CVE-2026-60708

CVE-2026-60708 affects Oracle E-Business Suite, Oracle Process Manufacturing Financials (Internal Operations). Affected versions are 12.2.3–12.2.15. The vulnerability can be triggered by a low-privileged attacker over HTTP with network access, potentially enabling creation, deletion or modificati...

CVE-2026-60701

CVE-2026-60701 is a vulnerability in Oracle E-Business Suite’s Oracle Universal Work Queue, specifically the Work Provider Site Level Administration component. Affected versions are 12.2.3–12.2.15. The issue can be exploited by a high-privilege attacker with network access via HTTP to compromise ...

CVE-2026-60692

CVE-2026-60692 affects Oracle E-Business Suite’s Oracle Enterprise Asset Management (Internal Operations) with affected versions 12.2.3 through 12.2.15. The vulnerability can be exploited by a low-privileged attacker over HTTP from the network, with no user interaction required, leading to takeov...

CVE-2026-60602

The CVE affects Oracle PeopleSoft Enterprise CS Student Financials Billing (component: Billing), specifically version 9.2.38. It describes a vulnerability that lets a low-privileged user with network access via HTTP compromise the system and potentially takeover PeopleSoft CS Student Financials. ...

CVE-2026-60603

CVE-2026-60603 affects Oracle PeopleSoft: PeopleSoft Enterprise CS Student Records, Australian Features component, versions 9.2.38. A low-privileged attacker with network access over HTTP can compromise the affected system, potentially taking over the PeopleSoft CS Student Records instance (CVSS ...

CVE-2026-60600

CVE-2026-60600 affects Oracle PeopleSoft Enterprise FIN Project Costing (component: Projects) for the supported 9.2 version. The vulnerability is exploitable by a local attacker who has logon access to the infrastructure hosting PeopleSoft FIN Project Costing and requires user interaction, with t...

CVE-2026-60572

The CVE-2026-60572 entry concerns Oracle E-Business Suite Integrated SOA Gateway (Web Service Provider) with affected versions 12.2.3–12.2.15. The vulnerability, described as easily exploitable, allows a low-privilege, network-accessible attacker over HTTP to compromise data: unauthorized update/...

CVE-2026-60567

CVE-2026-60567 affects Oracle Fusion Middleware’s Oracle Identity Manager (OIM) Legacy UI component. Affected versions are 12.2.1.4.0 and 14.1.2.1.0. The vulnerability allows unauthenticated, network-accessible attackers via HTTP to compromise OIM, potentially enabling creation, deletion, or modi...

CVE-2026-60557

CVE-2026-60557 affects Oracle WebCenter Sites (Oracle Fusion Middleware) in versions 12.2.1.4.0 and 14.1.2.0.0. The issue allows an unauthenticated attacker with network access over HTTP to compromise WebCenter Sites, with human interaction required for exploitation. Impact per sources: potential...

CVE-2026-60526

CVE-2026-60526 is a vulnerability in Oracle Java SE (component: Installation). It affects Oracle Java SE 8u491 and 8u491-perf. The issue is exploitable by a low-privileged user with logon to the infrastructure where Oracle Java SE runs; exploitation is difficult (high attack complexity) and requi...

CVE-2026-60502

CVE-2026-60502 affects Oracle WebCenter Content: Imaging (Core) with vulnerable versions 12.2.1.4.0 and 14.1.2.0.0. The vulnerability allows a high-privilege attacker with network access via T3/ IIOP to compromise WebCenter Content: Imaging, potentially leading to takeover. CVSS v3.1 base score 7...

CVE-2026-60471

The CVE-2026-60471 entry concerns Oracle WebCenter Content: Imaging (Core) with affected versions 12.2.1.4.0 and 14.1.2.0.0. The vulnerability allows an unauthenticated attacker with access to the local network segment hosting WebCenter Content: Imaging to compromise the application, potentially ...

CVE-2026-60442

CVE-2026-60442 affects Oracle Fusion Middleware Service Delivery Platform (Messaging Enabler) for 12.2.1.4.0 and 14.1.2.0.0. An unauthenticated attacker with network access over T3/IIOP can compromise the Service Delivery Platform, potentially leading to takeover (CVSS 3.1 base 9.8). Root cause a...

CVE-2026-60327

CVE-2026-60327 affects Oracle Access Manager (Authentication Engine) within Oracle Fusion Middleware. Affects 12.2.1.4.0 and 14.1.2.1.0; the issue allows unauthenticated, network-accessible HTTP compromise of Oracle Access Manager, potentially granting unauthorized access to data. The vulnerabili...

CVE-2026-60320

Summary: CVE-2026-60320 affects Oracle Data Integrator (Oracle Fusion Middleware) Patchset Assistant in versions 12.2.1.4.0 and 14.1.2.0.0. An unauthenticated, network-accessible attacker can exploit via HTTP to gain unauthorized access to data. The base score is 7.5 (CVSSv3.1, HIGH). The connect...

CVE-2026-60304

CVE-2026-60304 affects Oracle Coherence (Core) within Oracle Fusion Middleware. Affects supported versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. The flaw allows a low-privileged, network-accessible attacker (TCP) to cause a hang or repeatable crash (complete denial of service) in Or...

CVE-2026-60305

CVE-2026-60305 affects Oracle Coherence (Core) within Oracle Fusion Middleware. Affected versions are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. The vulnerability is exploitable over TCP with network access by a low-privilege attacker, leading to unauthorized create/delete/modify access ...

CVE-2026-60300

...

CVE-2026-60292

Summary: CVE-2026-60292 affects Oracle WebLogic Server (Oracle Fusion Middleware, Core). Affected versions: 12.2.1.4.0 and 14.1.1.0.0.** Impact:** unauthenticated, network-accessible attacker over HTTP can compromise and take over the server. Status: corroborated by NVD and Oracle CPU July 2026 a...

CVE-2026-60293

...