6813 matches found
CVE-2026-60608
...
CVE-2026-60606
CVE-2026-60606 affects Oracle PeopleSoft (CC Common Application Objects) on version 9.2. The vulnerability is in the Common Application Objects component and is exploitable without authentication over HTTP, enabling unauthorized creation/modification/deletion of data and access to all CC Common A...
CVE-2026-60606
...
CVE-2026-60586
CVE-2026-60586 affects Oracle MySQL Connector/J (9.7.0–9.7.1). The vulnerability in MySQL Connectors allows a low-privileged, network-accessing attacker to compromise Connector/J via multiple protocols. Attacks may impact additional products (scope change) and can lead to unauthorized access to d...
CVE-2026-60579
The CVE affects Oracle E-Business Suite's Oracle Enterprise Command Center Framework (Core) with affected version V16. The vulnerability allows an unauthenticated attacker with access to the physical communication segment to compromise the framework. Impact includes unauthorized creation, deletio...
CVE-2026-60575
The CVE concerns Oracle E-Business Suite’s Workflow component, specifically the Workflow Notification Mailer. Affected versions are 12.2.3–12.2.15. The issue allows a low-privilege attacker with HTTP network access to perform unauthorized updates/inserts/deletes and reads in Oracle Workflow data,...
CVE-2026-60567
CVE-2026-60567 affects Oracle Fusion Middleware’s Oracle Identity Manager (OIM) Legacy UI component. Affected versions are 12.2.1.4.0 and 14.1.2.1.0. The vulnerability allows unauthenticated, network-accessible attackers via HTTP to compromise OIM, potentially enabling creation, deletion, or modi...
CVE-2026-60567
...
CVE-2026-60558
Oracle WebCenter Sites (WebCenter Sites component) is affected in versions 12.2.1.4.0 and 14.1.2.0.0. The vulnerability allows an unauthenticated, network-accessible attacker over HTTP to compromise the application and can lead to takeover, with CVSS v3.1 base score 8.1 (C/H, I/H, A/H). The conne...
CVE-2026-60555
The CVE-2026-60555 entry concerns Oracle WebCenter Sites (Oracle Fusion Middleware WebCenter Sites). Affected supported versions are 12.2.1.4.0 and 14.1.2.0.0. The vulnerability is exploitable without authentication over HTTP and can lead to takeover of Oracle WebCenter Sites, per the description...
CVE-2026-60553
The CVE-2026-60553 affects Oracle WebCenter Sites (Oracle Fusion Middleware) on versions 12.2.1.4.0 and 14.1.2.0.0. The vulnerability is exploitable remotely over HTTP by an unauthenticated attacker, leading to unauthorized creation, deletion or modification of data, or complete access to Oracle ...
CVE-2026-60548
...
CVE-2026-60545
...
CVE-2026-60543
...
CVE-2026-60537
CVE-2026-60537 affects Oracle Fusion Middleware’s Oracle Managed File Transfer (MFT) Runtime Server. Affects 12.2.1.4.0 and 14.1.2.0.0. The issue allows a low-privileged attacker with network access over HTTP to compromise MFT, with potential takeover of the MFT component and impact to confidenti...
CVE-2026-60528
...
CVE-2026-60523
The CVE-2026-60523 entry affects Oracle WebCenter Content (Content Server) in Oracle Fusion Middleware, with affected versions 12.2.1.4.0 and 14.1.2.0.0. The vulnerability allows network-based exploitation via HTTP, requires user interaction, and can lead to unauthorized data creation/deletion/mo...
CVE-2026-60519
...