CVE-2026-60558

Oracle WebCenter Sites (WebCenter Sites component) is affected in versions 12.2.1.4.0 and 14.1.2.0.0. The vulnerability allows an unauthenticated, network-accessible attacker over HTTP to compromise the application and can lead to takeover, with CVSS v3.1 base score 8.1 (C/H, I/H, A/H). The conne...

CVE-2026-60529

CVE-2026-60529 affects Oracle WebLogic Server Console in Oracle Fusion Middleware (versions 14.1.2.0.0 and 15.1.1.0.0). The vulnerability enables a high-privilege attacker with network access via HTTP to compromise the server, potentially taking over the WebLogic installation. The connected docum...

CVE-2026-60458

CVE-2026-60458 affects Oracle WebCenter Enterprise Capture (Client Bundle) within Oracle Fusion Middleware. Affected versions are 12.2.1.4.0 and 14.1.2.0.0. The vulnerability is exploitable over the network via T3/IIOP by a low-privilege attacker and can lead to takeover of the product, with CVSS...

CVE-2026-60454

CVE-2026-60454 affects Oracle HTTP Server (Core) in Oracle Fusion Middleware. Affected versions are 12.2.1.4.0 and 14.1.2.0.0. The vulnerability is described as easily exploitable with a low-privilege attacker who can log on to the infrastructure where Oracle HTTP Server runs, potentially leading...

CVE-2026-60452

...

CVE-2026-60450

Oracle WebCenter Content (Content Server) in Oracle Fusion Middleware is affected. Affected versions: 12.2.1.4.0 and 14.1.2.0.0. An unauthenticated attacker with network access via HTTPS can compromise the Content Server, potentially leading to takeover. CVSS 3.1 base score 8.1 (C/I/A). Root caus...

CVE-2026-60445

...

CVE-2026-60437

CVE-2026-60437 affects Oracle Unified Directory (OUD Core) within Oracle Fusion Middleware. Affected support versions are 12.2.1.4.0 and 14.1.2.1.0. The vulnerability enables a high-privilege attacker with network access via LDAP to compromise Oracle Unified Directory, potentially causing unautho...

CVE-2026-60428

...

CVE-2026-60421

...

CVE-2026-60408

CVE-2026-60408 affects Oracle TimesTen In-Memory Database (Kubernetes Operator) with version 26.1.1.1.0. The vulnerability allows a low-privileged attacker with network access over HTTPS to read a subset of TimesTen data. The CVSS v3.1 base score is 4.3 ( Confidentiality impact: Low; Privileges R...

CVE-2026-60408

...

CVE-2026-60407

...

CVE-2026-60403

CVE-2026-60403 affects Oracle TimesTen In-Memory Database (Kubernetes Operator component) with vulnerable version 26.1.1.1.0. An attacker with network access over HTTPS and low privileges can cause the database to hang or crash (DoS). CVSS 3.1 base score 6.5 (A:H; AV:N; AC:L; PR:L). No explicit e...

CVE-2026-60403

...

CVE-2026-60399

The CVE-2026-60399 entry describes a vulnerability in Oracle GoldenGate (Receiver Service Executable). Affected versions are 19.1.0.0.0–19.30.0.0, 21.3–21.21, and 23.4–23.26.1. An attacker with network access over HTTP and low privileges can cause a hang or crash (DoS) of GoldenGate. CVSS v3.1 ba...

CVE-2026-60328

...

CVE-2026-60283

...

CVE-2026-60241

...

CVE-2026-60237

CVE-2026-60237 affects Oracle Coherence (Core) within Oracle Fusion Middleware. Affected versions are 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. The vulnerability allows an unauthenticated attacker with network access via TCP to read a subset of Oracle Coherence data. CVSS 3.1 base score is 5.3 (Con...