8877 matches found
CVE-2026-60386
CVE-2026-60386 affects Oracle Fusion Middleware Service Delivery Platform, Messaging Enabler component, in versions 12.2.1.4.0 and 14.1.2.0.0. An unauthenticated attacker with network access via HTTP can compromise the platform, potentially taking over the service. CVSS v3.1 base score 9.8 (CRITI...
CVE-2026-60384
CVE-2026-60384 affects Oracle Fusion Middleware’s Service Delivery Platform, specifically the Messaging Enabler. Affected versions are 12.2.1.4.0 and 14.1.2.0.0. An unauthenticated attacker with network access via T3/IIOP can compromise the Service Delivery Platform, with potential takeover and i...
CVE-2026-60376
CVE-2026-60376 affects Oracle Fusion Middleware’s Service Delivery Platform, specifically the Messaging Enabler component, in versions 12.2.1.4.0 and 14.1.2.0.0. The issue allows an unauthenticated attacker with network access via T3/IIOP to compromise the Service Delivery Platform, potentially t...
CVE-2026-60340
The CVE-2026-60340 entry applies to Oracle E-Business Suite, specifically the Oracle Project Costing component (Enterprise Command Center). Affected versions are 12.2.3–12.2.15. The vulnerability, described across NVD/Oracle sources, permits a high-privilege attacker with network access over HTTP...
CVE-2026-60334
CVE-2026-60334 affects Oracle WebCenter Content (Content Server) in Oracle Fusion Middleware. Affected versions are 12.2.1.4.0 and 14.1.2.0.0. The vulnerability is exploitable over HTTP with network access by a low-privilege attacker and can lead to takeover of Oracle WebCenter Content. CVSS v3.1...
CVE-2026-60335
CVE-2026-60335 affects Oracle WebCenter Content (Content Server) in Oracle Fusion Middleware. Affected versions are 12.2.1.4.0 and 14.1.2.0.0. The vulnerability is exploitable by a high-privilege attacker with network access via HTTP and can lead to takeover of Oracle WebCenter Content (CVSS 3.1 ...
CVE-2026-60333
CVE-2026-60333 affects Oracle Fusion Middleware’s Oracle Access Manager (Authentication Engine). Affected versions are 12.2.1.4.0 and 14.1.2.1.0. The vulnerability permits a low-privilege attacker with network access over HTTP to compromise Oracle Access Manager, with potential impact on related ...
CVE-2026-60330
The CVE-2026-60330 affects Oracle Identity Manager (OIM Legacy UI) in Oracle Fusion Middleware, with affected versions 12.2.1.4.0 and 14.1.2.1.0. The issue allows a low-privileged, unauthenticated-looking attacker with network access via HTTP to compromise OIM, potentially taking over the product...
CVE-2026-60329
CVE-2026-60329 affects Oracle Identity Manager (OIM Legacy UI) in Oracle Fusion Middleware. Affected products/version: 12.2.1.4.0 and 14.1.2.1.0. The vulnerability permits an unauthenticated, network-accessible attacker via T3/IIOP to compromise OIM and can lead to takeover. The CVSS v3.1 base sc...
CVE-2026-60329
...
CVE-2026-60326
...
CVE-2026-60325
...
CVE-2026-60323
...
CVE-2026-60322
The CVE-2026-60322 issue affects Oracle Applications Manager within Oracle E-Business Suite, specifically the Oracle Diagnostics Interfaces component. Affected versions are 12.2.3 through 12.2.15. The vulnerability allows an unauthenticated attacker who can reach Oracle AS via HTTP to compromise ...
CVE-2026-60318
CVE-2026-60318 affects Oracle Data Integrator (Fusion Middleware) Patchset Assistant. Affected versions are 12.2.1.4.0 and 14.1.2.0.0. The vulnerability is exploitable with local access in the infrastructure where ODI runs, potentially leading to unauthorized read access of a subset of ODI data. ...
CVE-2026-60316
CVE-2026-60316 affects Oracle MySQL products: MySQL Server (component: Server: X Plugin) and MySQL Cluster. Affected versions include MySQL Server 8.4.0–8.4.10 and 9.7.0–9.7.1; MySQL Cluster 8.0.0–8.0.47, 8.4.0–8.4.10, and 9.7.0–9.7.1. The vulnerability is easily exploitable with network access v...