CVE-2026-60996

CVE-2026-60996 affects Oracle Identity Manager Connector (Connectors and Connector Server component) in versions 12.2.1.4.0 and 14.1.2.1.0. A high-privileged network attacker can exploit it over HTTPS to gain unauthorized read/write access to all connector-accessible data with scope change. No sp...

CVE-2026-60993

Oracle Identity Manager Connector Core component in Fusion Middleware versions 12.2.1.4.0 and 14.1.2.1.0 has a HIGH-severity (CVSS 7.5) vulnerability; an unauthenticated attacker with physical-segment access can compromise the connector, achieving full CIA impact. No patch version or exploit deta...

CVE-2026-60995

Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via TLS to compromise Oracle Identity...

CVE-2026-60983

A high-severity (CVSS 7.7) vulnerability in Oracle WebCenter Content's Content Server component (versions 14.1.2.0.0 and 12.2.1.4.0) allows a low-privileged attacker with network HTTP access to read critical data. No public exploit code or active exploitation details are provided in the documents...

CVE-2026-60980

Affected versions are Oracle WebCenter Content Content Server 12.2.1.4.0 and 14.1.2.0.0. An unauthenticated remote attacker via HTTP can compromise data integrity and confidentiality with scope change. Oracle's August 2026 CPU patch resolves this; apply immediately. No in-the-wild exploitation re...

CVE-2026-60983

...

CVE-2026-60976

Oracle E-Business Suite Scripting (Internal Operations) is affected in versions 12.2.3-12.2.15. A low-privilege attacker with network HTTP access can exploit it (CVSS 8.8) to fully compromise the application. Oracle released the August 2026 Critical Patch Update addressing this; no in-the-wild ex...

EUVD-2026-61286

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft component: Security. Supported versions that are affected are 8.61 and 8.62. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where PeopleSoft Enterprise PeopleToo...

CVE-2026-60977

Oracle WebLogic Server WLS Core Components in versions 12.2.1.4.0, 14.1.1.0.0, and 14.1.2.0.0 is vulnerable to an unauthenticated RMI-based attack yielding full server takeover (CVSS 9.8 Critical). No exploitation details are provided. Apply Oracle's August 2026 CPU patch referenced in the adviso...

CVE-2026-60971

...

CVE-2026-60958

Oracle WebCenter Enterprise Capture (versions 12.2.1.4.0 and 14.1.2.0.0, Client Bundle component) has a critical flaw: an unauthenticated remote attacker can fully compromise the application over HTTP (CVSS 9.8). Oracle's August 2026 CPU advisory is referenced for patch details. No exploit code o...

CVE-2026-60958

...

CVE-2026-60955

...

CVE-2026-60947

Oracle WebCenter Enterprise Capture (Oracle Fusion Middleware) is affected in the Client Bundle component at versions 12.2.1.4.0 and 14.1.2.0.0. An unauthenticated remote attacker can exploit the service via RMI to achieve full takeover (confidentiality, integrity, availability all impacted). CVS...

CVE-2026-60944

...

CVE-2026-60934

Oracle WebCenter Content (Content Server component) in versions 12.2.1.4.0 and 14.1.2.0.0 has a high-severity (CVSS 8.7) vulnerability exploitable by an unauthenticated remote attacker over HTTP, enabling unauthorized creation, deletion, modification, and full access to critical data. Oracle's Au...

CVE-2026-60944

Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware component: Content Server. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

CVE-2026-60928

...

CVE-2026-60933

The CVE description confirms concrete technical details: affected component is Content Server in Oracle WebCenter Content (versions 12.2.1.4.0 and 14.1.2.0.0), exploitable over HTTP by unauthenticated attackers, yielding unauthorized data read/write access (CVSS 7.4 HIGH). No exploitation evidenc...

CVE-2026-60915

Vulnerability in the Helidon product of Oracle Fusion Middleware component: Imperative Web Server. The supported version that is affected is 4.5.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful attacks of this...