CVE-2026-60970

A critical (CVSS 9.8) unauthenticated remote vulnerability in Oracle WebCenter Enterprise Capture Client Bundle (versions 12.2.1.4.0 and 14.1.2.0.0) allows network-based T3/IIOP attacks leading to full system compromise. No patch version or exploit details are provided; see Oracle's August 2026 s...

CVE-2026-60969

...

CVE-2026-60967

The nVision component of Oracle PeopleSoft Enterprise PeopleTools (versions 8.61-8.63) is affected by a HIGH severity vulnerability (CVSS 8.8). An unauthenticated attacker with network access via HTTP can exploit it with low complexity, requiring only user interaction, to compromise the applicati...

CVE-2026-60958

...

CVE-2026-60946

...

CVE-2026-60944

...

CVE-2026-60921

...

CVE-2026-60914

...

CVE-2026-60902

...

CVE-2026-60895

A vulnerability in Oracle Unified Directory's OUD Core component affects versions 12.2.1.4.0 and 14.1.2.1.0. A low-privileged network attacker exploiting via LDAP can gain unauthorized creation, deletion, or modification access to critical data. CVSS 3.1 score is 6.8 (Medium), with high confident...

CVE-2026-60853

CVE-2026-60853 affects Helidon (Oracle Fusion Middleware), specifically the Imperative Web Server component, in supported version 3.2.20 . An unauthenticated attacker with network access via HTTP can exploit this vulnerability, though it is rated as difficult to exploit (high attack complexity). ...

CVE-2026-60856

...

CVE-2026-60853

...

CVE-2026-60830

...

CVE-2026-60820

Oracle Siebel CRM (versions 17.0–26.6, REST component) has a HIGH-severity (CVSS 7.4) vulnerability allowing unauthenticated remote attackers to gain full confidentiality and integrity access to Siebel CRM Integration data. No exploit details are provided; patch guidance is in Oracle's August 202...

CVE-2026-60797

...

CVE-2026-60767

...

CVE-2026-60752

...

CVE-2026-60731

...

CVE-2026-60730

CVE-2026-60730 affects Oracle WebCenter Portal's Composer component (versions 12.2.1.4.0 and 14.1.2.0.0) in Oracle Fusion Middleware. A low-privileged remote attacker can exploit it via HTTP, achieving full CIA compromise with scope change (CVSS 9.9 Critical). No exploit code is provided; Oracle'...