CVE-2026-60655

CVE-2026-60655 affects Oracle WebCenter Content (Web Content Management) in Oracle Fusion Middleware. Affected products/versions: 12.2.1.4.0 and 14.1.2.0.0. The vulnerability is exploitable over HTTP with network access by a low-privileged attacker and can lead to takeover of Oracle WebCenter Con...

CVE-2026-60654

CVE-2026-60654 affects Oracle WebCenter Content (Web Content Management) in Oracle Fusion Middleware. Affected versions are 12.2.1.4.0 and 14.1.2.0.0. The vulnerability allows a low-privileged, unauthenticated attacker with network access via HTTP to take over Oracle WebCenter Content. CVSS 3.1 b...

CVE-2026-65318

Verba RAG application version 2.1.3 is affected by an unauthenticated server-side request forgery (SSRF) via the WebSocket import endpoint. Attackers can connect to /ws/import_files without authentication and supply arbitrary URLs in the HTMLReader configuration, prompting the backend to issue HT...

CVE-2026-60652

The CVE-2026-60652 entry concerns Oracle WebCenter Content (Web Content Management) within Oracle Fusion Middleware. Affected supported versions are 12.2.1.4.0 and 14.1.2.0.0. The vulnerability is exploitable remotely over HTTP by a low-privileged attacker and, despite low privileges, requires us...

CVE-2026-60653

This CVE (CVE-2026-60653) concerns Oracle WebCenter Content (Web Content Management) with affected versions 12.2.1.4.0 and 14.1.2.0.0. The vulnerability allows a low-privilege, network-accessible attacker (HTTP) to modify or exfiltrate data, potentially gaining unauthorized access to all Oracle W...

CVE-2026-60650

CVE-2026-60650 affects Oracle WebCenter Content (Web Content Management) within Oracle Fusion Middleware. Affected versions are 12.2.1.4.0 and 14.1.2.0.0. The vulnerability is exploitable over HTTP by a low-privilege, network-access—requiring user interaction—attacker, with the potential for take...

CVE-2026-47731

Summary (validated by connected docs): CVE-2026-47731 affects the NASA AMMOS AIT-Core software’s Binary Stream Capture (BSC) component. An unauthenticated HTTP API under /NAME/start allows a remote attacker to trigger path traversal by supplying attacker-controlled fields (log_dir_path, path, fil...

CVE-2026-60649

CVE-2026-60649 affects Oracle WebCenter Content (Web Content Management) in Oracle Fusion Middleware. Affected: 12.2.1.4.0 and 14.1.2.0.0. An unauthenticated, network-accessible attacker over HTTP can compromise Oracle WebCenter Content, enabling unauthorized creation, deletion or modification of...

CVE-2026-60651

CVE-2026-60651 affects Oracle WebCenter Content (Web Content Management) in Oracle Fusion Middleware. Affected versions are 12.2.1.4.0 and 14.1.2.0.0. The vulnerability allows an unauthenticated, network-accessible attacker (via HTTP) to compromise WebCenter Content; exploitation requires user in...

CVE-2026-60647

The CVE affects Oracle WebCenter Content (Oracle Fusion Middleware Web Content Management) in 12.2.1.4.0 and 14.1.2.0.0. An attacker with network access over HTTP and low privileges can potentially access data and cause partial DOS. The issue’s root cause and vulnerable component are described in...

CVE-2026-60648

Oracle WebCenter Content (Web Content Management, part of Oracle Fusion Middleware) is affected by CVE-2026-60648. Supported affected versions are 12.2.1.4.0 and 14.1.2.0.0. The vulnerability is exploitable over HTTP by a low-privileged attacker with network access and requires human interaction;...

CVE-2026-60646

CVE-2026-60646 affects Oracle WebCenter Content (Web Content Management) in Oracle Fusion Middleware. Affected versions are 12.2.1.4.0 and 14.1.2.0.0. The vulnerability is exploitable by a low-privileged, network-accessible attacker over HTTP and requires user interaction; successful exploitation...

CVE-2026-60644

CVE-2026-60644 affects Oracle WebCenter Content (Web Content Management) in Oracle Fusion Middleware. Affects supported versions 12.2.1.4.0 and 14.1.2.0.0. The vulnerability is exploitable remotely over HTTP by an unauthenticated attacker, with potential to take over the affected WebCenter Conten...

CVE-2026-60645

CVE-2026-60645 affects Oracle WebCenter Content (Web Content Management) in Oracle Fusion Middleware. Affected versions are 12.2.1.4.0 and 14.1.2.0.0. The vulnerability allows a high-privilege attacker with network access via HTTP to compromise WebCenter Content, potentially taking over the syste...

CVE-2026-60642

CVE-2026-60642 affects Oracle WebCenter Content (Content Server) in Oracle Fusion Middleware. Affected versions are 12.2.1.4.0 and 14.1.2.0.0. The vulnerability allows an unauthenticated network-access attacker to compromise the product via HTTP, though successful attacks require human interactio...

CVE-2026-60641

CVE-2026-60641 affects Oracle WebCenter Content (Content Server) in Oracle Fusion Middleware, with affected versions 12.2.1.4.0 and 14.1.2.0.0. The vulnerability allows an unauthenticated attacker with network access via HTTP to compromise WebCenter Content, requiring user interaction. Impacts in...

CVE-2026-60643

Oracle WebCenter Content (Content Server) under Oracle Fusion Middleware is affected in versions 12.2.1.4.0 and 14.1.2.0.0. The CVE allows a low-privilege, unauthenticated attacker with network access via HTTP to take over the server, with human interaction required for exploitation. CVSS v3.1 ba...

CVE-2026-56746

Netty (versions 4.2.0.Final–4.2.15.Final and 4.1.0.Final–4.1.135.Final) contains a security control bypass in CorsHandler’s origin evaluation due to a logical operator error. An attacker can bypass the short-circuit protection by sending Origin: null, causing unauthorized requests to reach the ba...

CVE-2026-60638

The CVE-2026-60638 entry concerns Oracle WebCenter Content (Content Server) within Oracle Fusion Middleware. Affected versions are 12.2.1.4.0 and 14.1.2.0.0. The vulnerability is exploitable over HTTP with network access and unauthenticated, though successful exploitation requires user interactio...

CVE-2026-60640

CVE-2026-60640 affects Oracle WebCenter Content (Content Server) as part of Oracle Fusion Middleware. Affected versions are 12.2.1.4.0 and 14.1.2.0.0. The vulnerability is described as allowing an unauthenticated attacker with network access via HTTP to compromise WebCenter Content, with human in...

CVE-2026-60639

The CVE-2026-60639 issue affects Oracle WebCenter Content (Content Server) in Oracle Fusion Middleware. Affects supported versions 12.2.1.4.0 and 14.1.2.0.0. The vulnerability allows an unauthenticated attacker with network access over HTTP to compromise WebCenter Content, with exploitation requi...

CVE-2026-60636

CVE-2026-60636 affects Oracle WebCenter Content (Content Server) in Oracle Fusion Middleware. Affected supported versions are 12.2.1.4.0 and 14.1.2.0.0. The vulnerability is exploitable over HTTP by an unauthenticated attacker and, with user interaction, can lead to takeover of Oracle WebCenter C...

CVE-2026-60635

CVE-2026-60635 concerns Oracle WebCenter Content (Content Server). Affected supported versions are 12.2.1.4.0 and 14.1.2.0.0. The vulnerability allows an unauthenticated attacker with network access via HTTP to compromise WebCenter Content, with human interaction required for success and potentia...

CVE-2026-60637

CVE-2026-60637 affects Oracle WebCenter Content (Content Server) in Oracle Fusion Middleware. Affected versions are 12.2.1.4.0 and 14.1.2.0.0. The vulnerability allows an unauthenticated attacker with network access via HTTP to compromise WebCenter Content, with all three CIA impacts noted. The d...

CVE-2026-60633

Oracle WebCenter Content (Content Server) in Oracle Fusion Middleware is affected for versions 12.2.1.4.0 and 14.1.2.0.0. The vulnerability allows an unauthenticated attacker with network access via HTTP to compromise the system, with successful attacks potentially taking over the product; exploi...

CVE-2026-60634

CVE-2026-60634 affects Oracle WebCenter Content (Content Server) in Oracle Fusion Middleware. Affected versions are 12.2.1.4.0 and 14.1.2.0.0. The vulnerability allows an unauthenticated, network-accessible attacker to compromise WebCenter Content via HTTP and can lead to takeover; exploitation r...

CVE-2026-60631

CVE-2026-60631 affects Oracle WebCenter Content (Content Server) in Oracle Fusion Middleware, specifically affected versions 12.2.1.4.0 and 14.1.2.0.0. The vulnerability is exploitable by an unauthenticated attacker who can reach the system over HTTP; attacks require user interaction from a count...

CVE-2026-60630

CVE-2026-60630 concerns Oracle APEX, affecting the Installation component in APEX versions 24.1, 24.2, and 26.1. The vulnerability allows a low-privilege, logon-enabled attacker to compromise Oracle APEX, potentially leading to unauthorized access to sensitive data or complete access to all Oracl...

CVE-2026-60632

The CVE-2026-60632 vulnerability affects Oracle WebCenter Content (Content Server) in Oracle Fusion Middleware, with vulnerable versions 12.2.1.4.0 and 14.1.2.0.0. An unauthenticated, network-accessible attacker can compromise WebCenter Content via HTTP, with user interaction required. The impact...

CVE-2026-60627

The CVE-2026-60627 entry concerns Oracle JD Edwards EnterpriseOne Tools (Installation Security) affected in version 9.2.26.3. The provided details indicate a vulnerability that is exploitable by a low-privileged attacker with network access over HTTP, potentially leading to takeover of JD Edwards...

CVE-2026-60628

The CVE-2026-60628 entry relates to the JD Edwards EnterpriseOne Tools product (Installation Security) with affected version 9.2.26.3. The vulnerability can be exploited by an unauthenticated attacker who has access to the physical network segment connected to the hardware running JD Edwards Ente...

CVE-2026-60629

The CVE-2026-60629 entry affects Oracle Fusion Middleware’s Oracle JDeveloper component (Data Visualization Tools). Affected versions are 12.2.1.4.0 and 14.1.2.0.0. The vulnerability is exploitable over HTTP with network access by an unauthenticated attacker, potentially leading to unauthorized d...

CVE-2026-60624

CVE-2026-60624 affects Oracle MySQL Connector/J in MySQL Connectors, with vulnerable versions 9.7.0–9.7.1. The vulnerability allows an unauthenticated, network-accessible attacker to cause a hang or frequent crashes (complete DoS) of Connector/J, with user interaction required for exploitation an...

CVE-2026-60626

Affects: JD Edwards EnterpriseOne Tools (Oracle JD Edwards) – Installation Security component. Vulnerable version: 9.2.26.3. Description indicates a locally exploitable security flaw that requires logon, enabling a high-privilege attacker to compromise JD Edwards EnterpriseOne Tools and potential...

CVE-2026-60625

CVE-2026-60625 affects Oracle Data Integrator (Studio) in Oracle Fusion Middleware, with vulnerable versions 12.2.1.4.0 and 14.1.2.0.0. The issue allows a low-privileged user who can log on to the environment where ODI runs to compromise ODI, potentially leading to takeover (CVSS 3.1 base score 7...

CVE-2026-60623

CVE-2026-60623 affects Oracle MySQL Connector/J in MySQL Connectors. Affected versions are 9.7.0–9.7.1. The vulnerability is exploitable with network access via multiple protocols by a low-privilege attacker and can lead to unauthorized creation, deletion, or modification of data, unauthorized ac...

CVE-2026-60622

The CVE-2026-60622 entry concerns Oracle Fusion Middleware’s Oracle JDeveloper (Security Framework). Affected: JDeveloper in 12.2.1.4.0 and 14.1.2.0.0. Description: an unauthenticated attacker with network access over HTTP can compromise JDeveloper, yielding unauthorized access to sensitive data ...

CVE-2026-60621

CVE-2026-60621 affects Oracle JD Edwards EnterpriseOne Tools (Web Runtime Security) with vulnerable version 9.2.26.3. The issue allows an unauthenticated attacker, over HTTP, to compromise JD Edwards EnterpriseOne Tools, potentially taking over the tools. CVSS 3.1 base score is 8.1 (HIGH) with ne...

CVE-2026-60618

CVE-2026-60618 affects Oracle JD Edwards EnterpriseOne Procurement and Subcontract Management (Procurement) in version 9.2. The vulnerability allows a low-privileged, unauthenticated (network: HTTP) attacker to compromise the application, with potential takeover and impact to confidentiality, int...

CVE-2026-60620

CVE-2026-60620 affects Oracle JD Edwards EnterpriseOne Configurator (component: Configuration Management) in the 9.2 series. An attacker with network access via HTTP and low privileges can potentially cause a hang or persistent crash (DOS) of JD Edwards EnterpriseOne Configurator, and may also pe...

CVE-2026-60619

CVE-2026-60619 affects Oracle JD Edwards EnterpriseOne HCM Foundation (Time Accounting and HRM Base) with affected 9.2. The vulnerability can be triggered by a low-privilege attacker over HTTP to take over the HCM Foundation; CVSS v3.1 base score 7.5 (HIGH) with C/I/A = High. Connected sources in...

CVE-2026-60615

CVE-2026-60615 affects Oracle PeopleSoft Enterprise CS Campus Community (component: Security) for the supported version 9.2.38. The vulnerability enables unauthenticated, network-accessible compromise via HTTP, potentially giving an attacker unauthorized access to confidential data and the abilit...

CVE-2026-60616

The CVE-2026-60616 entry concerns Oracle PeopleSoft (CS Campus Community) 9.2.38. The vulnerability affects the Security component and can be exploited by an unauthenticated attacker over HTTP with network access, potentially leading to unauthorized data access and unauthorized update/insert/dele...

CVE-2026-60617

The CVE-2026-60617 entry concerns Oracle PeopleSoft: PeopleSoft Enterprise CS Campus Community (Security) affected in version 9.2.38. The vulnerability is exploitable remotely over HTTP by an unauthenticated attacker, allowing unauthorized creation, deletion or modification of data across the Cam...

CVE-2026-60614

CVE-2026-60614 refers to a vulnerability in Oracle PeopleSoft/PeopleSoft Enterprise CS Campus Community (component: Person Data) affecting the supported 9.2.38 version. The available documents state that a low-privilege, network-accessing attacker (via HTTP) could compromise the system, resulting...

CVE-2026-60613

The CVE-2026-60613 affects Oracle PeopleSoft (CS Student Records, Research Tracking) with vulnerable version 9.2.38. The issue allows a high-privilege attacker who can access via HTTP on the network to potentially take over PeopleSoft Enterprise CS Student Records. The CVSS 3.1 base score is 6.6 ...

CVE-2026-60612

CVE-2026-60612 affects Oracle PeopleSoft Enterprise CS Financial Aid, component Commonline Loans, with affected version 9.2.38. The vulnerability is described as difficult to exploit but allows a low-privileged, network-accessible attacker (via HTTP) to compromise CS Financial Aid, enabling unaut...

CVE-2026-60611

CVE-2026-60611 affects Oracle’s PeopleSoft Enterprise CS Campus Community (Security) for version 9.2.38. An unauthenticated attacker over HTTP can read a subset of data. CVSS v3.1 base score is 5.3 (Confidentiality: Low). No explicit remediation or patch details are provided in the connected docu...

CVE-2026-60610

CVE-2026-60610 affects Oracle PeopleSoft Enterprise CS Campus Community (component: Security), with affected version 9.2.38. The vulnerability allows an unauthenticated attacker with network access via HTTPS to compromise the PeopleSoft CS Campus Community and may lead to unauthorized access to d...

CVE-2026-60609

CVE-2026-60609 affects Oracle PeopleSoft: PeopleSoft Enterprise CS Campus Community, component Communication, with affected version 9.2.38. The vulnerability allows a low-privilege attacker with network access via HTTPS to compromise the system and gain unauthorized access to data; CVSS 3.1 base ...