18291 matches found
CVE-2026-60857
The CVE-2026-60857 entry describes a vulnerability in Oracle E-Business Suite’s Oracle Contracts Integration product (component: Internal Operations) affecting versions 12.2.3 through 12.2.15. The flaw is exploitable by a low-privilege attacker with network access over HTTP, potentially leading t...
CVE-2026-60829
CVE-2026-60829 affects Oracle E-Business Suite, Oracle Advanced Outbound Telephony (Internal Operations). Affected: 12.2.3–12.2.15. An attacker with network access via HTTP and low privileges can compromise the component, potentially taking over Oracle Advanced Outbound Telephony (CVSS 8.8, high ...
CVE-2026-60811
CVE-2026-60811 affects Oracle E-Business Suite’s Oracle Supply Chain Trading Connector (component: Collaboration History) in versions 12.2.3–12.2.15. The vulnerability enables a low-privileged, network-accessible attacker over HTTP to perform unauthorized updates/insertions/deletions and to read ...
CVE-2026-60775
CVE-2026-60775 affects Oracle E-Business Suite Pasta (Internal Operations) with supported affected versions 12.2.3–12.2.15. The vulnerability allows a high-privilege attacker who can log on to the infrastructure where Pasta runs to compromise Pasta, potentially leading to takeover of the Pasta co...
CVE-2026-60706
...
CVE-2026-60650
CVE-2026-60650 affects Oracle WebCenter Content (Web Content Management) within Oracle Fusion Middleware. Affected versions are 12.2.1.4.0 and 14.1.2.0.0. The vulnerability is exploitable over HTTP by a low-privilege, network-access—requiring user interaction—attacker, with the potential for take...
CVE-2026-60641
CVE-2026-60641 affects Oracle WebCenter Content (Content Server) in Oracle Fusion Middleware, with affected versions 12.2.1.4.0 and 14.1.2.0.0. The vulnerability allows an unauthenticated attacker with network access via HTTP to compromise WebCenter Content, requiring user interaction. Impacts in...
CVE-2026-60631
CVE-2026-60631 affects Oracle WebCenter Content (Content Server) in Oracle Fusion Middleware, specifically affected versions 12.2.1.4.0 and 14.1.2.0.0. The vulnerability is exploitable by an unauthenticated attacker who can reach the system over HTTP; attacks require user interaction from a count...
CVE-2026-60624
CVE-2026-60624 affects Oracle MySQL Connector/J in MySQL Connectors, with vulnerable versions 9.7.0–9.7.1. The vulnerability allows an unauthenticated, network-accessible attacker to cause a hang or frequent crashes (complete DoS) of Connector/J, with user interaction required for exploitation an...
CVE-2026-60625
CVE-2026-60625 affects Oracle Data Integrator (Studio) in Oracle Fusion Middleware, with vulnerable versions 12.2.1.4.0 and 14.1.2.0.0. The issue allows a low-privileged user who can log on to the environment where ODI runs to compromise ODI, potentially leading to takeover (CVSS 3.1 base score 7...
CVE-2026-60608
CVE-2026-60608 affects Oracle PeopleSoft Enterprise CS Financial Aid (component: Institutional Methodology Need Analysis) with affected version 9.2.38. The issue allows a low-privilege, logged-in attacker to compromise the Financial Aid module, potentially causing unauthorized creation, deletion ...