CVE-2026-60844

CVE-2026-60844 affects Oracle E-Business Suite Oracle Customer Support (Update Service Request) with affected versions 12.2.3–12.2.15. An unauthenticated or low-privilege attacker with network access over HTTP can compromise Oracle Customer Support, enabling unauthorized creation/deletion/modific...

CVE-2026-60838

...

CVE-2026-60840

...

CVE-2026-60813

CVE-2026-60813 affects Oracle E-Business Suite iStore Shopping Cart component; affected versions 12.2.3–12.2.15. The vulnerability allows a high-privilege attacker with network access via HTTP to takeover Oracle iStore. CVSS v3.1 base score 7.2 (C/H/I/A). No exploitation details provided beyond t...

CVE-2026-60790

...

CVE-2026-60788

...

CVE-2026-60770

...

CVE-2026-60760

...

CVE-2026-60735

CVE-2026-60735 affects Oracle E-Business Suite, Oracle Sales Offline (Internal Operations) in versions 12.2.3–12.2.15. An attacker with low privilege gains network access via HTTP to compromise Oracle Sales Offline, enabling unauthorized creation, deletion or modification of data and potentially ...

CVE-2026-60723

...

CVE-2026-60697

...

CVE-2026-60681

...

CVE-2026-60678

...

CVE-2026-60673

The CVE-2026-60673 entry concerns Oracle BI Publisher (Oracle Analytics) with affected XML Services. Affected versions are 8.2.0.0.0, 12.2.1.4.0, and 26.01.0.0.0. The vulnerability is exploitable by a low-privilege attacker who has network access via HTTP, leading to unauthorized access to Oracle...

CVE-2026-60668

...

CVE-2026-60654

CVE-2026-60654 affects Oracle WebCenter Content (Web Content Management) in Oracle Fusion Middleware. Affected versions are 12.2.1.4.0 and 14.1.2.0.0. The vulnerability allows a low-privileged, unauthenticated attacker with network access via HTTP to take over Oracle WebCenter Content. CVSS 3.1 b...

CVE-2026-60647

...

CVE-2026-60643

...

CVE-2026-60643

...

CVE-2026-60636

CVE-2026-60636 affects Oracle WebCenter Content (Content Server) in Oracle Fusion Middleware. Affected supported versions are 12.2.1.4.0 and 14.1.2.0.0. The vulnerability is exploitable over HTTP by an unauthenticated attacker and, with user interaction, can lead to takeover of Oracle WebCenter C...