8789 matches found
CVE-2026-61169
The CVE-2026-61169 entry concerns Oracle Agile PLM (Oracle Supply Chain) with affected version 9.3.6 in the Security component. The vulnerability allows a low-privilege, logon-enabled attacker to compromise Oracle Agile PLM, with potential broader impact on related products (scope change) and res...
CVE-2026-61163
CVE-2026-61163 affects Oracle Commerce Guided Search / Oracle Commerce Experience Manager (Forge component) with affected version 11.4.0. The vulnerability is exploitable over the network (HTTP) by an unauthenticated attacker, with attack complexity high and no required privileges, potentially le...
CVE-2026-61165
Technical details about CVE-2026-61165 are not publicly available in the provided documents. Monitor for updates from Oracle and NVD for affected versions, impact, and remediation.
CVE-2026-61158
CVE-2026-61158 affects Oracle Commerce Guided Search / Oracle Commerce Experience Manager (component: Experience Manager) and is applicable to version 11.4.0. The vulnerability can be triggered by an unauthenticated attacker with network access via RMI to compromise the Product, potentially leadi...
CVE-2026-61160
CVE-2026-61160 affects Oracle Commerce Guided Search / Oracle Commerce Experience Manager (component: Experience Manager) in 11.4.0. The vulnerability allows a low-privileged, network-accessible attacker over HTTP to compromise the product, potentially leading to unauthorized access to data and a...
CVE-2026-61156
CVE-2026-61156 affects Oracle Commerce Guided Search Platform Services (Forge) with vulnerable version 11.4.0. An unauthenticated attacker over HTTPS can compromise the service, enabling unauthorized creation, deletion, or modification of data and potential unauthorized access to all Oracle Comme...
CVE-2026-61152
The CVE-2026-61152 entry applies to Oracle Commerce Guided Search / Oracle Commerce Experience Manager (component: Experience Manager) for version 11.4.0. The vulnerability is exploitable by a low-privileged attacker with network access over HTTP, potentially allowing unauthorized update/insert/d...
CVE-2026-61143
CVE-2026-61143 affects Oracle Communications Convergent Charging Controller, Prov IF, in versions 15.0.0.0.0 and 15.2.0.0.0. The vulnerability is exploitable with network access over HTTP by a high-privilege attacker and requires user interaction; successful exploitation could lead to takeover of...
CVE-2026-61136
Oracle Commerce Platform (Dynamo Application Framework) is affected in version 11.4.0. The vulnerability allows an unauthenticated attacker over HTTP to perform unauthorized updates, inserts/deletes, read access to data, and cause partial denial of service. CVSS v3.1 base score 7.3 (Confidentiali...
CVE-2026-61131
The CVE-2026-61131 entry maps to Oracle Commerce Platform (Dynamo Application Framework) with affected version 11.4.0. The vulnerability is exploitable over HTTP without authentication, enabling an attacker with network access to compromise and potentially takeover the Oracle Commerce Platform. T...
CVE-2026-61122
CVE-2026-61122 affects Oracle E-Business Suite, Oracle HRMS (UK) Payroll component, for versions 12.2.9–12.2.15. A low-privilege, network-authenticated attacker (HTTP) can compromise HRMS(UK), leading to unauthorized creation/deletion/modification of critical data or full access to HRMS(UK) data....
CVE-2026-61117
The CVE-2026-61117 entry concerns Oracle E-Business Suite, Oracle HRMS (UK) specifically, with affected versions 12.2.8–12.2.15. The vulnerability is described as exploitable by a low-privilege attacker with network access via HTTP to compromise Oracle HRMS (UK), with potential broader impact on ...
CVE-2026-61113
The CVE-2026-61113 entry affects Oracle E-Business Suite’s Oracle Application Object Library (Core) in versions 12.2.3–12.2.15. It can be exploited by an unauthenticated attacker over HTTP to compromise data, with confidentiality and integrity impacts (CVSS v3.1: 7.4, HIGH). The description notes...
CVE-2026-61112
The CVE-2026-61112 affects Oracle E-Business Suite’s Order Management product (component: Product Diagnostic Tools). Affected versions are 12.2.3–12.2.15. The vulnerability can be exploited by a low-privileged attacker with network access over HTTP to gain unauthorized access to Oracle Order Mana...
CVE-2026-61101
CVE-2026-61101 affects Oracle MES for Process Manufacturing (Internal Operations) within Oracle E-Business Suite, versions 12.2.3–12.2.15. The vulnerability allows unauthenticated network access via HTTP and requires user interaction, with potential for unauthorized read and write of Oracle MES d...
CVE-2026-61097
CVE-2026-61097 describes a vulnerability in Oracle Financial Services Applications, specifically the Oracle Banking Trade Finance Process Management product (component: Common). Affected are versions 14.6.0 through 14.8.0. The flaw enables an unauthenticated attacker with network access via HTTP ...