CVE-2026-60644

CVE-2026-60644 affects Oracle WebCenter Content (Web Content Management) in Oracle Fusion Middleware. Affects supported versions 12.2.1.4.0 and 14.1.2.0.0. The vulnerability is exploitable remotely over HTTP by an unauthenticated attacker, with potential to take over the affected WebCenter Conten...

CVE-2026-60645

CVE-2026-60645 affects Oracle WebCenter Content (Web Content Management) in Oracle Fusion Middleware. Affected versions are 12.2.1.4.0 and 14.1.2.0.0. The vulnerability allows a high-privilege attacker with network access via HTTP to compromise WebCenter Content, potentially taking over the syste...

CVE-2026-60642

CVE-2026-60642 affects Oracle WebCenter Content (Content Server) in Oracle Fusion Middleware. Affected versions are 12.2.1.4.0 and 14.1.2.0.0. The vulnerability allows an unauthenticated network-access attacker to compromise the product via HTTP, though successful attacks require human interactio...

CVE-2026-60641

CVE-2026-60641 affects Oracle WebCenter Content (Content Server) in Oracle Fusion Middleware, with affected versions 12.2.1.4.0 and 14.1.2.0.0. The vulnerability allows an unauthenticated attacker with network access via HTTP to compromise WebCenter Content, requiring user interaction. Impacts in...

CVE-2026-60643

Oracle WebCenter Content (Content Server) under Oracle Fusion Middleware is affected in versions 12.2.1.4.0 and 14.1.2.0.0. The CVE allows a low-privilege, unauthenticated attacker with network access via HTTP to take over the server, with human interaction required for exploitation. CVSS v3.1 ba...

CVE-2026-56746

Netty (versions 4.2.0.Final–4.2.15.Final and 4.1.0.Final–4.1.135.Final) contains a security control bypass in CorsHandler’s origin evaluation due to a logical operator error. An attacker can bypass the short-circuit protection by sending Origin: null, causing unauthorized requests to reach the ba...

CVE-2026-60638

The CVE-2026-60638 entry concerns Oracle WebCenter Content (Content Server) within Oracle Fusion Middleware. Affected versions are 12.2.1.4.0 and 14.1.2.0.0. The vulnerability is exploitable over HTTP with network access and unauthenticated, though successful exploitation requires user interactio...

CVE-2026-60640

CVE-2026-60640 affects Oracle WebCenter Content (Content Server) as part of Oracle Fusion Middleware. Affected versions are 12.2.1.4.0 and 14.1.2.0.0. The vulnerability is described as allowing an unauthenticated attacker with network access via HTTP to compromise WebCenter Content, with human in...

CVE-2026-60639

The CVE-2026-60639 issue affects Oracle WebCenter Content (Content Server) in Oracle Fusion Middleware. Affects supported versions 12.2.1.4.0 and 14.1.2.0.0. The vulnerability allows an unauthenticated attacker with network access over HTTP to compromise WebCenter Content, with exploitation requi...

CVE-2026-60636

CVE-2026-60636 affects Oracle WebCenter Content (Content Server) in Oracle Fusion Middleware. Affected supported versions are 12.2.1.4.0 and 14.1.2.0.0. The vulnerability is exploitable over HTTP by an unauthenticated attacker and, with user interaction, can lead to takeover of Oracle WebCenter C...

CVE-2026-60635

CVE-2026-60635 concerns Oracle WebCenter Content (Content Server). Affected supported versions are 12.2.1.4.0 and 14.1.2.0.0. The vulnerability allows an unauthenticated attacker with network access via HTTP to compromise WebCenter Content, with human interaction required for success and potentia...

CVE-2026-60637

CVE-2026-60637 affects Oracle WebCenter Content (Content Server) in Oracle Fusion Middleware. Affected versions are 12.2.1.4.0 and 14.1.2.0.0. The vulnerability allows an unauthenticated attacker with network access via HTTP to compromise WebCenter Content, with all three CIA impacts noted. The d...

CVE-2026-60633

Oracle WebCenter Content (Content Server) in Oracle Fusion Middleware is affected for versions 12.2.1.4.0 and 14.1.2.0.0. The vulnerability allows an unauthenticated attacker with network access via HTTP to compromise the system, with successful attacks potentially taking over the product; exploi...

CVE-2026-60634

CVE-2026-60634 affects Oracle WebCenter Content (Content Server) in Oracle Fusion Middleware. Affected versions are 12.2.1.4.0 and 14.1.2.0.0. The vulnerability allows an unauthenticated, network-accessible attacker to compromise WebCenter Content via HTTP and can lead to takeover; exploitation r...

CVE-2026-60631

CVE-2026-60631 affects Oracle WebCenter Content (Content Server) in Oracle Fusion Middleware, specifically affected versions 12.2.1.4.0 and 14.1.2.0.0. The vulnerability is exploitable by an unauthenticated attacker who can reach the system over HTTP; attacks require user interaction from a count...

CVE-2026-60630

CVE-2026-60630 concerns Oracle APEX, affecting the Installation component in APEX versions 24.1, 24.2, and 26.1. The vulnerability allows a low-privilege, logon-enabled attacker to compromise Oracle APEX, potentially leading to unauthorized access to sensitive data or complete access to all Oracl...

CVE-2026-60632

The CVE-2026-60632 vulnerability affects Oracle WebCenter Content (Content Server) in Oracle Fusion Middleware, with vulnerable versions 12.2.1.4.0 and 14.1.2.0.0. An unauthenticated, network-accessible attacker can compromise WebCenter Content via HTTP, with user interaction required. The impact...

CVE-2026-60627

The CVE-2026-60627 entry concerns Oracle JD Edwards EnterpriseOne Tools (Installation Security) affected in version 9.2.26.3. The provided details indicate a vulnerability that is exploitable by a low-privileged attacker with network access over HTTP, potentially leading to takeover of JD Edwards...

CVE-2026-60628

The CVE-2026-60628 entry relates to the JD Edwards EnterpriseOne Tools product (Installation Security) with affected version 9.2.26.3. The vulnerability can be exploited by an unauthenticated attacker who has access to the physical network segment connected to the hardware running JD Edwards Ente...

CVE-2026-60629

The CVE-2026-60629 entry affects Oracle Fusion Middleware’s Oracle JDeveloper component (Data Visualization Tools). Affected versions are 12.2.1.4.0 and 14.1.2.0.0. The vulnerability is exploitable over HTTP with network access by an unauthenticated attacker, potentially leading to unauthorized d...

CVE-2026-60624

CVE-2026-60624 affects Oracle MySQL Connector/J in MySQL Connectors, with vulnerable versions 9.7.0–9.7.1. The vulnerability allows an unauthenticated, network-accessible attacker to cause a hang or frequent crashes (complete DoS) of Connector/J, with user interaction required for exploitation an...

CVE-2026-60626

Affects: JD Edwards EnterpriseOne Tools (Oracle JD Edwards) – Installation Security component. Vulnerable version: 9.2.26.3. Description indicates a locally exploitable security flaw that requires logon, enabling a high-privilege attacker to compromise JD Edwards EnterpriseOne Tools and potential...

CVE-2026-60625

CVE-2026-60625 affects Oracle Data Integrator (Studio) in Oracle Fusion Middleware, with vulnerable versions 12.2.1.4.0 and 14.1.2.0.0. The issue allows a low-privileged user who can log on to the environment where ODI runs to compromise ODI, potentially leading to takeover (CVSS 3.1 base score 7...

CVE-2026-60623

CVE-2026-60623 affects Oracle MySQL Connector/J in MySQL Connectors. Affected versions are 9.7.0–9.7.1. The vulnerability is exploitable with network access via multiple protocols by a low-privilege attacker and can lead to unauthorized creation, deletion, or modification of data, unauthorized ac...

CVE-2026-60622

The CVE-2026-60622 entry concerns Oracle Fusion Middleware’s Oracle JDeveloper (Security Framework). Affected: JDeveloper in 12.2.1.4.0 and 14.1.2.0.0. Description: an unauthenticated attacker with network access over HTTP can compromise JDeveloper, yielding unauthorized access to sensitive data ...

CVE-2026-60621

CVE-2026-60621 affects Oracle JD Edwards EnterpriseOne Tools (Web Runtime Security) with vulnerable version 9.2.26.3. The issue allows an unauthenticated attacker, over HTTP, to compromise JD Edwards EnterpriseOne Tools, potentially taking over the tools. CVSS 3.1 base score is 8.1 (HIGH) with ne...

CVE-2026-60618

CVE-2026-60618 affects Oracle JD Edwards EnterpriseOne Procurement and Subcontract Management (Procurement) in version 9.2. The vulnerability allows a low-privileged, unauthenticated (network: HTTP) attacker to compromise the application, with potential takeover and impact to confidentiality, int...

CVE-2026-60620

CVE-2026-60620 affects Oracle JD Edwards EnterpriseOne Configurator (component: Configuration Management) in the 9.2 series. An attacker with network access via HTTP and low privileges can potentially cause a hang or persistent crash (DOS) of JD Edwards EnterpriseOne Configurator, and may also pe...

CVE-2026-60619

CVE-2026-60619 affects Oracle JD Edwards EnterpriseOne HCM Foundation (Time Accounting and HRM Base) with affected 9.2. The vulnerability can be triggered by a low-privilege attacker over HTTP to take over the HCM Foundation; CVSS v3.1 base score 7.5 (HIGH) with C/I/A = High. Connected sources in...

CVE-2026-60615

CVE-2026-60615 affects Oracle PeopleSoft Enterprise CS Campus Community (component: Security) for the supported version 9.2.38. The vulnerability enables unauthenticated, network-accessible compromise via HTTP, potentially giving an attacker unauthorized access to confidential data and the abilit...

CVE-2026-60617

The CVE-2026-60617 entry concerns Oracle PeopleSoft: PeopleSoft Enterprise CS Campus Community (Security) affected in version 9.2.38. The vulnerability is exploitable remotely over HTTP by an unauthenticated attacker, allowing unauthorized creation, deletion or modification of data across the Cam...

CVE-2026-60616

The CVE-2026-60616 entry concerns Oracle PeopleSoft (CS Campus Community) 9.2.38. The vulnerability affects the Security component and can be exploited by an unauthenticated attacker over HTTP with network access, potentially leading to unauthorized data access and unauthorized update/insert/dele...

CVE-2026-60614

CVE-2026-60614 refers to a vulnerability in Oracle PeopleSoft/PeopleSoft Enterprise CS Campus Community (component: Person Data) affecting the supported 9.2.38 version. The available documents state that a low-privilege, network-accessing attacker (via HTTP) could compromise the system, resulting...

CVE-2026-60613

The CVE-2026-60613 affects Oracle PeopleSoft (CS Student Records, Research Tracking) with vulnerable version 9.2.38. The issue allows a high-privilege attacker who can access via HTTP on the network to potentially take over PeopleSoft Enterprise CS Student Records. The CVSS 3.1 base score is 6.6 ...

CVE-2026-60612

CVE-2026-60612 affects Oracle PeopleSoft Enterprise CS Financial Aid, component Commonline Loans, with affected version 9.2.38. The vulnerability is described as difficult to exploit but allows a low-privileged, network-accessible attacker (via HTTP) to compromise CS Financial Aid, enabling unaut...

CVE-2026-60611

CVE-2026-60611 affects Oracle’s PeopleSoft Enterprise CS Campus Community (Security) for version 9.2.38. An unauthenticated attacker over HTTP can read a subset of data. CVSS v3.1 base score is 5.3 (Confidentiality: Low). No explicit remediation or patch details are provided in the connected docu...

CVE-2026-60610

CVE-2026-60610 affects Oracle PeopleSoft Enterprise CS Campus Community (component: Security), with affected version 9.2.38. The vulnerability allows an unauthenticated attacker with network access via HTTPS to compromise the PeopleSoft CS Campus Community and may lead to unauthorized access to d...

CVE-2026-60609

CVE-2026-60609 affects Oracle PeopleSoft: PeopleSoft Enterprise CS Campus Community, component Communication, with affected version 9.2.38. The vulnerability allows a low-privilege attacker with network access via HTTPS to compromise the system and gain unauthorized access to data; CVSS 3.1 base ...

CVE-2026-60608

CVE-2026-60608 affects Oracle PeopleSoft Enterprise CS Financial Aid (component: Institutional Methodology Need Analysis) with affected version 9.2.38. The issue allows a low-privilege, logged-in attacker to compromise the Financial Aid module, potentially causing unauthorized creation, deletion ...

CVE-2026-60607

CVE-2026-60607 affects Oracle PeopleSoft: PeopleSoft Enterprise CS Financial Aid, FM Need Analysis Calculator, version 9.2.38. The vulnerability allows a low-privileged user who can log on to the infrastructure running PeopleSoft Enterprise CS Financial Aid to compromise the component, potentiall...

CVE-2026-60605

CVE-2026-60605 affects Oracle PeopleSoft: Enterprise CS Student Records (component: Higher Ed Statistics Agency – UK HESA). Affected version: 9.2.38. An unauthenticated, network-accessible attacker over HTTP can compromise the CS Student Records, potentially leading to unauthorized access to data...

CVE-2026-60606

CVE-2026-60606 affects Oracle PeopleSoft (CC Common Application Objects) on version 9.2. The vulnerability is in the Common Application Objects component and is exploitable without authentication over HTTP, enabling unauthorized creation/modification/deletion of data and access to all CC Common A...

CVE-2026-60604

The CVE-2026-60604 entry affects Oracle PeopleSoft Enterprise CS Campus Community (component: Security) with affected version 9.2.38. The vulnerability allows a low-privileged attacker who can reach the system over HTTP to compromise the PeopleSoft Enterprise CS Campus Community, with potential t...

CVE-2026-60602

The CVE affects Oracle PeopleSoft Enterprise CS Student Financials Billing (component: Billing), specifically version 9.2.38. It describes a vulnerability that lets a low-privileged user with network access via HTTP compromise the system and potentially takeover PeopleSoft CS Student Financials. ...

CVE-2026-60601

The CVE-2026-60601 entry concerns Oracle PeopleSoft Enterprise FIN Common Objects, specifically the Security component. Affected is the 9.2 release. The vulnerability is described as exploitable by a low-privilege user who can log on to the infrastructure where PeopleSoft Enterprise FIN Common Ob...

CVE-2026-60603

CVE-2026-60603 affects Oracle PeopleSoft: PeopleSoft Enterprise CS Student Records, Australian Features component, versions 9.2.38. A low-privileged attacker with network access over HTTP can compromise the affected system, potentially taking over the PeopleSoft CS Student Records instance (CVSS ...

CVE-2026-60600

CVE-2026-60600 affects Oracle PeopleSoft Enterprise FIN Project Costing (component: Projects) for the supported 9.2 version. The vulnerability is exploitable by a local attacker who has logon access to the infrastructure hosting PeopleSoft FIN Project Costing and requires user interaction, with t...

CVE-2026-60599

The CVE-2026-60599 entry applies to Oracle PeopleSoft: Enterprise CS Student Records, specifically the Research Tracking component, affected in version 9.2.38. The vulnerability is exploitable with network access over HTTPS by a low-privilege attacker, leading to unauthorized creation, deletion o...

CVE-2026-60598

The CVE-2026-60598 affects Oracle PeopleSoft: Enterprise CS Student Records (component: Research Tracking) with vulnerable version 9.2.38. A low-privilege user with network access over HTTP can compromise the system, potentially taking over the PeopleSoft CS Student Records process. The CVSS 3.1 ...

CVE-2026-60596

CVE-2026-60596 affects Oracle PeopleSoft, specifically the FIN eSettlements product and its eSettlements component on version 9.2. The vulnerability allows a high-privileged attacker who can log on to the infrastructure where PeopleSoft runs to perform an unauthorized read of a subset of data. CV...