CVE-2026-60661

CVE-2026-60661 affects Oracle Solaris 11.4 (Filesystems). The vulnerability is exploitable by a low-privilege, logged-in user to compromise Oracle Solaris, with potential scope change affecting additional products and full takeover of Solaris. CVSS 3.1 base score 7.8 (HIGH) with local attack vect...

CVE-2026-60659

...

CVE-2026-60652

...

CVE-2026-60650

...

CVE-2026-60649

...

CVE-2026-60639

...

CVE-2026-60640

CVE-2026-60640 affects Oracle WebCenter Content (Content Server) as part of Oracle Fusion Middleware. Affected versions are 12.2.1.4.0 and 14.1.2.0.0. The vulnerability is described as allowing an unauthenticated attacker with network access via HTTP to compromise WebCenter Content, with human in...

CVE-2026-60636

...

CVE-2026-60634

CVE-2026-60634 affects Oracle WebCenter Content (Content Server) in Oracle Fusion Middleware. Affected versions are 12.2.1.4.0 and 14.1.2.0.0. The vulnerability allows an unauthenticated, network-accessible attacker to compromise WebCenter Content via HTTP and can lead to takeover; exploitation r...

CVE-2026-60627

...

CVE-2026-60615

...

CVE-2026-60608

...

CVE-2026-60606

...

CVE-2026-60606

CVE-2026-60606 affects Oracle PeopleSoft (CC Common Application Objects) on version 9.2. The vulnerability is in the Common Application Objects component and is exploitable without authentication over HTTP, enabling unauthorized creation/modification/deletion of data and access to all CC Common A...

CVE-2026-60586

CVE-2026-60586 affects Oracle MySQL Connector/J (9.7.0–9.7.1). The vulnerability in MySQL Connectors allows a low-privileged, network-accessing attacker to compromise Connector/J via multiple protocols. Attacks may impact additional products (scope change) and can lead to unauthorized access to d...

CVE-2026-60579

The CVE affects Oracle E-Business Suite's Oracle Enterprise Command Center Framework (Core) with affected version V16. The vulnerability allows an unauthenticated attacker with access to the physical communication segment to compromise the framework. Impact includes unauthorized creation, deletio...

CVE-2026-60575

The CVE concerns Oracle E-Business Suite’s Workflow component, specifically the Workflow Notification Mailer. Affected versions are 12.2.3–12.2.15. The issue allows a low-privilege attacker with HTTP network access to perform unauthorized updates/inserts/deletes and reads in Oracle Workflow data,...

CVE-2026-60567

...

CVE-2026-60567

CVE-2026-60567 affects Oracle Fusion Middleware’s Oracle Identity Manager (OIM) Legacy UI component. Affected versions are 12.2.1.4.0 and 14.1.2.1.0. The vulnerability allows unauthenticated, network-accessible attackers via HTTP to compromise OIM, potentially enabling creation, deletion, or modi...

CVE-2026-60558

Oracle WebCenter Sites (WebCenter Sites component) is affected in versions 12.2.1.4.0 and 14.1.2.0.0. The vulnerability allows an unauthenticated, network-accessible attacker over HTTP to compromise the application and can lead to takeover, with CVSS v3.1 base score 8.1 (C/H, I/H, A/H). The conne...