CVE-2026-60829

CVE-2026-60829 affects Oracle E-Business Suite, Oracle Advanced Outbound Telephony (Internal Operations). Affected: 12.2.3–12.2.15. An attacker with network access via HTTP and low privileges can compromise the component, potentially taking over Oracle Advanced Outbound Telephony (CVSS 8.8, high ...

CVE-2026-60817

CVE-2026-60817 affects Oracle E-Business Suite’s Oracle iStore Shopping Cart in versions 12.2.3–12.2.15. The vulnerability allows a low-privileged, network-accessible attacker (via HTTP) to compromise iStore, potentially leading to unauthorized creation, deletion or modification of data, or unaut...

CVE-2026-60756

...

CVE-2026-60750

...

CVE-2026-60740

...

CVE-2026-60700

The CVE-2026-60700 entry concerns Oracle E-Business Suite Oracle Universal Work Queue (UWQ) server issues. Affected are 12.2.3–12.2.15; the flaw allows unauthenticated, HTTP-accessible remote compromise, with human interaction required, leading to unauthorized creation/deletion/modification of UW...

CVE-2026-60681

...

CVE-2026-60675

CVE-2026-60675 affects Oracle E-Business Suite’s Oracle Applications Framework (OAF) – specifically the Search Bean component – in versions 12.2.3–12.2.15. The vulnerability enables a network-accessible, low-privilege attacker over HTTP to compromise OAF, potentially taking over the framework. CV...

CVE-2026-60647

...

CVE-2026-60630

...

CVE-2026-60464

...

CVE-2026-60447

...

CVE-2026-60449

...

CVE-2026-60445

...

CVE-2026-60422

CVE-2026-60422 affects Oracle Fusion Middleware’s Oracle Unified Directory (OUD Core). The vulnerable product is Oracle Unified Directory 14.1.2.1.0. The vulnerability allows a low-privilege attacker who can access OUD via LDAP over the network to compromise the directory, with potential unauthor...

CVE-2026-60404

...

CVE-2026-60383

The CVE-2026-60383 entry concerns Oracle Fusion Middleware’s Service Delivery Platform, specifically the Messaging Enabler component. Affected versions are 12.2.1.4.0 and 14.1.2.0.0. The vulnerability is described as easily exploitable by a low-privileged user with logon to the infrastructure run...

CVE-2026-60322

...

CVE-2026-60272

CVE-2026-60272 affects Oracle Coherence (Core) in Oracle Fusion Middleware. Affected versions: 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. The vulnerability allows an unauthenticated attacker with network access over HTTP to compromise Oracle Coherence and potentially take over the compon...

CVE-2026-60257

The CVE-2026-60257 entry concerns Oracle Coherence (Core) within Oracle Fusion Middleware. Affected versions are 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. The vulnerability is exploitable over TCP with no authentication, enabling takeover of Oracle Coherence as described in the sources. The CVSS v3...