CVE-2026-60450

Oracle WebCenter Content (Content Server) in Oracle Fusion Middleware is affected. Affected versions: 12.2.1.4.0 and 14.1.2.0.0. An unauthenticated attacker with network access via HTTPS can compromise the Content Server, potentially leading to takeover. CVSS 3.1 base score 8.1 (C/I/A). Root caus...

CVE-2026-60452

CVE-2026-60452 affects Oracle Fusion Middleware WebCenter Content: Imaging (core) with vulnerable versions 12.2.1.4.0 and 14.1.2.0.0. A low-privileged attacker with network access via HTTP can compromise WebCenter Content: Imaging, with potential to access or modify data across related Imaging da...

CVE-2026-60447

CVE-2026-60447 affects Oracle WebCenter Enterprise Capture (Oracle Fusion Middleware) — component: Client Bundle. Affected versions: 12.2.1.4.0 and 14.1.2.0.0. The issue allows a low-privileged attacker with network access over HTTP to compromise WebCenter Enterprise Capture, with potential takeo...

CVE-2026-60448

CVE-2026-60448 affects Oracle WebCenter Content (Content Server) in Oracle Fusion Middleware, versions 12.2.1.4.0 and 14.1.2.0.0. It allows unauthenticated HTTP-based access to compromise the Content Server, potentially enabling unauthorized data creation/deletion/modification or access to all Co...

CVE-2026-60449

Summary: CVE-2026-60449 affects Oracle WebCenter Content (Content Server) in Oracle Fusion Middleware. Affected versions are 12.2.1.4.0 and 14.1.2.0.0. The vulnerability allows an unauthenticated attacker with login access to the infrastructure where WebCenter Content runs to compromise the produ...

CVE-2026-60444

CVE-2026-60444 affects Oracle WebCenter Content (Content Server) in Oracle Fusion Middleware, with affected versions 12.2.1.4.0 and 14.1.2.0.0. The vulnerability allows a low-privileged attacker with network access over HTTP to compromise WebCenter Content, potentially leading to unauthorized dat...

CVE-2026-60446

Vulnerability CVE-2026-60446 affects Oracle WebCenter Enterprise Capture (Client Bundle) in Oracle Fusion Middleware. Affected versions: 12.2.1.4.0 and 14.1.2.0. An unauthenticated attacker with network access via T3/IIOP can compromise the system and take over the product. CVSS v3.1 base score 9...

CVE-2026-60445

CVE-2026-60445 is an Oracle WebCenter Enterprise Capture vulnerability (component: Client Bundle) affected in 12.2.1.4.0 and 14.1.2.0.0. The NVD/NVD-like records report an easily exploitable flaw that allows a low-privileged attacker with network access via T3/IIOP to compromise WebCenter Enterpr...

CVE-2026-60442

CVE-2026-60442 affects Oracle Fusion Middleware Service Delivery Platform (Messaging Enabler) for 12.2.1.4.0 and 14.1.2.0.0. An unauthenticated attacker with network access over T3/IIOP can compromise the Service Delivery Platform, potentially leading to takeover (CVSS 3.1 base 9.8). Root cause a...

CVE-2026-60441

CVE-2026-60441 affects Oracle Fusion Middleware’s Service Delivery Platform, specifically the Messaging Enabler component. Affected supported versions are 12.2.1.4.0 and 14.1.2.0.0. The vulnerability allows an unauthenticated attacker with network access via T3 or IIOP to compromise the Service D...

CVE-2026-60443

CVE-2026-60443 affects Oracle WebCenter Content (Content Server) in Oracle Fusion Middleware. Affected versions: 12.2.1.4.0 and 14.1.2.0.0. It is exploitable with network access via HTTP by a low-privilege user and requires user interaction. Successful attacks can lead to unauthorized creation/de...

CVE-2026-60440

CVE-2026-60440 affects Oracle Fusion Middleware, Service Delivery Platform (Messaging Enabler) with affected versions 12.2.1.4.0 and 14.1.2.0.0. The flaw enables a low-privilege attacker with network access over HTTP to compromise the platform, potentially yielding unauthorized access to critical...

CVE-2026-60438

CVE-2026-60438 concerns the Oracle HTTP Server component (mod_ssl) within Oracle Fusion Middleware. Affected are supported versions 12.2.1.4.0 and 14.1.2.0.0. An unauthenticated attacker with network access via HTTP can compromise the server, potentially leading to creation, deletion or modificat...

CVE-2026-60437

CVE-2026-60437 affects Oracle Unified Directory (OUD Core) within Oracle Fusion Middleware. Affected support versions are 12.2.1.4.0 and 14.1.2.1.0. The vulnerability enables a high-privilege attacker with network access via LDAP to compromise Oracle Unified Directory, potentially causing unautho...

CVE-2026-60436

CVE-2026-60436 affects Oracle Unified Directory (OUD Core) in Oracle Fusion Middleware, with vulnerable versions 12.2.1.4.0 and 14.1.2.1.0. The vulnerability allows unauthenticated, network-accessible LDAP attackers to cause the OUD service to hang or crash (complete DOS). CVSS v3.1 base score 7....

CVE-2026-60435

The CVE-2026-60435 affects Oracle WebCenter Content (Content Server) in Oracle Fusion Middleware. Affected versions are 12.2.1.4.0 and 14.1.2.0.0. The vulnerability allows an unauthenticated attacker with network access over HTTP to compromise WebCenter Content, potentially taking over the servic...

CVE-2026-60431

The CVE-2026-60431 entry affects Oracle HTTP Server (mod_proxy) in Oracle Fusion Middleware, with affected versions 12.2.1.4.0 and 14.1.2.0.0. The issue is exploitable via unauthenticated HTTP access and may allow access to or disclosure of data; the impact is limited to the Oracle HTTP Server co...

CVE-2026-60433

Oracle Transportation Management (OTM) in Oracle Supply Chain, component Integration, is affected in version 6.5.3. The vulnerability can be exploited by a high-privileged attacker with network access via HTTP to compromise OTM, potentially allowing unauthorized creation, deletion or modification...

CVE-2026-60434

CVE-2026-60434 affects Oracle Transportation Management (Oracle Supply Chain) with vulnerable component Authentication in version 6.5.3. The issue is exploitable over HTTP by a low-privilege, network-accessible attacker, leading to unauthorized read access to a subset of Oracle Transportation Man...

CVE-2026-60430

CVE-2026-60430 affects Oracle Unified Directory (OUD Core) in Oracle Fusion Middleware. Affects versions 12.2.1.4.0 and 14.1.2.1.0 are vulnerable to a network-accessible LDAP flaw that a low-privileged attacker can exploit to take over OUD. The CVSS 3.1 base score is 8.8 (HIGH) with impacts to co...

CVE-2026-60429

CVE-2026-60429 affects Oracle Unified Directory (OUD Core) in Oracle Fusion Middleware. Affected versions are 12.2.1.4.0 and 14.1.2.1.0. The vulnerability allows a low-privileged attacker with LDAP network access to compromise OUD, with potential impact on connected products and complete takeover...

CVE-2026-60427

CVE-2026-60427 affects Oracle Unified Directory (OUD Core) in Oracle Fusion Middleware, impacting versions 12.2.1.4.0 and 14.1.2.1.0. The vulnerability can be exploited by an unauthenticated attacker over the network via LDAP to compromise data integrity and confidentiality, with scope change pot...

CVE-2026-60428

CVE-2026-60428 affects Oracle Unified Directory (OUD Core) within Oracle Fusion Middleware, with affected versions 12.2.1.4.0 and 14.1.2.1.0. It is described as unauthenticated, LDAP-accessible, allowing compromise of OUD and potentially unauthorized read, update, insert, or delete of accessible ...

CVE-2026-60425

CVE-2026-60425 affects Oracle Unified Directory (OUD Core) in Oracle Fusion Middleware; affected versions are 12.2.1.4.0 and 14.1.2.1.0. An unauthenticated LDAP-facing flaw can cause a hang or frequent crash (DoS). CVSS 3.1 base score 7.5 (Availability). Exploitation details are not provided beyo...

CVE-2026-60426

Summary: CVE-2026-60426 affects Oracle Unified Directory (OUD Core) in Oracle Fusion Middleware. Affected versions are 12.2.1.4.0 and 14.1.2.1.0 . The vulnerability allows a low-privileged attacker with network access via LDAP to compromise OUD, with potential impact including unauthorized access...

CVE-2026-60424

CVE-2026-60424 affects Oracle Unified Directory (OUD Core) within Oracle Fusion Middleware. Affected versions are 12.2.1.4.0 and 14.1.2.1.0. The vulnerability is exploitable by an unauthenticated attacker over a network via LDAP to compromise OUD, potentially resulting in takeover. The CVSS score...

CVE-2026-60422

CVE-2026-60422 affects Oracle Fusion Middleware’s Oracle Unified Directory (OUD Core). The vulnerable product is Oracle Unified Directory 14.1.2.1.0. The vulnerability allows a low-privilege attacker who can access OUD via LDAP over the network to compromise the directory, with potential unauthor...

CVE-2026-60423

Affected product: Oracle Unified Directory (OUD Core) within Oracle Fusion Middleware. Vulnerable versions: 12.2.1.4.0 and 14.1.2.1.0. Impact: Low-privilege attacker with network access via LDAP can compromise OUD and potentially take over the directory. Severity: CVSS v3.1 base score 8.8 (HIGH) ...

CVE-2026-60421

CVE-2026-60421 affects Oracle Unified Directory (OUD Core) in Oracle Fusion Middleware. Affected: 12.2.1.4.0 and 14.1.2.1.0. The vulnerability allows a low-privileged attacker with network access via LDAP to compromise OUD, potentially leading to unauthorized creation, deletion or modification of...

CVE-2026-60420

Technical details about CVE-2026-60420 are not publicly provided in the supplied documents. Monitor for updates.

CVE-2026-60419

CVE-2026-60419 affects Oracle Unified Directory (OUD Core) within Oracle Fusion Middleware. Affected versions are 12.2.1.4.0 and 14.1.2.1.0. The vulnerability allows a low-privileged, network-accessible attacker via LDAP to compromise OUD, potentially taking over the directory service. CVSS 3.1 b...

CVE-2026-60418

CVE-2026-60418 concerns Oracle Fusion Middleware’s Oracle Unified Directory (OUD Core). Affected are 12.2.1.4.0 and 14.1.2.1.0. The vulnerability can be exploited by a high-privilege attacker with network access via LDAP to compromise OUD, potentially resulting in takeover of Oracle Unified Direc...

CVE-2026-60416

The CVE-2026-60416 affects Oracle Access Manager (Authentication Engine) within Oracle Fusion Middleware. Affected versions are 12.2.1.4.0 and 14.1.2.1.0. The vulnerability allows unauthenticated, network-accessible attackers via HTTP to compromise Oracle Access Manager, with potential takeover a...

CVE-2026-60417

The CVE-2026-60417 entry concerns Oracle Unified Directory (OUD Core) in Oracle Fusion Middleware. Affected are Oracle OUD versions 12.2.1.4.0 and 14.1.2.1.0. The vulnerability is exploitable remotely over LDAP by an unauthenticated attacker, with the impact described as takeover of Oracle Unifie...

CVE-2026-60410

CVE-2026-60410 : In Oracle TimesTen In-Memory Database, the Kubernetes Operator component is affected (version 26.1.1.1.0). The issue enables a low-privilege attacker who can reach the service over HTTPS to cause a partial denial of service to TimesTen In-Memory Database. The CVSS 3.1 base score ...

CVE-2026-60411

CVE-2026-60411 affects Oracle TimesTen In-Memory Database, component ttcserver, with affected version 26.1.1.1.0. The vulnerability allows an unauthenticated attacker with access to the physical communication segment to compromise TimesTen, potentially causing a hang or frequent crashes (complete...

CVE-2026-60408

CVE-2026-60408 affects Oracle TimesTen In-Memory Database (Kubernetes Operator) with version 26.1.1.1.0. The vulnerability allows a low-privileged attacker with network access over HTTPS to read a subset of TimesTen data. The CVSS v3.1 base score is 4.3 ( Confidentiality impact: Low; Privileges R...

CVE-2026-60409

Technical details for CVE-2026-60409 are not publicly available in the provided documents. Monitor Oracle security advisories and NVD for updates and confirmed impact.

CVE-2026-60407

The CVE-2026-60407 affects Oracle TimesTen In-Memory Database (Kubernetes Operator) with an affected build 26.1.1.1.0. The flaw is described as exploitable by a low-privilege user who can log on to the infrastructure where TimesTen runs, potentially leading to compromised TimesTen data and potent...

CVE-2026-60405

CVE-2026-60405 affects Oracle TimesTen In-Memory Database (Kubernetes Operator component) with affected version 26.1.1.1.0. The description states a low-privilege, locally authenticated attacker can compromise TimesTen In-Memory Database, potentially allowing unauthorized read access to a subset ...

CVE-2026-60406

CVE-2026-60406 affects Oracle TimesTen In-Memory Database (Kubernetes Operator component) with vulnerable version 26.1.1.1.0. The vulnerability allows a high-privilege attacker who can log on to the infrastructure running TimesTen In-Memory Database to compromise the database, potentially taking ...

CVE-2026-60404

This CVE affects Oracle TimesTen In-Memory Database (Kubernetes Operator) with the vulnerable component/version: TimesTen In-Memory Database 26.1.1.1.0. The vulnerability enables a low-privileged, network-accessible attacker (HTTPS) to cause a hang or frequently crash the TimesTen In-Memory Datab...

CVE-2026-60402

The CVE-2026-60402 entry concerns Oracle TimesTen In-Memory Database (Kubernetes Operator component) with affected version 26.1.1.1.0. The description states an easily exploitable vulnerability that allows a low-privileged attacker with network access via HTTPS to compromise TimesTen In-Memory Da...

CVE-2026-60403

CVE-2026-60403 affects Oracle TimesTen In-Memory Database (Kubernetes Operator component) with vulnerable version 26.1.1.1.0. An attacker with network access over HTTPS and low privileges can cause the database to hang or crash (DoS). CVSS 3.1 base score 6.5 (A:H; AV:N; AC:L; PR:L). No explicit e...

CVE-2026-60401

CVE-2026-60401 affects Oracle TimesTen In-Memory Database (TimesTen), specifically the Kubernetes Operator component. The vulnerable version is 26.1.1.1.0. The advisory states that a low-privilege user with logon to the infrastructure where TimesTen runs can compromise TimesTen In-Memory Database...

CVE-2026-60399

The CVE-2026-60399 entry describes a vulnerability in Oracle GoldenGate (Receiver Service Executable). Affected versions are 19.1.0.0.0–19.30.0.0, 21.3–21.21, and 23.4–23.26.1. An attacker with network access over HTTP and low privileges can cause a hang or crash (DoS) of GoldenGate. CVSS v3.1 ba...

CVE-2026-60398

Oracle GoldenGate Microservices is affected in 19.1.0.0.0–19.30.0.0, 21.3–21.21, and 23.4–23.26.1. The vulnerability can be exploited by a low-privileged, network-access attacker via HTTP to take over Oracle GoldenGate. CVSS v3.1 base score is 8.8 (C/H, I/H, A/H). No exploitation details are prov...

CVE-2026-60400

CVE-2026-60400 pertains to Oracle GoldenGate (Admin Server Executable). Affected versions include 19.1.0.0.0–19.30.0.0, 21.3–21.21, and 23.4–23.26.1. The vulnerability is exploitable over HTTPS by a low-privileged, network-accessible attacker, potentially leading to takeover of Oracle GoldenGate....

CVE-2026-60397

Oracle GoldenGate Admin Server Executable is affected in 19.1.0.0.0–19.30.0.0, 21.3–21.21, and 23.4–23.26.1. The vulnerability allows an unauthenticated attacker with access to the physical network segment to compromise GoldenGate and potentially cause a partial denial of service. CVSS v3.1 base ...

CVE-2026-60395

CVE-2026-60395 concerns Oracle GoldenGate (Admin Server Executable). Affected versions are 19.1.0.0.0–19.30.0.0, 21.3–21.21, and 23.4–23.26.1. The vulnerability can be exploited by a low-privileged attacker with network access via HTTP to gain unauthorized read access to a subset of GoldenGate da...