33446 matches found
CVE-2026-60865
Oracle Fusion Middleware's Service Delivery Platform Messaging Enabler component (versions 14.1.2.0.0 and 12.2.1.4.0) is vulnerable to network-based HTTP attacks by high-privileged attackers, allowing unauthorized access to critical data with scope-change impact across additional products. CVSS 3...
CVE-2026-60853
CVE-2026-60853 affects Helidon (Oracle Fusion Middleware), specifically the Imperative Web Server component, in supported version 3.2.20 . An unauthenticated attacker with network access via HTTP can exploit this vulnerability, though it is rated as difficult to exploit (high attack complexity). ...
CVE-2026-60853
...
CVE-2026-60856
...
CVE-2026-60849
Oracle Unified Directory (OUD Core) versions 12.2.1.4.0 and 14.1.2.1.0 have a HIGH-severity (CVSS 8.5) LDAP network vulnerability exploitable by low-privileged attackers, enabling full product takeover with scope change; Oracle's August 2026 CPU advisory is the primary remediation source.
CVE-2026-60841
...
CVE-2026-60830
...
CVE-2026-60820
Oracle Siebel CRM (versions 17.0–26.6, REST component) has a HIGH-severity (CVSS 7.4) vulnerability allowing unauthenticated remote attackers to gain full confidentiality and integrity access to Siebel CRM Integration data. No exploit details are provided; patch guidance is in Oracle's August 202...
CVE-2026-60781
...
CVE-2026-60779
...
CVE-2026-60767
...
CVE-2026-60765
Oracle Siebel CRM – Siebel Apps (Marketing) component is affected by a vulnerability in supported versions 17.0 through 26.6 . A low-privileged attacker with network access via HTTP can exploit this flaw to achieve full takeover of the Marketing application (Confidentiality, Integrity, and Availa...
CVE-2026-60759
...
CVE-2026-60758
...
CVE-2026-60752
...
CVE-2026-60753
...
CVE-2026-60742
...
CVE-2026-60731
...
CVE-2026-60730
CVE-2026-60730 affects Oracle WebCenter Portal's Composer component (versions 12.2.1.4.0 and 14.1.2.0.0) in Oracle Fusion Middleware. A low-privileged remote attacker can exploit it via HTTP, achieving full CIA compromise with scope change (CVSS 9.9 Critical). No exploit code is provided; Oracle'...