4122 matches found
CVE-2026-60259
creationtimestamp| type| source ---|---|--- 2026-07-21 23:30:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr6xnk54l42r 2026-07-23 16:49:53+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9...
CVE-2026-60249
creationtimestamp| type| source ---|---|--- 2026-07-21 23:22:07+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr6x7ciqr42q 2026-07-23 16:49:30+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9...
CVE-2026-60229
creationtimestamp| type| source ---|---|--- 2026-07-21 22:26:07+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr6u36yys42a 2026-07-23 16:48:54+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9...
CVE-2026-61225
Vulnerability in the Oracle Communications Converged Application Server product of Oracle Communications component: Core. Supported versions that are affected are 8.2 and 8.3. Difficult to exploit vulnerability allows unauthenticated attacker with network access via TCP/IP to compromise Oracle...
CVE-2026-61098
Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware component: Client Bundle. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise...
CVE-2026-60389
Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware component: Messaging Enabler. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Service...
CVE-2026-60153
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Console. Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTPS to...
CVE-2026-62524
The CVE-2026-62524 vulnerability affects Oracle HRMS (US) within Oracle E-Business Suite (US Payroll - General), affecting 12.2.3–12.2.15. The issue allows a low-privileged, network-attacker (via HTTP) to compromise data: unauthorized update/insert/delete and read access to Oracle HRMS (US) data,...
CVE-2026-62504
The CVE-2026-62504 entry concerns Oracle Time and Labor within Oracle E-Business Suite. Affected versions are 12.2.3–12.2.15, and the vulnerability affects the Internal Operations component. An attacker with low privileges who can reach the system over HTTP can potentially compromise Oracle Time ...
CVE-2026-62478
CVE-2026-62478 affects Oracle E-Business Suite’s Oracle Public Sector Financials (Internal Operations) with affected versions 12.2.3–12.2.15. The vulnerability allows a low-privileged attacker with network access over HTTP to compromise the system, potentially taking over Oracle Public Sector Fin...
CVE-2026-61216
CVE-2026-61216 concerns Oracle E-Business Suite, Oracle Payroll component (Payroll). Affected are 12.2.3–12.2.15. The vulnerability can be exploited by a low-privileged attacker with network access over HTTP to Oracle Payroll, potentially enabling unauthorized update/insert/delete and unauthorize...
CVE-2026-61217
CVE-2026-61217 affects Oracle Fusion Middleware’s Oracle Security Service, specifically the Oracle SSL API component, with affected version 12.2.1.4.0. The vulnerability is exploitable by a low-privileged attacker who has network access via TLS and requires user interaction. Impact includes unaut...
CVE-2026-61154
CVE-2026-61154 affects Oracle Commerce Guided Search Platform Services (Oracle Commerce, Forge component) with affected version 11.4.0. An unauthenticated attacker with network access over HTTP can compromise the Guided Search Platform Services, potentially leading to complete takeover. CVSS v3.1...
CVE-2026-61131
The CVE-2026-61131 entry maps to Oracle Commerce Platform (Dynamo Application Framework) with affected version 11.4.0. The vulnerability is exploitable over HTTP without authentication, enabling an attacker with network access to compromise and potentially takeover the Oracle Commerce Platform. T...
CVE-2026-61108
Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL component: Server: GIS. Supported versions that are affected are MySQL Server: 9.7.0-9.7.1; MySQL Cluster: 9.7.0-9.7.1. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protoco...
CVE-2026-61078
CVE-2026-61078 affects Oracle PeopleSoft 9.2, specifically the CC Common Application Objects component. The flaw exists in the Common Application Objects and can be exploited by a low-privilege, network-connected attacker over HTTP; exploitation requires user interaction. Impact is unauthorized c...
CVE-2026-61074
The CVE-2026-61074 concern affects Oracle PeopleSoft FIN Common Objects Brazil (component: eProcurement) with affected version 9.1. The vulnerability is exploitable by an unauthenticated attacker over HTTP, enabling takeover of PeopleSoft Enterprise FIN Common Objects Brazil and is scored CVSS 3....