CVE-2026-60617

The CVE-2026-60617 entry concerns Oracle PeopleSoft: PeopleSoft Enterprise CS Campus Community (Security) affected in version 9.2.38. The vulnerability is exploitable remotely over HTTP by an unauthenticated attacker, allowing unauthorized creation, deletion or modification of data across the Cam...

CVE-2026-60616

The CVE-2026-60616 entry concerns Oracle PeopleSoft (CS Campus Community) 9.2.38. The vulnerability affects the Security component and can be exploited by an unauthenticated attacker over HTTP with network access, potentially leading to unauthorized data access and unauthorized update/insert/dele...

CVE-2026-60607

CVE-2026-60607 affects Oracle PeopleSoft: PeopleSoft Enterprise CS Financial Aid, FM Need Analysis Calculator, version 9.2.38. The vulnerability allows a low-privileged user who can log on to the infrastructure running PeopleSoft Enterprise CS Financial Aid to compromise the component, potentiall...

CVE-2026-60604

The CVE-2026-60604 entry affects Oracle PeopleSoft Enterprise CS Campus Community (component: Security) with affected version 9.2.38. The vulnerability allows a low-privileged attacker who can reach the system over HTTP to compromise the PeopleSoft Enterprise CS Campus Community, with potential t...

CVE-2026-60599

The CVE-2026-60599 entry applies to Oracle PeopleSoft: Enterprise CS Student Records, specifically the Research Tracking component, affected in version 9.2.38. The vulnerability is exploitable with network access over HTTPS by a low-privilege attacker, leading to unauthorized creation, deletion o...

CVE-2026-60598

The CVE-2026-60598 affects Oracle PeopleSoft: Enterprise CS Student Records (component: Research Tracking) with vulnerable version 9.2.38. A low-privilege user with network access over HTTP can compromise the system, potentially taking over the PeopleSoft CS Student Records process. The CVSS 3.1 ...

CVE-2026-60595

CVE-2026-60595 affects Oracle PeopleSoft Enterprise FIN Pay/Bill Management (Paybill Management) on version 9.2. The underlying issue is within Paybill Management, enabling a low-privileged attacker who can log on to the infrastructure where PeopleSoft FIN Pay/Bill Management runs to compromise t...

CVE-2026-60587

CVE-2026-60587 affects Oracle E-Business Suite, Oracle Project Foundation (Project Definition) in 12.2.3–12.2.15. Vulnerability allows a low-privileged, network-accessible attacker (HTTP) to perform unauthorized update/insert/delete and read of Oracle Project Foundation data and to cause partial ...

CVE-2026-60586

...

CVE-2026-60583

CVE-2026-60583 affects Oracle Transportation Management (Oracle Supply Chain), specifically the Install component in version 6.5.3. The vulnerability is exploitable over a network via HTTP by a low-privilege attacker, with sufficient impact to lead to takeover of Oracle Transportation Management ...

CVE-2026-60584

Summary: CVE-2026-60584 affects Oracle Transportation Management (OTM) 6.5.3, specifically the CSV Management component. The vulnerability is exploitable over HTTP with network access by a low-privileged attacker, potentially leading to unauthorized data access, unauthorized updates/deletes, and ...

CVE-2026-60581

CVE-2026-60581 affects Oracle E-Business Suite, Oracle Enterprise Command Center Framework (Core), version V16. An unauthenticated attacker with access to the physical network segment attached to the hardware running the framework can compromise and potentially take over the Oracle Enterprise Com...

CVE-2026-60577

CVE-2026-60577 concerns Oracle E-Business Suite’s Oracle Enterprise Command Center Framework, Core component, in the V16 line. The vulnerability enables a low-privileged, network-accessible attacker (via HTTP) to compromise the Enterprise Command Center Framework, potentially granting unauthorize...

CVE-2026-60579

The CVE affects Oracle E-Business Suite's Oracle Enterprise Command Center Framework (Core) with affected version V16. The vulnerability allows an unauthenticated attacker with access to the physical communication segment to compromise the framework. Impact includes unauthorized creation, deletio...

CVE-2026-60575

The CVE concerns Oracle E-Business Suite’s Workflow component, specifically the Workflow Notification Mailer. Affected versions are 12.2.3–12.2.15. The issue allows a low-privilege attacker with HTTP network access to perform unauthorized updates/inserts/deletes and reads in Oracle Workflow data,...

CVE-2026-60576

The CVE-2026-60576 entry describes a vulnerability in Oracle E-Business Suite's Oracle Enterprise Command Center Framework (component: Core), affected in version V16. An attacker with high privileges can exploit it over HTTP with network access to potentially take over the Oracle Enterprise Comma...

CVE-2026-60572

The CVE-2026-60572 entry concerns Oracle E-Business Suite Integrated SOA Gateway (Web Service Provider) with affected versions 12.2.3–12.2.15. The vulnerability, described as easily exploitable, allows a low-privilege, network-accessible attacker over HTTP to compromise data: unauthorized update/...

CVE-2026-60569

CVE-2026-60569 affects Oracle MySQL Cluster (Cluster: NDB Operator) with affected versions 8.0.0–8.0.47, 8.4.0–8.4.10, and 9.7.0–9.7.1. The issue enables an unauthenticated attacker with access to the infrastructure hosting MySQL Cluster to compromise data, with potential unauthorized access to a...

CVE-2026-60568

CVE-2026-60568 affects Oracle WebCenter Portal (Runtime Tools) in Oracle Fusion Middleware. Affected versions: 12.2.1.4.0 and 14.1.2.0.0. The issue is exploitable with network access over HTTP by a low‑privileged attacker, potentially leading to takeover of Oracle WebCenter Portal; a scope change...

CVE-2026-60567

CVE-2026-60567 affects Oracle Fusion Middleware’s Oracle Identity Manager (OIM) Legacy UI component. Affected versions are 12.2.1.4.0 and 14.1.2.1.0. The vulnerability allows unauthenticated, network-accessible attackers via HTTP to compromise OIM, potentially enabling creation, deletion, or modi...