CVE-2026-60562

The CVE-2026-60562 affects Oracle WebCenter Portal (Runtime Tools) in Oracle Fusion Middleware for versions 12.2.1.4.0 and 14.1.2.0.0. It can be exploited by a low-privilege attacker over HTTP to take over WebCenter Portal, with potential scope changes affecting other products. The CVSS 3.1 base ...

CVE-2026-60559

CVE-2026-60559 affects Oracle Access Manager (Authentication Engine) in Oracle Fusion Middleware. Affected versions are 12.2.1.4.0 and 14.1.2.1.0. The vulnerability is exploitable over HTTP without authentication and can lead to unauthorized access to data or full access to Oracle Access Manager ...

CVE-2026-60555

The CVE-2026-60555 entry concerns Oracle WebCenter Sites (Oracle Fusion Middleware WebCenter Sites). Affected supported versions are 12.2.1.4.0 and 14.1.2.0.0. The vulnerability is exploitable without authentication over HTTP and can lead to takeover of Oracle WebCenter Sites, per the description...

CVE-2026-60543

CVE-2026-60543 affects Oracle SOA Suite (Fusion Middleware) in the B2B Engine component, with affected versions 12.2.1.4.0 and 14.1.2.0.0. The vulnerability is described as unauthenticated, network-accessible via HTTP, allowing compromise of the Oracle SOA Suite and potential takeover. The CVSS v...

CVE-2026-60542

CVE-2026-60542 affects Oracle Fusion Middleware’s Oracle Business Process Management Suite (Human Workflow) in versions 12.2.1.4.0 and 14.1.2.0.0. The vulnerability allows a low-privileged attacker with network access via T3/IIOP to compromise the BPM Suite; attacks may impact additional products...

CVE-2026-60536

CVE-2026-60536 affects Oracle Fusion Middleware’s Oracle Identity Manager Connector (PeopleSoft Applications) in 12.2.1.4.0 and 14.1.2.1.0. The vulnerability allows unauthenticated, network-based access via HTTP to compromise the connector, potentially granting access to data across the Oracle Id...

CVE-2026-60531

CVE-2026-60531 affects Oracle Identity Manager Connector (Oracle Fusion Middleware), Core component. Affected versions: 12.2.1.4.0 and 14.1.2.1.0. The issue allows a low-privilege attacker with network access over HTTP to compromise the Oracle Identity Manager Connector, with potential scope expa...

CVE-2026-60524

CVE-2026-60524 affects Oracle WebCenter Enterprise Capture (Client Bundle) in Oracle Fusion Middleware, with affected versions 12.2.1.4.0 and 14.1.2.0.0. The issue allows a low-privileged attacker who can reach via network (T3, IIOP) to compromise the product, potentially taking over the WebCente...

CVE-2026-60523

The CVE-2026-60523 entry affects Oracle WebCenter Content (Content Server) in Oracle Fusion Middleware, with affected versions 12.2.1.4.0 and 14.1.2.0.0. The vulnerability allows network-based exploitation via HTTP, requires user interaction, and can lead to unauthorized data creation/deletion/mo...

CVE-2026-60462

Affected product: Oracle WebCenter Content (Content Server) within Oracle Fusion Middleware. Vulnerable versions: 12.2.1.4.0 and 14.1.2.0.0. Issue: a vulnerability allows an unauthenticated attacker with network access over HTTP to compromise WebCenter Content and potentially take over the applic...

CVE-2026-60456

CVE-2026-60456 affects Oracle WebCenter Enterprise Capture (Client Bundle) in Oracle Fusion Middleware. Affected versions: 12.2.1.4.0 and 14.1.2.0.0. The issue allows a low-privilege attacker with network access over HTTP to compromise the product, with potential broader impact on related compone...

CVE-2026-60448

CVE-2026-60448 affects Oracle WebCenter Content (Content Server) in Oracle Fusion Middleware, versions 12.2.1.4.0 and 14.1.2.0.0. It allows unauthenticated HTTP-based access to compromise the Content Server, potentially enabling unauthorized data creation/deletion/modification or access to all Co...

CVE-2026-60440

CVE-2026-60440 affects Oracle Fusion Middleware, Service Delivery Platform (Messaging Enabler) with affected versions 12.2.1.4.0 and 14.1.2.0.0. The flaw enables a low-privilege attacker with network access over HTTP to compromise the platform, potentially yielding unauthorized access to critical...

CVE-2026-60429

CVE-2026-60429 affects Oracle Unified Directory (OUD Core) in Oracle Fusion Middleware. Affected versions are 12.2.1.4.0 and 14.1.2.1.0. The vulnerability allows a low-privileged attacker with LDAP network access to compromise OUD, with potential impact on connected products and complete takeover...

CVE-2026-60419

CVE-2026-60419 affects Oracle Unified Directory (OUD Core) within Oracle Fusion Middleware. Affected versions are 12.2.1.4.0 and 14.1.2.1.0. The vulnerability allows a low-privileged, network-accessible attacker via LDAP to compromise OUD, potentially taking over the directory service. CVSS 3.1 b...

CVE-2026-60411

CVE-2026-60411 affects Oracle TimesTen In-Memory Database, component ttcserver, with affected version 26.1.1.1.0. The vulnerability allows an unauthenticated attacker with access to the physical communication segment to compromise TimesTen, potentially causing a hang or frequent crashes (complete...

CVE-2026-60410

CVE-2026-60410 : In Oracle TimesTen In-Memory Database, the Kubernetes Operator component is affected (version 26.1.1.1.0). The issue enables a low-privilege attacker who can reach the service over HTTPS to cause a partial denial of service to TimesTen In-Memory Database. The CVSS 3.1 base score ...

CVE-2026-60404

This CVE affects Oracle TimesTen In-Memory Database (Kubernetes Operator) with the vulnerable component/version: TimesTen In-Memory Database 26.1.1.1.0. The vulnerability enables a low-privileged, network-accessible attacker (HTTPS) to cause a hang or frequently crash the TimesTen In-Memory Datab...

CVE-2026-60398

Oracle GoldenGate Microservices is affected in 19.1.0.0.0–19.30.0.0, 21.3–21.21, and 23.4–23.26.1. The vulnerability can be exploited by a low-privileged, network-access attacker via HTTP to take over Oracle GoldenGate. CVSS v3.1 base score is 8.8 (C/H, I/H, A/H). No exploitation details are prov...

CVE-2026-60387

The CVE-2026-60387 entry concerns Oracle Fusion Middleware Service Delivery Platform (Messaging Enabler) with affected versions 12.2.1.4.0 and 14.1.2.0.0. The vulnerability is exploitable remotely over network protocols T3/IIOP, allowing an unauthenticated attacker to compromise the Platform and ...