CVE-2026-61210

CVE-2026-61210 affects Oracle PeopleSoft Enterprise SCM Manufacturing (component: Security) for the 9.2 release. The vulnerability is exploitable over HTTPS with network access and requires no authentication, enabling an attacker to perform unauthorized creation, deletion, or modification of data...

CVE-2026-61211

Oracle Database Server’s RDBMS component contains CVE-2026-61211 affecting 19.3–19.31 and 23.4.0–23.26.2. A low-privileged attacker with Execute DBMS_CLOUD and network access via Oracle Net can compromise the RDBMS, potentially taking over the system. Patching guidance is included in the Oracle J...

CVE-2026-61209

Technical details are not publicly available in the provided documents. Monitor Oracle CPU July 2026 advisory and NVD entry for affected versions, impact, and fixes.

CVE-2026-61205

CVE-2026-61205 affects Oracle PeopleSoft 9.2 SCM Purchasing (component: Purchasing). The vulnerability allows an unauthenticated attacker over HTTP to compromise PeopleSoft SCM Purchasing, enabling unauthorized creation, deletion or modification of data, and unauthorized read access to a subset o...

CVE-2026-61207

Vulnerability CVE-2026-61207 affects Oracle PeopleSoft Enterprise SCM eProcurement (component: Manage Requisition Status) in version 9.2. An unauthenticated attacker with network access via HTTP can compromise the SCM eProcurement, with potential scope impact to additional products and outcomes i...

CVE-2026-61204

CVE-2026-61204 affects Oracle PeopleSoft Enterprise FIN Program Management (component: Primavera Integration) with affected version 9.2. The vulnerability allows a low-privileged attacker with network access via HTTP to compromise the FIN Program Management module, requiring user interaction, and...

CVE-2026-61203

CVE-2026-61203 concerns Oracle PeopleSoft Enterprise FIN Expenses (component: Expenses). The affected product/version is PeopleSoft FIN Expenses 9.2. The vulnerability is exploitable over HTTP by an unauthenticated network attacker, enabling unauthorized creation/modification/deletion of data and...

CVE-2026-61202

CVE-2026-61202 affects Oracle Solaris (Utility) with targeted impact on versions 11.3 and 11.4. The vulnerability is exploitable by a low-privilege user who can log on to the infrastructure where Oracle Solaris runs, resulting in compromised Solaris and potential scope expansion to other products...

CVE-2026-61201

CVE-2026-61201 affects Oracle PeopleSoft: PeopleSoft Enterprise CRM Common Objects (component: Common Objects) in version 9.2.23. An unauthenticated attacker with network access via HTTP can compromise the Common Objects, with potential impact across related products (scope change) and possible t...

CVE-2026-61195

CVE-2026-61195 affects Oracle Agile Engineering Data Management (Oracle Supply Chain), Core component, version 6.2.1. The vulnerability enables a low-privilege, unauthenticated attacker with network access over TCP to cause a hang or frequent crashes (DoS) in the affected product. The CVSS 3.1 ba...

CVE-2026-61197

CVE-2026-61197 affects the Oracle Identity Manager (OIM) Legacy UI in Oracle Fusion Middleware. Affected versions: 12.2.1.4.0 and 14.1.2.1.0. The flaw allows an unauthenticated, network-based attacker (via HTTP) to compromise OIM, leading to unauthorized creation, deletion, or modification of dat...

CVE-2026-61200

CVE-2026-61200 affects Oracle E-Business Suite, Oracle Labor Distribution (Internal Operations). Affects 12.2.3–12.2.15; an attacker with network access over HTTP and low privileges can compromise data, including unauthorized update/insert/delete and read access to subset of Oracle Labor Distribu...

CVE-2026-61196

Summary : CVE-2026-61196 affects Oracle Identity Manager (OIM) within Oracle Fusion Middleware, specifically the OIM Legacy UI. Affected versions are 12.2.1.4.0 and 14.1.2.1.0. The flaw allows unauthenticated, network-accessible attackers via HTTP to compromise OIM, with the potential takeover of...

CVE-2026-61194

Oracle Agile Engineering Data Management (Supply Chain, Core) is affected in version 6.2.1. The flaw allows a low-privileged, network-accessible attacker (TCP) to trigger a hang or frequent crash (DoS). CVSS 3.1 base score 6.5 (AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H). Exploitation details are not pr...

CVE-2026-61192

The CVE-2026-61192 entry concerns Oracle Agile Engineering Data Management (Oracle Supply Chain), specifically the Install component in version 6.2.1. The issue is exploitable by a low-privilege attacker with network access over HTTP, potentially causing a hang or frequent crash (complete DOS). T...

CVE-2026-61191

The CVE-2026-61191 entry pertains to Oracle Agile Engineering Data Management (Oracle Supply Chain), specifically the Document Management component in version 6.2.1. The vulnerability is characterized as easily exploitable with local access (low privileges, user login required) and can lead to un...

CVE-2026-61190

CVE-2026-61190 affects Oracle Agile Engineering Data Management (Oracle Supply Chain), specifically the Install component, version 6.2.1. The vulnerability allows a low-privilege attacker who has network access via HTTP to compromise the system. Successful exploitation requires user interaction a...

CVE-2026-61189

CVE-2026-61189 concerns Oracle Agile Engineering Data Management (Oracle Supply Chain), specifically the Install component in version 6.2.1. The vulnerability allows a low-privilege user with login access to the infrastructure where Oracle Agile Engineering Data Management runs to compromise the ...

CVE-2026-61188

CVE-2026-61188 affects Oracle Agile Product Lifecycle Management for Process (Oracle Supply Chain), specifically the Installation component in version 6.2.4. The vulnerability is described as exploitable with network access over HTTP by a low-privileged attacker, potentially leading to takeover o...

CVE-2026-61185

CVE-2026-61185 affects Oracle Agile PLM for Process (component: Installation) with affected version 6.2.4. The vulnerability allows unauthenticated access from the physical network segment attached to the hardware running Oracle Agile PLM for Process, potentially impacting additional products (sc...

CVE-2026-61187

The CVE-2026-61187 entry concerns Oracle Agile Engineering Data Management (Oracle Supply Chain) with the Install component affected in version 6.2.1. The vulnerability is described as exploitable locally via the Install component, requiring a user who is logged into the infrastructure and perfor...

CVE-2026-61186

Technical details (affected product/version, root cause, impact, remediation) are not publicly provided in the supplied documents. Monitor for updates.

CVE-2026-61183

CVE-2026-61183 affects Oracle Agile Product Lifecycle Management for Process (component: Reporting) in version 6.2.4. The NVD/NIST entry states an unauthenticated attacker with network access over HTTP can compromise the system, potentially leading to takeover with CVSS 3.1 base score 9.8. No exp...

CVE-2026-61182

CVE-2026-61182 affects Oracle Agile Product Lifecycle Management for Process, Data Import component, version 6.2.4. The description states an easily exploitable, local-privilege scenario where a high-privilege attacker with logon to the hosting infrastructure can compromise the product. CVSS v3.1...

CVE-2026-61184

The CVE-2026-61184entry concerns Oracle Agile Product Lifecycle Management for Process (Oracle SCM), specifically the Product Quality Management component in version 6.2.4. It states an unauthenticated, network-accessible vulnerability over HTTP that can lead to unauthorized creation, deletion, o...

CVE-2026-61181

CVE-2026-61181 affects Oracle Agile Product Lifecycle Management for Process (Product Quality Management) with affected version 6.2.4. The vulnerability is exploitable over a network (HTTP) by a low-privilege attacker and requires user interaction; it may lead to unauthorized data access and pote...

CVE-2026-61180

CVE-2026-61180 affects Oracle Agile Product Lifecycle Management for Process (Product Quality Management component) with affected version 6.2.4. The vulnerability can be exploited by a low-privilege attacker over HTTP with network access, potentially resulting in takeover of Oracle Agile PLM for ...

CVE-2026-61179

The CVE-2026-61179 affects Oracle Agile Product Lifecycle Management for Process (component Product Quality Management ), with affected version 6.2.4 . A low-privilege attacker with network access over HTTP can compromise the system, potentially leading to takeover. CVSS v3.1 base score is 8.8 (H...

CVE-2026-61178

CVE-2026-61178 affects Oracle Agile Product Lifecycle Management for Process (Installation component) in version 6.2.4. A unauthenticated attacker with network access via TCP can compromise the product, enabling takeover with CVSS 3.1 base score 9.8 (Impact: Confidentiality, Integrity, Availabili...

CVE-2026-61176

The CVE-2026-61176 entry concerns Oracle Product Lifecycle Analytics (Oracle Supply Chain), specifically the Installation Issues component, affected in version 3.6.1. The vulnerability description states that a highly privileged attacker with network access over HTTP can compromise Oracle Product...

CVE-2026-61175

The CVE-2026-61175 entry concerns Oracle Product Lifecycle Analytics (Oracle Supply Chain), specifically the Installation Issues component, affected in version 3.6.1. The vulnerability is exploitable over HTTP by an unauthenticated network attacker, potentially allowing access to all Oracle Produ...

CVE-2026-61172

The connected sources confirm CVE-2026-61172 affects Oracle Agile PLM (Oracle Supply Chain), specifically the Security component, with affected version 9.3.6. The vulnerability allows an unauthenticated attacker with network access via HTTP to compromise Oracle Agile PLM, potentially leading to u...

CVE-2026-61173

CVE-2026-61173 affects Oracle Agile PLM (Oracle Supply Chain), specifically component: Security, with affected version 9.3.6. The vulnerability can be exploited over HTTP by an unauthenticated network-accessing attacker to potentially create, delete, or modify critical data or gain complete acces...

CVE-2026-61174

CVE-2026-61174 affects Oracle Product Lifecycle Analytics (Oracle Supply Chain), specifically the Installation Issues component in version 3.6.1. The issue allows a locally authenticated, non-privileged user to compromise the analytics product, with potential unauthorized read/write access to dat...

CVE-2026-61169

The CVE-2026-61169 entry concerns Oracle Agile PLM (Oracle Supply Chain) with affected version 9.3.6 in the Security component. The vulnerability allows a low-privilege, logon-enabled attacker to compromise Oracle Agile PLM, with potential broader impact on related products (scope change) and res...

CVE-2026-61170

CVE-2026-61170 affects Oracle Agile PLM 9.3.6 (Oracle Supply Chain, component: Security). The description states an unauthenticated attacker with network access via HTTP can compromise Oracle Agile PLM, potentially taking over the system. CVSS 3.1 base score 8.1 (HIGH) with network attack vector,...

CVE-2026-61171

CVE-2026-61171 affects Oracle Agile PLM (Oracle Supply Chain), specifically version 9.3.6. The vulnerability is exploitable over HTTP with network access by an unauthenticated attacker and can lead to unauthorized creation, deletion, or modification of data, or complete access to Oracle Agile PLM...

CVE-2026-61166

CVE-2026-61166 affects Oracle Agile PLM (Oracle Supply Chain) in the 9.3.6 release, specifically the User and User Group component. The vulnerability allows a low-privilege attacker with network access via HTTP to take over Oracle Agile PLM, per CVSS 3.1 base score 8.8 (C/H/I/A). Connected source...

CVE-2026-61168

The CVE-2026-61168 entry concerns Oracle Agile PLM (Oracle Supply Chain), affected version 9.3.6, with a vulnerability in the Security component. The vulnerability is exploitable over HTTP with network access by a low-privilege attacker and can lead to takeover of Oracle Agile PLM. CVSS v3.1 base...

CVE-2026-61167

Oracle Agile PLM (Oracle Supply Chain) 9.3.6 is vulnerable to an unauthenticated, network-accessible flaw via HTTP that can lead to takeover of Oracle Agile PLM. The CVE-2026-61167 entry shows a base score of 9.8 (CRITICAL) with CVSS v3.1 metrics: AV:N, AC:L, PR:N, UI:N, S:U, C:H/I:H/A:H. Connect...

CVE-2026-61164

CVE-2026-61164 affects Oracle Commerce Guided Search / Oracle Commerce Experience Manager (Content Acquisition System) with affected version 11.4.0. The vulnerability can be exploited by an unauthenticated attacker over HTTPS from network access to compromise data, enabling unauthorized create/de...

CVE-2026-61165

Technical details about CVE-2026-61165 are not publicly available in the provided documents. Monitor for updates from Oracle and NVD for affected versions, impact, and remediation.

CVE-2026-61163

CVE-2026-61163 affects Oracle Commerce Guided Search / Oracle Commerce Experience Manager (Forge component) with affected version 11.4.0. The vulnerability is exploitable over the network (HTTP) by an unauthenticated attacker, with attack complexity high and no required privileges, potentially le...

CVE-2026-61162

The CVE-2026-61162 affects Oracle Commerce Guided Search / Oracle Commerce Experience Manager (Endeca Application Controller) with affected version 11.4.0. The vulnerability allows a low-privilege, logged-in attacker to compromise the system, potentially causing unauthorized creation, deletion or...

CVE-2026-61161

The CVE-2026-61161 entry concerns Oracle Commerce Guided Search / Oracle Commerce Experience Manager (Endeca Application Controller), affected in version 11.4.0. The vulnerability is exploitable over HTTP with network access by an unauthenticated attacker, potentially leading to takeover of the a...

CVE-2026-61160

CVE-2026-61160 affects Oracle Commerce Guided Search / Oracle Commerce Experience Manager (component: Experience Manager) in 11.4.0. The vulnerability allows a low-privileged, network-accessible attacker over HTTP to compromise the product, potentially leading to unauthorized access to data and a...

CVE-2026-61158

CVE-2026-61158 affects Oracle Commerce Guided Search / Oracle Commerce Experience Manager (component: Experience Manager) and is applicable to version 11.4.0. The vulnerability can be triggered by an unauthenticated attacker with network access via RMI to compromise the Product, potentially leadi...

CVE-2026-61159

CVE-2026-61159 affects Oracle Commerce Guided Search / Oracle Commerce Experience Manager (component: Experience Manager) on version 11.4.0. The issue permits unauthenticated, network‑accessible HTTP access to compromise the product, with impact limited to confidentiality (CVSS 3.1: 7.5). Connect...

CVE-2026-61156

CVE-2026-61156 affects Oracle Commerce Guided Search Platform Services (Forge) with vulnerable version 11.4.0. An unauthenticated attacker over HTTPS can compromise the service, enabling unauthorized creation, deletion, or modification of data and potential unauthorized access to all Oracle Comme...

CVE-2026-61157

The CVE-2026-61157 entry concerns Oracle Commerce Guided Search / Oracle Commerce Experience Manager (component: Experience Manager) for version 11.4.0. The vulnerability is exploitable over HTTP by an unauthenticated attacker with network access, potentially leading to unauthorized access to con...