CVE-2026-61029

Oracle WebCenter Sites (component: WebCenter Sites) in Fusion Middleware versions 12.2.1.4.0 and 14.1.2.0.0 is vulnerable to a network-based attack. An unauthenticated remote attacker can compromise the application, potentially impacting additional products (scope change), with CVSS 9.0 critical ...

CVE-2026-61022

...

CVE-2026-61021

...

CVE-2026-61018

...

CVE-2026-61008

A critical (CVSS 9.1) unauthenticated, network-accessible HTTP vulnerability affects Oracle WebCenter Sites 12.2.1.4.0 and 14.1.2.0.0, allowing full confidentiality and integrity compromise. Oracle's August 2026 security advisory is the remediation source. Exploitation details are not provided in...

CVE-2026-61008

...

CVE-2026-60996

CVE-2026-60996 affects Oracle Identity Manager Connector (Connectors and Connector Server component) in versions 12.2.1.4.0 and 14.1.2.1.0. A high-privileged network attacker can exploit it over HTTPS to gain unauthorized read/write access to all connector-accessible data with scope change. No sp...

CVE-2026-60993

...

CVE-2026-60983

A high-severity (CVSS 7.7) vulnerability in Oracle WebCenter Content's Content Server component (versions 14.1.2.0.0 and 12.2.1.4.0) allows a low-privileged attacker with network HTTP access to read critical data. No public exploit code or active exploitation details are provided in the documents...

CVE-2026-60981

...

CVE-2026-60970

A critical (CVSS 9.8) unauthenticated remote vulnerability in Oracle WebCenter Enterprise Capture Client Bundle (versions 12.2.1.4.0 and 14.1.2.0.0) allows network-based T3/IIOP attacks leading to full system compromise. No patch version or exploit details are provided; see Oracle's August 2026 s...

CVE-2026-60969

...

CVE-2026-60958

Oracle WebCenter Enterprise Capture (versions 12.2.1.4.0 and 14.1.2.0.0, Client Bundle component) has a critical flaw: an unauthenticated remote attacker can fully compromise the application over HTTP (CVSS 9.8). Oracle's August 2026 CPU advisory is referenced for patch details. No exploit code o...

CVE-2026-60967

The nVision component of Oracle PeopleSoft Enterprise PeopleTools (versions 8.61-8.63) is affected by a HIGH severity vulnerability (CVSS 8.8). An unauthenticated attacker with network access via HTTP can exploit it with low complexity, requiring only user interaction, to compromise the applicati...

CVE-2026-60958

...

CVE-2026-60955

Affected versions are 12.2.1.4.0 and 14.1.2.0.0 of Oracle WebCenter Content's Content Server component. A high-privileged network attacker can exploit this via HTTP to create, delete, or modify data, read a subset of data, and cause partial denial of service. Oracle's August 2026 CPU advisory is ...

CVE-2026-60946

...

CVE-2026-60933

...

CVE-2026-60902

...

CVE-2026-60902

CVE-2026-60902 is a vulnerability in the Tuxedo component of Oracle PeopleSoft Enterprise PeopleTools , affecting versions 8.61–8.63 . A low-privileged attacker with local logon access can exploit this vulnerability (with high attack complexity) to achieve full system takeover , resulting in high...