CVE-2026-60562

The CVE-2026-60562 affects Oracle WebCenter Portal (Runtime Tools) in Oracle Fusion Middleware for versions 12.2.1.4.0 and 14.1.2.0.0. It can be exploited by a low-privilege attacker over HTTP to take over WebCenter Portal, with potential scope changes affecting other products. The CVSS 3.1 base ...

CVE-2026-60560

...

CVE-2026-60559

CVE-2026-60559 affects Oracle Access Manager (Authentication Engine) in Oracle Fusion Middleware. Affected versions are 12.2.1.4.0 and 14.1.2.1.0. The vulnerability is exploitable over HTTP without authentication and can lead to unauthorized access to data or full access to Oracle Access Manager ...

CVE-2026-60555

The CVE-2026-60555 entry concerns Oracle WebCenter Sites (Oracle Fusion Middleware WebCenter Sites). Affected supported versions are 12.2.1.4.0 and 14.1.2.0.0. The vulnerability is exploitable without authentication over HTTP and can lead to takeover of Oracle WebCenter Sites, per the description...

CVE-2026-60550

...

CVE-2026-60548

...

CVE-2026-60545

...

CVE-2026-60542

CVE-2026-60542 affects Oracle Fusion Middleware’s Oracle Business Process Management Suite (Human Workflow) in versions 12.2.1.4.0 and 14.1.2.0.0. The vulnerability allows a low-privileged attacker with network access via T3/IIOP to compromise the BPM Suite; attacks may impact additional products...

CVE-2026-60543

CVE-2026-60543 affects Oracle SOA Suite (Fusion Middleware) in the B2B Engine component, with affected versions 12.2.1.4.0 and 14.1.2.0.0. The vulnerability is described as unauthenticated, network-accessible via HTTP, allowing compromise of the Oracle SOA Suite and potential takeover. The CVSS v...

CVE-2026-60536

CVE-2026-60536 affects Oracle Fusion Middleware’s Oracle Identity Manager Connector (PeopleSoft Applications) in 12.2.1.4.0 and 14.1.2.1.0. The vulnerability allows unauthenticated, network-based access via HTTP to compromise the connector, potentially granting access to data across the Oracle Id...

CVE-2026-60536

...

CVE-2026-60531

CVE-2026-60531 affects Oracle Identity Manager Connector (Oracle Fusion Middleware), Core component. Affected versions: 12.2.1.4.0 and 14.1.2.1.0. The issue allows a low-privilege attacker with network access over HTTP to compromise the Oracle Identity Manager Connector, with potential scope expa...

CVE-2026-60527

...

CVE-2026-60524

CVE-2026-60524 affects Oracle WebCenter Enterprise Capture (Client Bundle) in Oracle Fusion Middleware, with affected versions 12.2.1.4.0 and 14.1.2.0.0. The issue allows a low-privileged attacker who can reach via network (T3, IIOP) to compromise the product, potentially taking over the WebCente...

CVE-2026-60523

The CVE-2026-60523 entry affects Oracle WebCenter Content (Content Server) in Oracle Fusion Middleware, with affected versions 12.2.1.4.0 and 14.1.2.0.0. The vulnerability allows network-based exploitation via HTTP, requires user interaction, and can lead to unauthorized data creation/deletion/mo...

CVE-2026-60503

...

CVE-2026-60494

...

CVE-2026-60493

...

CVE-2026-60489

...

CVE-2026-60462

Affected product: Oracle WebCenter Content (Content Server) within Oracle Fusion Middleware. Vulnerable versions: 12.2.1.4.0 and 14.1.2.0.0. Issue: a vulnerability allows an unauthenticated attacker with network access over HTTP to compromise WebCenter Content and potentially take over the applic...