4133 matches found
CVE-2026-61154
CVE-2026-61154 affects Oracle Commerce Guided Search Platform Services (Oracle Commerce, Forge component) with affected version 11.4.0. An unauthenticated attacker with network access over HTTP can compromise the Guided Search Platform Services, potentially leading to complete takeover. CVSS v3.1...
CVE-2026-61131
The CVE-2026-61131 entry maps to Oracle Commerce Platform (Dynamo Application Framework) with affected version 11.4.0. The vulnerability is exploitable over HTTP without authentication, enabling an attacker with network access to compromise and potentially takeover the Oracle Commerce Platform. T...
CVE-2026-61108
Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL component: Server: GIS. Supported versions that are affected are MySQL Server: 9.7.0-9.7.1; MySQL Cluster: 9.7.0-9.7.1. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protoco...
CVE-2026-61078
CVE-2026-61078 affects Oracle PeopleSoft 9.2, specifically the CC Common Application Objects component. The flaw exists in the Common Application Objects and can be exploited by a low-privilege, network-connected attacker over HTTP; exploitation requires user interaction. Impact is unauthorized c...
CVE-2026-61074
The CVE-2026-61074 concern affects Oracle PeopleSoft FIN Common Objects Brazil (component: eProcurement) with affected version 9.1. The vulnerability is exploitable by an unauthenticated attacker over HTTP, enabling takeover of PeopleSoft Enterprise FIN Common Objects Brazil and is scored CVSS 3....
CVE-2026-60960
CVE-2026-60960 describes a vulnerability in the Oracle SDP Number Portability component (Internal Operations) of Oracle E-Business Suite. Affected versions are 12.2.3 through 12.2.15. The issue is exploitable by a low-privileged user who can log on to the infrastructure where Oracle SDP Number Po...
CVE-2026-60825
CVE-2026-60825 affects Oracle iSupport within Oracle E-Business Suite (component: Internal Operations). Affected are EBS versions 12.2.3–12.2.15. The vulnerability is exploitable by a high-privilege attacker over HTTP with network access and can lead to takeover of Oracle iSupport. CVSS 3.1 base ...
CVE-2026-60750
...
CVE-2026-60749
CVE-2026-60749 is a vulnerability in Oracle Assets (Oracle E-Business Suite), affecting 12.2.3–12.2.15 of the Internal Operations component. The issue is exploitable over the network (HTTP) by a low-privileged attacker and can lead to unauthorized creation, deletion or modification of critical da...
CVE-2026-60665
...
CVE-2026-60657
...
CVE-2026-60636
CVE-2026-60636 affects Oracle WebCenter Content (Content Server) in Oracle Fusion Middleware. Affected supported versions are 12.2.1.4.0 and 14.1.2.0.0. The vulnerability is exploitable over HTTP by an unauthenticated attacker and, with user interaction, can lead to takeover of Oracle WebCenter C...
CVE-2026-60548
The CVE concerns Oracle Fusion Middleware’s Oracle SOA Suite (Integration Business Insight) with affected versions 12.2.1.4.0 and 14.1.2.0.0. The issue is exploitable over HTTP with network access by a low-privileged attacker, potentially leading to unauthorized access to critical data or full ac...
CVE-2026-60405
CVE-2026-60405 affects Oracle TimesTen In-Memory Database (Kubernetes Operator component) with affected version 26.1.1.1.0. The description states a low-privilege, locally authenticated attacker can compromise TimesTen In-Memory Database, potentially allowing unauthorized read access to a subset ...
CVE-2026-60381
CVE-2026-60381 concerns Oracle Fusion Middleware’s Service Delivery Platform (Messaging Enabler). Affected versions are 12.2.1.4.0 and 14.1.2.0.0. The vulnerability allows an attacker with network access via T3/IIOP and low privileges to compromise the Service Delivery Platform, with potential ta...