CVE-2026-60555

The CVE-2026-60555 entry concerns Oracle WebCenter Sites (Oracle Fusion Middleware WebCenter Sites). Affected supported versions are 12.2.1.4.0 and 14.1.2.0.0. The vulnerability is exploitable without authentication over HTTP and can lead to takeover of Oracle WebCenter Sites, per the description...

CVE-2026-60553

The CVE-2026-60553 affects Oracle WebCenter Sites (Oracle Fusion Middleware) on versions 12.2.1.4.0 and 14.1.2.0.0. The vulnerability is exploitable remotely over HTTP by an unauthenticated attacker, leading to unauthorized creation, deletion or modification of data, or complete access to Oracle ...

CVE-2026-60548

...

CVE-2026-60545

...

CVE-2026-60543

...

CVE-2026-60537

CVE-2026-60537 affects Oracle Fusion Middleware’s Oracle Managed File Transfer (MFT) Runtime Server. Affects 12.2.1.4.0 and 14.1.2.0.0. The issue allows a low-privileged attacker with network access over HTTP to compromise MFT, with potential takeover of the MFT component and impact to confidenti...

CVE-2026-60528

...

CVE-2026-60523

The CVE-2026-60523 entry affects Oracle WebCenter Content (Content Server) in Oracle Fusion Middleware, with affected versions 12.2.1.4.0 and 14.1.2.0.0. The vulnerability allows network-based exploitation via HTTP, requires user interaction, and can lead to unauthorized data creation/deletion/mo...

CVE-2026-60519

...

CVE-2026-60501

...

CVE-2026-60497

...

CVE-2026-60497

CVE-2026-60497 affects Oracle JD Edwards EnterpriseOne CRM Foundation, specifically the CRM Foundation component in the 9.2 line. The vulnerability is exploitable with network access via JDENET by a low-privilege attacker and can lead to takeover of the CRM Foundation, per the CVSS 3.1 vector (AV...

CVE-2026-60494

...

CVE-2026-60496

...

CVE-2026-60495

The CVE-2026-60495 entry concerns Oracle JD Edwards EnterpriseOne Requirements Planning (component: Requirements Planning) with the affected version reported as 9.2. The vulnerability allows a low-privilege attacker who can access JDENET over the network to compromise the JD Edwards EnterpriseOne...

CVE-2026-60494

...

CVE-2026-60493

...

CVE-2026-60490

CVE-2026-60490 affects Oracle JD Edwards EnterpriseOne CRM Foundation (component: CRM Foundation) in the 9.2 line. The vulnerability is exploitable by a low-privilege attacker with network access over HTTP, potentially leading to takeover of the CRM Foundation. CVSS 3.1 base score is 8.8 (Confide...

CVE-2026-60465

...

CVE-2026-60465

CVE-2026-60465 affects Oracle WebCenter Content: Imaging (Core) and is exploitable remotely via network access (T3, IIOP) on affected 12.2.1.4.0 and 14.1.2.0.0 installations. Successful exploitation can lead to takeover of WebCenter Content: Imaging with full confidentiality, integrity, and avail...