CVE-2026-60734

The CVE-2026-60734 entry concerns Oracle E-Business Suite’s Oracle Trading Community product (Party Search UI). Affected versions are 12.2.3–12.2.12. The vulnerability enables a high-privilege attacker with network access over HTTP to compromise Oracle Trading Community, with potential takeover o...

CVE-2026-60736

The CVE-2026-60736 entry concerns Oracle E-Business Intelligence (Definition component) within Oracle E-Business Suite. Affected are versions 12.2.3–12.2.15. The vulnerability is exploitable by a low-privilege attacker over HTTP with network access, potentially leading to unauthorized creation, d...

CVE-2026-60732

CVE-2026-60732 relates to Oracle iReceivables (Oracle E-Business Suite AR Web Utilities), affected in 12.2.3–12.2.15. The vulnerability can be exploited by a low-privilege attacker over HTTP to gain unauthorized creation, deletion or modification of data, or full access to Oracle iReceivables dat...

CVE-2026-60724

CVE-2026-60724 affects Oracle E-Business Suite, Oracle Customer Interaction History (Outcome-Result) in versions 12.2.3–12.2.15. The vulnerability allows a low-privilege, network-authenticated attacker (HTTP) to potentially update/insert/delete and read data, with Confidentiality and Integrity im...

CVE-2026-60718

CVE-2026-60718 affects Oracle MySQL products: MySQL Server (Server: JSON) and MySQL Cluster, versioned 9.7.0–9.7.1. The vulnerability, arising in the Server JSON component, allows a low-privileged, network-accessible attacker via multiple protocols to cause a hang or frequent crash (DoS) of the M...

CVE-2026-60695

The CVE-2026-60695 entry concerns Oracle E-Business Suite’s Oracle Enterprise Asset Management (Internal Operations) with affected versions 12.2.3–12.2.15. The vulnerability, described across NVD/NVD mirror entries, allows a highly-privileged attacker who can reach the system over HTTP to comprom...

CVE-2026-60687

CVE-2026-60687 affects Oracle U.S. Federal Financials within Oracle E-Business Suite (Internal Operations). Affected: 12.2.3–12.2.15. The flaw allows an unauthenticated, network-accessible attacker over HTTPS to compromise the Oracle U.S. Federal Financials, with potential access to all accessibl...

CVE-2026-60685

CVE-2026-60685 : Vulnerability in Oracle iSupport (Oracle E-Business Suite Internal Operations) affecting versions 12.2.3–12.2.15. An unauthenticated attacker can exploit via HTTP with network access and required user interaction to gain unauthorized read/update/delete access to Oracle iSupport d...

CVE-2026-60663

The CVE-2026-60663 entry relates to Oracle WebCenter Content (Web Content Management) in Oracle Fusion Middleware. Affected versions are 12.2.1.4.0 and 14.1.2.0.0. The flaw is exploitable by a low-privilege, unauthenticated or network-accessing attacker over HTTP, enabling takeover of Oracle WebC...

CVE-2026-60661

CVE-2026-60661 affects Oracle Solaris 11.4 (Filesystems). The vulnerability is exploitable by a low-privilege, logged-in user to compromise Oracle Solaris, with potential scope change affecting additional products and full takeover of Solaris. CVSS 3.1 base score 7.8 (HIGH) with local attack vect...

CVE-2026-60652

The CVE-2026-60652 entry concerns Oracle WebCenter Content (Web Content Management) within Oracle Fusion Middleware. Affected supported versions are 12.2.1.4.0 and 14.1.2.0.0. The vulnerability is exploitable remotely over HTTP by a low-privileged attacker and, despite low privileges, requires us...

CVE-2026-60646

CVE-2026-60646 affects Oracle WebCenter Content (Web Content Management) in Oracle Fusion Middleware. Affected versions are 12.2.1.4.0 and 14.1.2.0.0. The vulnerability is exploitable by a low-privileged, network-accessible attacker over HTTP and requires user interaction; successful exploitation...

CVE-2026-60641

CVE-2026-60641 affects Oracle WebCenter Content (Content Server) in Oracle Fusion Middleware, with affected versions 12.2.1.4.0 and 14.1.2.0.0. The vulnerability allows an unauthenticated attacker with network access via HTTP to compromise WebCenter Content, requiring user interaction. Impacts in...

CVE-2026-60642

...

CVE-2026-60643

Oracle WebCenter Content (Content Server) under Oracle Fusion Middleware is affected in versions 12.2.1.4.0 and 14.1.2.0.0. The CVE allows a low-privilege, unauthenticated attacker with network access via HTTP to take over the server, with human interaction required for exploitation. CVSS v3.1 ba...

CVE-2026-60638

The CVE-2026-60638 entry concerns Oracle WebCenter Content (Content Server) within Oracle Fusion Middleware. Affected versions are 12.2.1.4.0 and 14.1.2.0.0. The vulnerability is exploitable over HTTP with network access and unauthenticated, though successful exploitation requires user interactio...

CVE-2026-60635

CVE-2026-60635 concerns Oracle WebCenter Content (Content Server). Affected supported versions are 12.2.1.4.0 and 14.1.2.0.0. The vulnerability allows an unauthenticated attacker with network access via HTTP to compromise WebCenter Content, with human interaction required for success and potentia...

CVE-2026-60632

The CVE-2026-60632 vulnerability affects Oracle WebCenter Content (Content Server) in Oracle Fusion Middleware, with vulnerable versions 12.2.1.4.0 and 14.1.2.0.0. An unauthenticated, network-accessible attacker can compromise WebCenter Content via HTTP, with user interaction required. The impact...

CVE-2026-60629

The CVE-2026-60629 entry affects Oracle Fusion Middleware’s Oracle JDeveloper component (Data Visualization Tools). Affected versions are 12.2.1.4.0 and 14.1.2.0.0. The vulnerability is exploitable over HTTP with network access by an unauthenticated attacker, potentially leading to unauthorized d...

CVE-2026-60626

Affects: JD Edwards EnterpriseOne Tools (Oracle JD Edwards) – Installation Security component. Vulnerable version: 9.2.26.3. Description indicates a locally exploitable security flaw that requires logon, enabling a high-privilege attacker to compromise JD Edwards EnterpriseOne Tools and potential...