33089 matches found
CVE-2026-61021
...
CVE-2026-61008
A critical (CVSS 9.1) unauthenticated, network-accessible HTTP vulnerability affects Oracle WebCenter Sites 12.2.1.4.0 and 14.1.2.0.0, allowing full confidentiality and integrity compromise. Oracle's August 2026 security advisory is the remediation source. Exploitation details are not provided in...
CVE-2026-61008
...
CVE-2026-60996
CVE-2026-60996 affects Oracle Identity Manager Connector (Connectors and Connector Server component) in versions 12.2.1.4.0 and 14.1.2.1.0. A high-privileged network attacker can exploit it over HTTPS to gain unauthorized read/write access to all connector-accessible data with scope change. No sp...
CVE-2026-60993
...
CVE-2026-60983
A high-severity (CVSS 7.7) vulnerability in Oracle WebCenter Content's Content Server component (versions 14.1.2.0.0 and 12.2.1.4.0) allows a low-privileged attacker with network HTTP access to read critical data. No public exploit code or active exploitation details are provided in the documents...
CVE-2026-60981
...
CVE-2026-60970
A critical (CVSS 9.8) unauthenticated remote vulnerability in Oracle WebCenter Enterprise Capture Client Bundle (versions 12.2.1.4.0 and 14.1.2.0.0) allows network-based T3/IIOP attacks leading to full system compromise. No patch version or exploit details are provided; see Oracle's August 2026 s...
CVE-2026-60969
...
CVE-2026-60958
Oracle WebCenter Enterprise Capture (versions 12.2.1.4.0 and 14.1.2.0.0, Client Bundle component) has a critical flaw: an unauthenticated remote attacker can fully compromise the application over HTTP (CVSS 9.8). Oracle's August 2026 CPU advisory is referenced for patch details. No exploit code o...
CVE-2026-60967
The nVision component of Oracle PeopleSoft Enterprise PeopleTools (versions 8.61-8.63) is affected by a HIGH severity vulnerability (CVSS 8.8). An unauthenticated attacker with network access via HTTP can exploit it with low complexity, requiring only user interaction, to compromise the applicati...
CVE-2026-60958
...
CVE-2026-60955
Affected versions are 12.2.1.4.0 and 14.1.2.0.0 of Oracle WebCenter Content's Content Server component. A high-privileged network attacker can exploit this via HTTP to create, delete, or modify data, read a subset of data, and cause partial denial of service. Oracle's August 2026 CPU advisory is ...
CVE-2026-60946
...
CVE-2026-60933
...
CVE-2026-60902
...
CVE-2026-60902
CVE-2026-60902 is a vulnerability in the Tuxedo component of Oracle PeopleSoft Enterprise PeopleTools , affecting versions 8.61–8.63 . A low-privileged attacker with local logon access can exploit this vulnerability (with high attack complexity) to achieve full system takeover , resulting in high...
CVE-2026-60895
A vulnerability in Oracle Unified Directory's OUD Core component affects versions 12.2.1.4.0 and 14.1.2.1.0. A low-privileged network attacker exploiting via LDAP can gain unauthorized creation, deletion, or modification access to critical data. CVSS 3.1 score is 6.8 (Medium), with high confident...