network access over HTTP by an unauthenticated attacker, potentially...

CVE-2026-60388

CVE-2026-60388 affects Oracle Fusion Middleware’s Service Delivery Platform, specifically the Messaging Enabler component. Affected versions are 12.2.1.4.0 and 14.1.2.0.0. The vulnerability allows an unauthenticated attacker with network access via T3/IIOP to compromise the Service Delivery Platf...

CVE-2026-60380

...

CVE-2026-60378

CVE-2026-60378 affects Oracle Fusion Middleware Service Delivery Platform, Messaging Enabler component. Affected versions: 12.2.1.4.0 and 14.1.2.0.0. The vulnerability allows an unauthenticated attacker with network access via HTTP to compromise the Service Delivery Platform, potentially taking o...