33053 matches found
CVE-2026-61330
...
CVE-2026-61319
...
CVE-2026-61308
A medium-severity (CVSS 6.8) vulnerability in the Networking component of Oracle Java SE (8u501 through 26.0.2), GraalVM for JDK (17.0.20, 21.0.12), and GraalVM Enterprise Edition (21.3.19) allows unauthenticated remote attackers via HTTP to access critical data with high confidentiality impact; ...
CVE-2026-61307
Affected product: Oracle PeopleSoft Enterprise CC Common Application Objects, version 9.2. Root cause/impact: Unauthenticated, network-accessible attacker via Oracle Net can achieve full takeover of the application (C/I/A HIGH), CVSS 8.1. Remediation: Oracle's August 2026 Critical Patch Update ad...
CVE-2026-61295
CVE-2026-61295 affects Oracle WebCenter Content Content Server in Oracle Fusion Middleware versions 12.2.1.4.0 and 14.1.2.0.0. An unauthenticated local attacker can exploit it to gain unauthorized access to critical or all accessible data. CVSS 3.1 base score is 7.1 (HIGH). No exploitation detail...
CVE-2026-61290
A HIGH-severity (CVSS 7.1) vulnerability in Oracle WebCenter Content's Content Server component affects versions 12.2.1.4.0 and 14.1.2.0.0. A low-privileged attacker with network HTTP access can exploit it (requiring human interaction and high complexity) to compromise all three security pillars ...
CVE-2026-61288
...
CVE-2026-61284
A HIGH-severity (CVSS 8.8) flaw in Oracle Enterprise Manager's Application Config Console affects versions 13.5 and 24.1; an HTTP-accessible, low-privilege attacker can fully compromise the platform (C/I/A impacts). Exploitation details and fix version are not provided in the documents; apply Ora...
CVE-2026-61273
...
CVE-2026-61272
Oracle JD Edwards EnterpriseOne Tools (component: Web Runtime SEC , versions 9.2.0.0–9.2.26.4) is affected by a critical (CVSS 9.8) remotely exploitable vulnerability: an unauthenticated attacker over HTTP can fully compromise the application (C/I/A all High). Patch guidance is available in Oracl...
CVE-2026-61259
...
CVE-2026-61265
...
CVE-2026-61230
...
CVE-2026-61229
Oracle WebCenter Portal (Fusion Middleware) Runtime Tools component, versions 12.2.1.4.0 and 14.1.2.0.0, is vulnerable to a HIGH-severity (CVSS 8.1) unauthenticated remote HTTP attack requiring high complexity; successful exploitation can fully compromise the application. No specific root cause o...
CVE-2026-61227
CVE-2026-61227 affects the Runtime Tools component of Oracle WebCenter Portal (Oracle Fusion Middleware), versions 12.2.1.4.0 and 14.1.2.0.0 . A low-privileged attacker with network access via HTTP can exploit this vulnerability, though user interaction is required . Due to a scope change , succe...
CVE-2026-61213
Oracle WebCenter Portal Runtime Tools in versions 12.2.1.4.0 and 14.1.2.0.0 is vulnerable to a network-based, low-complexity attack requiring only low privileges, enabling full system compromise (CVSS 8.8). No exploitation details are provided in the documents; Oracle's August 2026 CPU advisory i...
CVE-2026-61124
The Runtime Tools component of Oracle WebCenter Portal (versions 12.2.1.4.0 and 14.1.2.0.0) has a network-reachable, easily exploitable flaw requiring only human interaction. An unauthenticated attacker can achieve high-integrity data modification or deletion and partial denial of service. No exp...
CVE-2026-61118
...