CVE-2026-60349

Affected product: Oracle JDeveloper (Oracle Fusion Middleware), Java Business Objects component. Vulnerable versions: 12.2.1.4.0 and 14.1.2.0.0. Root cause/impact: low-privilege attacker with network access via HTTP can compromise JDeveloper, potentially leading to unauthorized data access or par...

CVE-2026-60348

CVE-2026-60348 affects Oracle JDeveloper within Oracle Fusion Middleware (ADF Faces). Affected platforms: Oracle JDeveloper versions 12.2.1.4.0 and 14.1.2.0.0. The underlying issue is a vulnerability that allows an unauthenticated, network-accessible attacker over HTTP to compromise JDeveloper, l...

CVE-2026-60346

The CVE-2026-60346 entry concerns Oracle JD Edwards EnterpriseOne Tools (Interoperability Security) with affected version 9.2.26.3. An unauthenticated attacker who can access JDENET could compromise EnterpriseOne Tools, leading to a partial denial of service (per the CVSS 3.1 vector and base scor...

CVE-2026-60347

The CVE-2026-60347 entry concerns Oracle JD Edwards EnterpriseOne Tools (Enterprise Infrastructure Security) affecting version 9.2.26.3. The vulnerability allows a low-privilege, logon-based attacker to modify accessible JD Edwards EnterpriseOne Tools data and potentially cause a partial denial o...

CVE-2026-60344

The CVE-2026-60344 entry concerns Oracle E-Business Suite’s Oracle HRMS (France) with the French HR Payroll component. Affected releases are 12.2.3 through 12.2.15. The issue is exploitable by a low-privilege attacker over HTTP on the network, potentially enabling unauthorized update, insert, or ...

CVE-2026-60345

CVE-2026-60345 affects Oracle Fusion Middleware’s JDeveloper component (ADF Shared Components). Affected are 12.2.1.4.0 and 14.1.2.0.0. The vulnerability allows a high-privilege attacker with network access via HTTP to compromise Oracle JDeveloper, potentially leading to takeover. CVSS 3.1 base s...

CVE-2026-60343

CVE-2026-60343 affects Oracle WebLogic Server (Core) in Oracle Fusion Middleware. Affected are 12.2.1.4.0 and 14.1.1.0.0. The vulnerability is described as easily exploitable, with a low-privileged attacker able to exploit over HTTP to compromise WebLogic Server, potentially leading to full serve...

CVE-2026-60339

The CVE-2026-60339 entry concerns Oracle E-Business Suite, specifically the Oracle Project Manufacturing (PJM Command Center) component. Affected product: Oracle E-Business Suite PJM Command Center in version V16. Root cause details are not explicitly stated beyond the vulnerability permitting a ...

CVE-2026-60342

The CVE-2026-60342 issue affects Oracle Access Manager (Authentication Engine) in Oracle Fusion Middleware, with affected versions 12.2.1.4.0 and 14.1.2.1.0. An unauthenticated remote attacker with network access via HTTP can read a subset of Oracle Access Manager data. Publicly provided connecte...

CVE-2026-60340

The CVE-2026-60340 entry applies to Oracle E-Business Suite, specifically the Oracle Project Costing component (Enterprise Command Center). Affected versions are 12.2.3–12.2.15. The vulnerability, described across NVD/Oracle sources, permits a high-privilege attacker with network access over HTTP...

CVE-2026-60336

The CVE concerns Oracle E-Business Suite’s Oracle Project Manufacturing (PJM Command Center) on V16. It enables a highly privileged local attacker to compromise PJM, potentially creating/deleting/modifying critical data and gaining access to all PJM data. The CVSS v3.1 base score is 5.7 (Confiden...

CVE-2026-60337

Technical details about CVE-2026-60337 are not publicly provided in the supplied documents. Monitor Oracle CPU July 2026 advisory and NVD entries for updates on affected versions, impact, and remediation.

CVE-2026-60338

The CVE-2026-60338 entry concerns Oracle E-Business Suite’s Oracle Project Manufacturing with the PJM Command Center component (affected: V16). The vulnerability description indicates a low-privilege attacker who can log on to the infrastructure where Oracle Project Manufacturing runs could poten...

CVE-2026-60335

CVE-2026-60335 affects Oracle WebCenter Content (Content Server) in Oracle Fusion Middleware. Affected versions are 12.2.1.4.0 and 14.1.2.0.0. The vulnerability is exploitable by a high-privilege attacker with network access via HTTP and can lead to takeover of Oracle WebCenter Content (CVSS 3.1 ...

CVE-2026-60334

CVE-2026-60334 affects Oracle WebCenter Content (Content Server) in Oracle Fusion Middleware. Affected versions are 12.2.1.4.0 and 14.1.2.0.0. The vulnerability is exploitable over HTTP with network access by a low-privilege attacker and can lead to takeover of Oracle WebCenter Content. CVSS v3.1...

CVE-2026-60333

CVE-2026-60333 affects Oracle Fusion Middleware’s Oracle Access Manager (Authentication Engine). Affected versions are 12.2.1.4.0 and 14.1.2.1.0. The vulnerability permits a low-privilege attacker with network access over HTTP to compromise Oracle Access Manager, with potential impact on related ...

CVE-2026-60332

CVE-2026-60332 affects Oracle/MySQL products (MySQL Server and MySQL Cluster) in the Group Replication GCS component. Affected versions: MySQL Server 8.4.0–8.4.10 and 9.7.0–9.7.1; MySQL Cluster 8.0.0–8.0.47, 8.4.0–8.4.10, and 9.7.0–9.7.1. The vulnerability is described as allowing a high-privileg...

CVE-2026-60331

CVE-2026-60331 affects Oracle MySQL products: MySQL Server components (Server: Replication) and MySQL Cluster. Affected versions: MySQL Server 8.4.0–8.4.10, 9.7.0–9.7.1; MySQL Cluster 8.0.0–8.0.47, 8.4.0–8.4.10, 9.7.0–9.7.1. The vulnerability is described as difficult to exploit and requires high...

CVE-2026-60330

The CVE-2026-60330 affects Oracle Identity Manager (OIM Legacy UI) in Oracle Fusion Middleware, with affected versions 12.2.1.4.0 and 14.1.2.1.0. The issue allows a low-privileged, unauthenticated-looking attacker with network access via HTTP to compromise OIM, potentially taking over the product...

CVE-2026-60328

Summary : CVE-2026-60328 affects Oracle Access Manager, part of Oracle Fusion Middleware, specifically the Authentication Engine. Affected supported versions are 12.2.1.4.0 and 14.1.2.1.0. The vulnerability is described as easily exploitable with network access over HTTP by an unauthenticated att...

CVE-2026-60327

CVE-2026-60327 affects Oracle Access Manager (Authentication Engine) within Oracle Fusion Middleware. Affects 12.2.1.4.0 and 14.1.2.1.0; the issue allows unauthenticated, network-accessible HTTP compromise of Oracle Access Manager, potentially granting unauthorized access to data. The vulnerabili...

CVE-2026-60329

CVE-2026-60329 affects Oracle Identity Manager (OIM Legacy UI) in Oracle Fusion Middleware. Affected products/version: 12.2.1.4.0 and 14.1.2.1.0. The vulnerability permits an unauthenticated, network-accessible attacker via T3/IIOP to compromise OIM and can lead to takeover. The CVSS v3.1 base sc...

CVE-2026-60326

CVE-2026-60326 affects Oracle Access Manager (Authentication Engine) in Oracle Fusion Middleware. Affected versions: 12.2.1.4.0 and 14.1.2.1.0. The vulnerability enables unauthenticated, network-based access via HTTP to compromise OAM, potentially allowing unauthorized creation, deletion, or modi...

CVE-2026-60325

CVE-2026-60325 is a vulnerability in the Oracle Access Manager (Authentication Engine) component of Oracle Fusion Middleware. Affected versions are 12.2.1.4.0 and 14.1.2.1.0. The vulnerability enables a low-privilege attacker with access to the hardware communication segment to compromise Oracle ...

CVE-2026-60324

The CVE-2026-60324 entry describes a vulnerability in Oracle MySQL Server and MySQL Cluster (component: Server: Optimizer) affecting MySQL Server 9.7.0–9.7.1 and MySQL Cluster 9.7.0–9.7.1. The issue enables a low-privileged, network-accessible attacker (via multiple protocols) to cause a hang or ...

CVE-2026-60323

CVE-2026-60323 affects Oracle Identity Manager (OIM Legacy UI) in Oracle Fusion Middleware, with affected versions 12.2.1.4.0 and 14.1.2.1.0. The vulnerability is exploitable over HTTP by a low-privileged, network-accessible attacker, enabling unauthorized creation, deletion or modification of da...

CVE-2026-60322

The CVE-2026-60322 issue affects Oracle Applications Manager within Oracle E-Business Suite, specifically the Oracle Diagnostics Interfaces component. Affected versions are 12.2.3 through 12.2.15. The vulnerability allows an unauthenticated attacker who can reach Oracle AS via HTTP to compromise ...

CVE-2026-60320

Summary: CVE-2026-60320 affects Oracle Data Integrator (Oracle Fusion Middleware) Patchset Assistant in versions 12.2.1.4.0 and 14.1.2.0.0. An unauthenticated, network-accessible attacker can exploit via HTTP to gain unauthorized access to data. The base score is 7.5 (CVSSv3.1, HIGH). The connect...

CVE-2026-60321

CVE-2026-60321 affects Oracle E-Business Suite Oracle Project Manufacturing (PJM Command Center) in version V16. The vulnerability allows a high-privilege user with local logon to compromise PJM, potentially leading to unauthorized creation/modification/deletion of data or access to all PJM data....

CVE-2026-60318

CVE-2026-60318 affects Oracle Data Integrator (Fusion Middleware) Patchset Assistant. Affected versions are 12.2.1.4.0 and 14.1.2.0.0. The vulnerability is exploitable with local access in the infrastructure where ODI runs, potentially leading to unauthorized read access of a subset of ODI data. ...

CVE-2026-60319

CVE-2026-60319 affects Oracle Data Integrator (Patchset Assistant) in Oracle Fusion Middleware. Affected versions: 12.2.1.4.0 and 14.1.2.0.0. The issue allows a low-privileged, logon-based attacker to compromise ODI, with potential to reveal or access Oracle Data Integrator data beyond the compro...

CVE-2026-60315

CVE-2026-60315 affects Oracle MySQL Server (components: Server: X Plugin) and MySQL Cluster across multiple versions (MySQL Server 8.4.0–8.4.10, 9.7.0–9.7.1; MySQL Cluster 8.0.0–8.0.47, 8.4.0–8.4.10, 9.7.0–9.7.1). The vulnerability allows an unauthenticated attacker with network access to cause a...

CVE-2026-60317

CVE-2026-60317 affects Oracle MySQL Connector/Net within the MySQL Connectors product. Affected versions are 9.7.0–9.7.1. The vulnerability can be exploited by an unauthenticated attacker over network protocols to compromise data, including unauthorized creation, deletion, or modification of data...

CVE-2026-60316

CVE-2026-60316 affects Oracle MySQL products: MySQL Server (component: Server: X Plugin) and MySQL Cluster. Affected versions include MySQL Server 8.4.0–8.4.10 and 9.7.0–9.7.1; MySQL Cluster 8.0.0–8.0.47, 8.4.0–8.4.10, and 9.7.0–9.7.1. The vulnerability is easily exploitable with network access v...

CVE-2026-60314

CVE-2026-60314 affects Oracle MySQL Router (Router: General). Affects MySQL Router versions 8.4.0–8.4.10 and 9.7.0–9.7.1. The vulnerability allows an unauthenticated attacker with network access via HTTP to compromise MySQL Router, potentially causing the service to hang or crash (complete denial...

CVE-2026-60312

CVE-2026-60312 affects Oracle WebLogic Server (Fusion Middleware Core). Affected versions: 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, 15.1.1.0.0. The vulnerability allows an unauthenticated attacker with network access via T3 or IIOP to compromise the server and potentially takeover the Oracle WebLogic ...

CVE-2026-60313

CVE-2026-60313 affects Oracle WebLogic Server (Core) in Oracle Fusion Middleware. Affected versions are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. The flaw allows a low-privilege attacker with network access via RMI to compromise the server, potentially leading to takeover of Oracle WebL...

CVE-2026-60311

CVE-2026-60311 affects Oracle MySQL products: MySQL Server (versions 9.0.0–9.7.1) and MySQL Cluster (9.0.0–9.7.1) with a vulnerability in the Server: Optimizer component. The issue can be exploited by a low-privileged, network-accessible attacker through multiple protocols, leading to a hang or r...

CVE-2026-60309

CVE-2026-60309 affects Oracle Coherence (Core) within Oracle Fusion Middleware. Affected supported versions are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. The vulnerability allows an unauthenticated attacker with access to the physical network segment attached to the host running Oracle ...

CVE-2026-60310

Technical details are not publicly available in the provided documents. Monitor for updates.

CVE-2026-60308

CVE-2026-60308 affects Oracle Coherence (Oracle Fusion Middleware), specifically the Core component, in versions 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. The flaw allows an unauthenticated attacker with network access via HTTP to take over Oracle Coherence. Base CVSS 3.1 score is 9.8 (Impact: Conf...

CVE-2026-60306

CVE-2026-60306 affects Oracle Coherence (Core) in Oracle Fusion Middleware across versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. The vulnerability allows an unauthenticated attacker who can reach Oracle Coherence over TCP to compromise the service, potentially taking over Oracle Coh...

CVE-2026-60307

CVE-2026-60307 affects Oracle Coherence (Core) in Oracle Fusion Middleware. Affected versions are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. An attacker with network access via HTTP and low privileges can read a subset of data due to the underlying issue described in the CVSS vector (AV:...

CVE-2026-60305

CVE-2026-60305 affects Oracle Coherence (Core) within Oracle Fusion Middleware. Affected versions are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. The vulnerability is exploitable over TCP with network access by a low-privilege attacker, leading to unauthorized create/delete/modify access ...

CVE-2026-60303

The CVE-2026-60303 entry concerns Oracle Coherence (Core, Oracle Fusion Middleware). Affected versions are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. The vulnerability can be exploited by a low-privileged attacker with network access via HTTP to cause a partial denial of service in Oracl...

CVE-2026-60304

CVE-2026-60304 affects Oracle Coherence (Core) within Oracle Fusion Middleware. Affects supported versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. The flaw allows a low-privileged, network-accessible attacker (TCP) to cause a hang or repeatable crash (complete denial of service) in Or...

CVE-2026-60302

The CVE concerns Oracle Coherence within Oracle Fusion Middleware (Core). Affected supported versions are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. The issue is exploitable over TCP by an unauthenticated remote attacker, with potential takeover of Oracle Coherence and impact to confiden...

CVE-2026-60301

CVE-2026-60301 affects Oracle Coherence (core component) in Oracle Fusion Middleware. Affects 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. The vulnerability can be exploited remotely over TCP by an unauthenticated attacker to cause a hang or a frequent crash (complete DoS) of Oracle Coheren...

CVE-2026-60300

CVE-2026-60300 affects the Oracle Coherence Core in Oracle Fusion Middleware. Vulnerable versions: 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. The vulnerability is exploitable over a network (TCP) with no authentication and can lead to takeover of Oracle Coherence. CVSS v3.1 base score 9....

CVE-2026-60298

CVE-2026-60298 affects Oracle Coherence (Fusion Middleware Core) with affected versions 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. An unauthenticated attacker with network access via TCP can compromise Oracle Coherence, potentially taking over the service. CVSS v3.1 base score 9.8 (CRITICAL) with hi...