CVE-2026-60735

CVE-2026-60735 affects Oracle E-Business Suite, Oracle Sales Offline (Internal Operations) in versions 12.2.3–12.2.15. An attacker with low privilege gains network access via HTTP to compromise Oracle Sales Offline, enabling unauthorized creation, deletion or modification of data and potentially ...

CVE-2026-60712

...

CVE-2026-60713

...

CVE-2026-60703

The CVE-2026-60703 entry concerns Oracle Interaction Blending (Internal Operations) in Oracle E-Business Suite, affected on 12.2.3–12.2.15. A local, low-privileged attacker with logon can compromise Oracle Interaction Blending, potentially leading to unauthorized creation, deletion or modificatio...

CVE-2026-60669

The CVE-2026-60669 entry concerns Oracle PeopleSoft Enterprise HCM Global Payroll Mexico (component: Global Payroll for Mexico) with affected version 9.2. A low-privilege, network-accessible (via HTTP) attacker can access and modify data, potentially causing unauthorized data changes and a partia...

CVE-2026-60656

...

CVE-2026-60646

...

CVE-2026-60638

...

CVE-2026-60623

...

CVE-2026-60577

...

CVE-2026-60548

The CVE concerns Oracle Fusion Middleware’s Oracle SOA Suite (Integration Business Insight) with affected versions 12.2.1.4.0 and 14.1.2.0.0. The issue is exploitable over HTTP with network access by a low-privileged attacker, potentially leading to unauthorized access to critical data or full ac...

CVE-2026-60549

...

CVE-2026-60496

...

CVE-2026-60460

...

CVE-2026-60423

Affected product: Oracle Unified Directory (OUD Core) within Oracle Fusion Middleware. Vulnerable versions: 12.2.1.4.0 and 14.1.2.1.0. Impact: Low-privilege attacker with network access via LDAP can compromise OUD and potentially take over the directory. Severity: CVSS v3.1 base score 8.8 (HIGH) ...

CVE-2026-60417

...

CVE-2026-60408

...

CVE-2026-60397

...

CVE-2026-60386

...

CVE-2026-60312

CVE-2026-60312 affects Oracle WebLogic Server (Fusion Middleware Core). Affected versions: 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, 15.1.1.0.0. The vulnerability allows an unauthenticated attacker with network access via T3 or IIOP to compromise the server and potentially takeover the Oracle WebLogic ...