CVE-2026-60533

The CVE-2026-60533 entry affects Oracle Fusion Middleware’s Oracle Identity Manager Connector (Generic Unix Connector) in versions 12.2.1.4.0 and 14.1.2.1.0. The vulnerability is exploitable by an unauthenticated attacker with access to the physical network segment connected to the host running t...

CVE-2026-60534

The CVE-2026-60534 vulnerability affects Oracle Fusion Middleware’s Oracle Identity Manager Connector (component: PeopleSoft Applications). Affected versions are 12.2.1.4.0 and 14.1.2.1.0. The issue enables a high-privilege attacker with network access via HTTP to compromise the Oracle Identity M...

CVE-2026-60535

CVE-2026-60535 affects Oracle Fusion Middleware’s Oracle Identity Manager Connector (component: PeopleSoft Applications). Affected supported versions: 12.2.1.4.0 and 14.1.2.1.0. The vulnerability allows an unauthenticated, network-accessible attacker to compromise the Oracle Identity Manager Conn...

CVE-2026-60531

CVE-2026-60531 affects Oracle Identity Manager Connector (Oracle Fusion Middleware), Core component. Affected versions: 12.2.1.4.0 and 14.1.2.1.0. The issue allows a low-privilege attacker with network access over HTTP to compromise the Oracle Identity Manager Connector, with potential scope expa...

CVE-2026-60532

The CVE concerns Oracle Identity Manager Connector (Oracle Fusion Middleware) for PeopleSoft Applications, affected in 12.2.1.4.0 and 14.1.2.1.0. It is exploitable over HTTP with network access by an unauthenticated attacker, potentially allowing takeover of the Oracle Identity Manager Connector ...

CVE-2026-60530

CVE-2026-60530 is a vulnerability in Oracle HTTP Server (Oracle Fusion Middleware), specifically in the mod_http2.so component. Affected software/version: Oracle HTTP Server 14.1.2.0.0. The issue enables a low-privileged attacker who can log on to the infrastructure where Oracle HTTP Server runs ...

CVE-2026-60529

CVE-2026-60529 affects Oracle WebLogic Server Console in Oracle Fusion Middleware (versions 14.1.2.0.0 and 15.1.1.0.0). The vulnerability enables a high-privilege attacker with network access via HTTP to compromise the server, potentially taking over the WebLogic installation. The connected docum...

CVE-2026-60527

CVE-2026-60527 affects Oracle WebLogic Server (Console component) in 14.1.2.0.0 and 15.1.1.0.0. The vulnerability allows an unauthenticated user with logon to the host running WebLogic to compromise the server, with high confidentiality impact and a local attack vector (scope changed). No exploit...

CVE-2026-60528

The CVE-2026-60528 entry concerns Oracle WebLogic Server (Fusion Middleware) with the Console component affecting 14.1.2.0.0 and 15.1.1.0.0. The vulnerability is exploitable by a high-privilege attacker with network access via HTTP, potentially enabling unauthorized creation, deletion or modifica...

CVE-2026-60525

CVE-2026-60525 affects Oracle WebCenter Content (Content Server) in Oracle Fusion Middleware; vulnerable versions are 12.2.1.4.0 and 14.1.2.0.0. The issue can be triggered by a low-privilege user over HTTP with network access, potentially leading to unauthorized creation, deletion or modification...

CVE-2026-60526

CVE-2026-60526 is a vulnerability in Oracle Java SE (component: Installation). It affects Oracle Java SE 8u491 and 8u491-perf. The issue is exploitable by a low-privileged user with logon to the infrastructure where Oracle Java SE runs; exploitation is difficult (high attack complexity) and requi...

CVE-2026-60522

The CVE-2026-60522 entry affects Oracle WebCenter Content (Content Server) in Oracle Fusion Middleware. Affected are 12.2.1.4.0 and 14.1.2.0.0. The flaw allows a low-privilege attacker with network access via HTTP to compromise WebCenter Content, with user interaction required. Consequences inclu...

CVE-2026-60524

CVE-2026-60524 affects Oracle WebCenter Enterprise Capture (Client Bundle) in Oracle Fusion Middleware, with affected versions 12.2.1.4.0 and 14.1.2.0.0. The issue allows a low-privileged attacker who can reach via network (T3, IIOP) to compromise the product, potentially taking over the WebCente...

CVE-2026-60523

The CVE-2026-60523 entry affects Oracle WebCenter Content (Content Server) in Oracle Fusion Middleware, with affected versions 12.2.1.4.0 and 14.1.2.0.0. The vulnerability allows network-based exploitation via HTTP, requires user interaction, and can lead to unauthorized data creation/deletion/mo...

CVE-2026-60519

CVE-2026-60519 affects Oracle Unified Directory (OUD Core) within Oracle Fusion Middleware. Affected versions are 12.2.1.4.0 and 14.1.2.1.0. The vulnerability allows a high-privileged attacker with network access via LDAP to take over Oracle Unified Directory, with CVSS 3.1 base score 7.2 (Impact...

CVE-2026-60521

The CVE affects Oracle E-Business Suite, Oracle Advanced Pricing (Price List) in versions 12.2.3–12.2.15. The issue is exploitable by an unauthenticated attacker over HTTP, leading to unauthorized update/insert/delete and read access to Oracle Advanced Pricing data. Root cause and detailed exploi...

CVE-2026-60520

CVE-2026-60520 affects Oracle Unified Directory (OUD Core) within Oracle Fusion Middleware. Affected versions are 12.2.1.4.0 and 14.1.2.1.0. The vulnerability can be exploited by a low-privileged attacker with network access via LDAP to compromise data, enabling unauthorized creation, deletion, o...

CVE-2026-60501

CVE-2026-60501 concerns Oracle Fusion Middleware’s Service Delivery Platform (Messaging Enabler). Affected versions are 12.2.1.4.0 and 14.1.2.0.0. The issue, described as allowing a low-privileged user with logon to compromise the Service Delivery Platform, may enable unauthorized updates, insert...

CVE-2026-60502

CVE-2026-60502 affects Oracle WebCenter Content: Imaging (Core) with vulnerable versions 12.2.1.4.0 and 14.1.2.0.0. The vulnerability allows a high-privilege attacker with network access via T3/ IIOP to compromise WebCenter Content: Imaging, potentially leading to takeover. CVSS v3.1 base score 7...

CVE-2026-60503

CVE-2026-60503 affects Oracle WebCenter Content: Imaging (Core) in Oracle Fusion Middleware, with affected versions 12.2.1.4.0 and 14.1.2.0.0. An attacker with network access via HTTP and low privileges can potentially take over WebCenter Content: Imaging, compromising confidentiality, integrity,...

CVE-2026-60499

CVE-2026-60499 affects Oracle JD Edwards EnterpriseOne Solution Advisor (component: Solution Advisor) in the 9.2 line. The vulnerability allows a low-privilege, network-accessible attacker (via HTTP) to take over the JD Edwards EnterpriseOne Solution Advisor; CVSS 3.1 base score 8.8 (C/H/I/H). Th...

CVE-2026-60497

CVE-2026-60497 affects Oracle JD Edwards EnterpriseOne CRM Foundation, specifically the CRM Foundation component in the 9.2 line. The vulnerability is exploitable with network access via JDENET by a low-privilege attacker and can lead to takeover of the CRM Foundation, per the CVSS 3.1 vector (AV...

CVE-2026-60498

Summary: CVE-2026-60498 concerns the JD Edwards EnterpriseOne Human Resources Management product (component: Human Resources), affected in version 9.2. The vulnerability is exploitable by a low-privilege attacker with network access via JDENET and can lead to takeover of the Human Resources Manag...

CVE-2026-60495

The CVE-2026-60495 entry concerns Oracle JD Edwards EnterpriseOne Requirements Planning (component: Requirements Planning) with the affected version reported as 9.2. The vulnerability allows a low-privilege attacker who can access JDENET over the network to compromise the JD Edwards EnterpriseOne...

CVE-2026-60494

CVE-2026-60494 affects JD Edwards EnterpriseOne General Ledger (component E1 Foundation) with the 9.2 line. The vulnerability allows unauthenticated users over HTTP to cause a hang or crash (DoS) and to perform unauthorized read, update, insert or delete of related data. CVSS 3.1 base score is 7....

CVE-2026-60496

CVE-2026-60496 affects Oracle JD Edwards EnterpriseOne Advanced Pricing – Procurement (component: Advanced Pricing) with affected version 9.2. The issue allows a low-privileged attacker with network access via JDENET to compromise the Procurement module, potentially leading to takeover. CVSS 3.1 ...

CVE-2026-60493

CVE-2026-60493 affects Oracle JD Edwards EnterpriseOne Human Resources Management (component: Human Resources) with affected version 9.2. The vulnerability is exploitable over HTTP by a low-privileged, network-attached attacker, potentially leading to takeover with CVSS 3.1 base score 8.8 (C/H, I...

CVE-2026-60492

The CVE affects Oracle’s JD Edwards EnterpriseOne HCM Foundation, specifically the OW HR PR Foundation component in version 9.2. The vulnerability allows a low-privileged, network-accessible attacker (via HTTP) to cause a hang or crash (DOS) and unauthorized read access to a subset of data in the...

CVE-2026-60489

CVE-2026-60489 affects Oracle JD Edwards EnterpriseOne CRM Foundation (component: CRM Foundation), with the affected product version stated as 9.2. The vulnerability is exploitable over a network via HTTP by a low-privileged attacker, and successful exploitation can lead to takeover of JD Edwards...

CVE-2026-60491

CVE-2026-60491 affects Oracle E-Business Suite, Oracle Advanced Inbound Telephony (SDK client integration) for versions 12.2.3–12.2.15. The vulnerability can be exploited remotely over HTTP by a low-privileged user, potentially leading to unauthorized update/insert/delete of Oracle Advanced Inbou...

CVE-2026-60490

CVE-2026-60490 affects Oracle JD Edwards EnterpriseOne CRM Foundation (component: CRM Foundation) in the 9.2 line. The vulnerability is exploitable by a low-privilege attacker with network access over HTTP, potentially leading to takeover of the CRM Foundation. CVSS 3.1 base score is 8.8 (Confide...

CVE-2026-60471

The CVE-2026-60471 entry concerns Oracle WebCenter Content: Imaging (Core) with affected versions 12.2.1.4.0 and 14.1.2.0.0. The vulnerability allows an unauthenticated attacker with access to the local network segment hosting WebCenter Content: Imaging to compromise the application, potentially ...

CVE-2026-60472

CVE-2026-60472 concerns Oracle WebCenter Content: Imaging (Core) vulnerability affecting 12.2.1.4.0 and 14.1.2.0.0. The issue allows a low-privileged attacker with network access over HTTP to compromise WebCenter Content: Imaging, with potential takeover consequences. The CVSS 3.1 base score is 8...

CVE-2026-60470

The CVE-2026-60470 entry concerns Oracle Fusion Middleware WebCenter Content: Imaging (Core) with affected versions 12.2.1.4.0 and 14.1.2.0.0. The vulnerability is exploitable over HTTP by a network-Adjacent attacker with low privileges, requiring user interaction, and may lead to unauthorized cr...

CVE-2026-60468

CVE-2026-60468 affects Oracle WebCenter Content: Imaging (Core) in 12.2.1.4.0 and 14.1.2.0.0. The vulnerability permits a low-privileged, network (HTTP) attacker to access or modify WebCenter Content: Imaging data, per CVSS 3.1 base score 7.1 (C:H, I:L). Affected component is the Imaging Core; th...

CVE-2026-60469

CVE-2026-60469 affects Oracle WebCenter Content: Imaging (Core) in Oracle Fusion Middleware. Affected versions: 12.2.1.4.0 and 14.1.2.0.0. The vulnerability is exploitable over HTTP by a low-privilege, network-accessing attacker and requires user interaction. Successful exploitation can lead to u...

CVE-2026-60466

CVE-2026-60466 affects Oracle Fusion Middleware WebCenter Content: Imaging (Core) for 12.2.1.4.0 and 14.1.2.0.0. An attacker with network access via HTTP and high privileges can compromise WebCenter Content: Imaging, potentially taking over the product (CVSS v3.1 base 7.2). The Connected document...

CVE-2026-60467

Vulnerability CVE-2026-60467 affects Oracle WebCenter Content: Imaging (Core) in Oracle Fusion Middleware, with affected versions 12.2.1.4.0 and 14.1.2.0.0. An unauthenticated attacker with network access via HTTP can compromise WebCenter Content: Imaging; attacks require user interaction from a ...

CVE-2026-60465

CVE-2026-60465 affects Oracle WebCenter Content: Imaging (Core) and is exploitable remotely via network access (T3, IIOP) on affected 12.2.1.4.0 and 14.1.2.0.0 installations. Successful exploitation can lead to takeover of WebCenter Content: Imaging with full confidentiality, integrity, and avail...

CVE-2026-60462

Affected product: Oracle WebCenter Content (Content Server) within Oracle Fusion Middleware. Vulnerable versions: 12.2.1.4.0 and 14.1.2.0.0. Issue: a vulnerability allows an unauthenticated attacker with network access over HTTP to compromise WebCenter Content and potentially take over the applic...

CVE-2026-60463

CVE-2026-60463 affects Oracle WebCenter Content: Imaging (Core) with affected versions 12.2.1.4.0 and 14.1.2.0.0. An unauthenticated attacker with network access via T3/IIOP can compromise WebCenter Content: Imaging, potentially taking over the component. The CVSS v3.1 base score is 9.8 (Impactin...

CVE-2026-60464

CVE-2026-60464 affects Oracle WebCenter Content: Imaging (Core) in Oracle Fusion Middleware. Affected versions are 12.2.1.4.0 and 14.1.2.0.0. The vulnerability enables a low-privileged attacker with network access via HTTP to compromise WebCenter Content: Imaging, potentially leading to takeover ...

CVE-2026-60460

The CVE-2026-60460 entry corresponds to Oracle WebCenter Enterprise Capture (Client Bundle) in Oracle Fusion Middleware. Affected versions are 12.2.1.4.0 and 14.1.2.0.0. The vulnerability can be exploited over NETWORK via T3/IIOP by an unauthenticated attacker to takeover Oracle WebCenter Enterpr...

CVE-2026-60461

The CVE concerns Oracle WebCenter Enterprise Capture (Client Bundle) in Oracle Fusion Middleware. Affected versions are 12.2.1.4.0 and 14.1.2.0.0. A low-privileged attacker with network access via T3/IIOP can compromise WebCenter Enterprise Capture, with potential impact to confidentiality, integ...

CVE-2026-60459

The CVE-2026-60459 entry concerns Oracle WebCenter Enterprise Capture (component: Client Bundle) with affected versions 12.2.1.4.0 and 14.1.2.0.0. The vulnerability is exploitable by a low privileged attacker over HTTP with network access, potentially leading to takeover of Oracle WebCenter Enter...

CVE-2026-60457

CVE-2026-60457 affects Oracle WebCenter Enterprise Capture (Client Bundle) in Oracle Fusion Middleware. Affects 12.2.1.4.0 and 14.1.2.0.0; attacker with network access via T3/IIOP and low privileges can compromise the product and potentially impact other components, per CVSS 3.1 base score 9.9 (C...

CVE-2026-60456

CVE-2026-60456 affects Oracle WebCenter Enterprise Capture (Client Bundle) in Oracle Fusion Middleware. Affected versions: 12.2.1.4.0 and 14.1.2.0.0. The issue allows a low-privilege attacker with network access over HTTP to compromise the product, with potential broader impact on related compone...

CVE-2026-60458

CVE-2026-60458 affects Oracle WebCenter Enterprise Capture (Client Bundle) within Oracle Fusion Middleware. Affected versions are 12.2.1.4.0 and 14.1.2.0.0. The vulnerability is exploitable over the network via T3/IIOP by a low-privilege attacker and can lead to takeover of the product, with CVSS...

CVE-2026-60454

CVE-2026-60454 affects Oracle HTTP Server (Core) in Oracle Fusion Middleware. Affected versions are 12.2.1.4.0 and 14.1.2.0.0. The vulnerability is described as easily exploitable with a low-privilege attacker who can log on to the infrastructure where Oracle HTTP Server runs, potentially leading...

CVE-2026-60451

CVE-2026-60451 affects Oracle Fusion Middleware WebCenter Content: Imaging (Core) with affected versions 12.2.1.4.0 and 14.1.2.0.0. The vulnerability allows a low-privileged, unauthenticated attacker with network access via HTTP to compromise WebCenter Content: Imaging, potentially granting unaut...