8971 matches found
CVE-2026-60462
Affected product: Oracle WebCenter Content (Content Server) within Oracle Fusion Middleware. Vulnerable versions: 12.2.1.4.0 and 14.1.2.0.0. Issue: a vulnerability allows an unauthenticated attacker with network access over HTTP to compromise WebCenter Content and potentially take over the applic...
CVE-2026-60456
CVE-2026-60456 affects Oracle WebCenter Enterprise Capture (Client Bundle) in Oracle Fusion Middleware. Affected versions: 12.2.1.4.0 and 14.1.2.0.0. The issue allows a low-privilege attacker with network access over HTTP to compromise the product, with potential broader impact on related compone...
CVE-2026-60448
CVE-2026-60448 affects Oracle WebCenter Content (Content Server) in Oracle Fusion Middleware, versions 12.2.1.4.0 and 14.1.2.0.0. It allows unauthenticated HTTP-based access to compromise the Content Server, potentially enabling unauthorized data creation/deletion/modification or access to all Co...
CVE-2026-60440
CVE-2026-60440 affects Oracle Fusion Middleware, Service Delivery Platform (Messaging Enabler) with affected versions 12.2.1.4.0 and 14.1.2.0.0. The flaw enables a low-privilege attacker with network access over HTTP to compromise the platform, potentially yielding unauthorized access to critical...
CVE-2026-60429
CVE-2026-60429 affects Oracle Unified Directory (OUD Core) in Oracle Fusion Middleware. Affected versions are 12.2.1.4.0 and 14.1.2.1.0. The vulnerability allows a low-privileged attacker with LDAP network access to compromise OUD, with potential impact on connected products and complete takeover...
CVE-2026-60419
CVE-2026-60419 affects Oracle Unified Directory (OUD Core) within Oracle Fusion Middleware. Affected versions are 12.2.1.4.0 and 14.1.2.1.0. The vulnerability allows a low-privileged, network-accessible attacker via LDAP to compromise OUD, potentially taking over the directory service. CVSS 3.1 b...
CVE-2026-60411
CVE-2026-60411 affects Oracle TimesTen In-Memory Database, component ttcserver, with affected version 26.1.1.1.0. The vulnerability allows an unauthenticated attacker with access to the physical communication segment to compromise TimesTen, potentially causing a hang or frequent crashes (complete...
CVE-2026-60410
CVE-2026-60410 : In Oracle TimesTen In-Memory Database, the Kubernetes Operator component is affected (version 26.1.1.1.0). The issue enables a low-privilege attacker who can reach the service over HTTPS to cause a partial denial of service to TimesTen In-Memory Database. The CVSS 3.1 base score ...
CVE-2026-60404
This CVE affects Oracle TimesTen In-Memory Database (Kubernetes Operator) with the vulnerable component/version: TimesTen In-Memory Database 26.1.1.1.0. The vulnerability enables a low-privileged, network-accessible attacker (HTTPS) to cause a hang or frequently crash the TimesTen In-Memory Datab...
CVE-2026-60398
Oracle GoldenGate Microservices is affected in 19.1.0.0.0–19.30.0.0, 21.3–21.21, and 23.4–23.26.1. The vulnerability can be exploited by a low-privileged, network-access attacker via HTTP to take over Oracle GoldenGate. CVSS v3.1 base score is 8.8 (C/H, I/H, A/H). No exploitation details are prov...
CVE-2026-60387
The CVE-2026-60387 entry concerns Oracle Fusion Middleware Service Delivery Platform (Messaging Enabler) with affected versions 12.2.1.4.0 and 14.1.2.0.0. The vulnerability is exploitable remotely over network protocols T3/IIOP, allowing an unauthenticated attacker to compromise the Platform and ...
CVE-2026-60386
CVE-2026-60386 affects Oracle Fusion Middleware Service Delivery Platform, Messaging Enabler component, in versions 12.2.1.4.0 and 14.1.2.0.0. An unauthenticated attacker with network access via HTTP can compromise the platform, potentially taking over the service. CVSS v3.1 base score 9.8 (CRITI...