CVE-2026-60361

Technical details for CVE-2026-60361 are not publicly provided in the connected documents. Monitor for updates; the initial description lists affected Oracle OUD versions and CVSS, but no exploit specifics, impact details beyond high-level risk, or remediation.

CVE-2026-60363

CVE-2026-60363 affects Oracle HTTP Server (Apache Plugin) in Oracle Fusion Middleware. Affected: 12.2.1.4.0 and 14.1.2.0.0. The flaw allows unauthenticated, network-based HTTP access that can lead to takeover of Oracle HTTP Server (CVSS 3.1 base score 9.8). Connected sources confirm vulnerable co...

CVE-2026-60359

CVE-2026-60359 affects Oracle Unified Directory (OUD Core) in Oracle Fusion Middleware. Affected versions are 12.2.1.4.0 and 14.1.2.1.0. The issue allows an unauthenticated attacker with network access via HTTP to compromise OUD, potentially leading to unauthorized access to all Oracle Unified Di...

CVE-2026-60360

CVE-2026-60360 affects Oracle Unified Directory (OUD Core) in Oracle Fusion Middleware. Affected versions are 12.2.1.4.0 and 14.1.2.1.0. The vulnerability allows unauthenticated, network-accessible attackers via LDAP to compromise OUD, with potential takeover and impact on related products. CVSS ...

CVE-2026-60358

CVE-2026-60358 affects Oracle Fusion Middleware — Oracle Access Manager (Authentication Engine). Affected supported versions: 12.2.1.4.0 and 14.1.2.1.0. The CVSS v3.1 base score is 10.0 (CRITICAL) with network access, no authentication, and no user interaction required. Exploitation would allow t...

CVE-2026-60357

The CVE-2026-60357 entry concerns Oracle Siebel CRM Integration, specifically the Siebel Server Sync for Exchange component. Affected versions are 17.0–26.5. The vulnerability allows an unauthenticated attacker with network access via HTTP to compromise the Siebel CRM Integration, enabling unauth...

CVE-2026-60356

CVE-2026-60356 affects Oracle Access Manager (Authentication Engine) in Oracle Fusion Middleware. Affected versions are 12.2.1.4.0 and 14.1.2.1.0. The vulnerability is exploitable remotely over HTTP by an unauthenticated attacker, with impact described as unauthorized access to data or complete a...

CVE-2026-60355

The CVE-2026-60355 entry concerns Oracle Access Manager within Oracle Fusion Middleware (Authentication Engine). Affected supported versions are 12.2.1.4.0 and 14.1.2.1.0. The vulnerability is exploitable by an unauthenticated, network-accessible attacker over HTTP, with the potential to take ove...

CVE-2026-60354

Oracle JDeveloper (Data Visualization Tools) in Oracle Fusion Middleware is affected. Affects 12.2.1.4.0 and 14.1.2.0.0; vulnerability allows unauthenticated HTTP-access from network to read a subset of Oracle JDeveloper data. CVSS 3.1 base score 3.7 (Confidentiality impact: Low). Exploitation de...

CVE-2026-60353

CVE-2026-60353 affects Oracle Fusion Middleware’s Oracle JDeveloper (ADF Faces) with affected versions 12.2.1.4.0 and 14.1.2.0.0. The vulnerability is exploitable by a low-privilege attacker with network access via HTTP and can lead to unauthorized read access to a subset of data exposed by JDeve...

CVE-2026-60350

CVE-2026-60350 affects Oracle JDeveloper (ADF Faces) within Oracle Fusion Middleware. Affected versions: 12.2.1.4.0 and 14.1.2.0.0. An attacker with low privileges who can log on to the infrastructure where JDeveloper runs can compromise JDeveloper, with potential broader impact on related produc...

CVE-2026-60352

The CVE-2026-60352 entry describes a vulnerability in Oracle JDeveloper (Oracle Fusion Middleware) affecting ADF Faces. Affected versions are 12.2.1.4.0 and 14.1.2.0.0. The issue is exploitable by an unauthenticated attacker over HTTP with network access and a high attack complexity, resulting in...

CVE-2026-60351

The CVE-2026-60351 entry concerns Oracle JDeveloper (Oracle Fusion Middleware, ADF Faces) with affected versions 12.2.1.4.0 and 14.1.2.0.0. The vulnerability enables an unauthenticated, network-accessible attacker (via HTTP) to compromise JDeveloper, potentially causing unauthorized update/insert...

CVE-2026-60349

Affected product: Oracle JDeveloper (Oracle Fusion Middleware), Java Business Objects component. Vulnerable versions: 12.2.1.4.0 and 14.1.2.0.0. Root cause/impact: low-privilege attacker with network access via HTTP can compromise JDeveloper, potentially leading to unauthorized data access or par...

CVE-2026-60348

CVE-2026-60348 affects Oracle JDeveloper within Oracle Fusion Middleware (ADF Faces). Affected platforms: Oracle JDeveloper versions 12.2.1.4.0 and 14.1.2.0.0. The underlying issue is a vulnerability that allows an unauthenticated, network-accessible attacker over HTTP to compromise JDeveloper, l...

CVE-2026-60346

The CVE-2026-60346 entry concerns Oracle JD Edwards EnterpriseOne Tools (Interoperability Security) with affected version 9.2.26.3. An unauthenticated attacker who can access JDENET could compromise EnterpriseOne Tools, leading to a partial denial of service (per the CVSS 3.1 vector and base scor...

CVE-2026-60347

The CVE-2026-60347 entry concerns Oracle JD Edwards EnterpriseOne Tools (Enterprise Infrastructure Security) affecting version 9.2.26.3. The vulnerability allows a low-privilege, logon-based attacker to modify accessible JD Edwards EnterpriseOne Tools data and potentially cause a partial denial o...

CVE-2026-60344

The CVE-2026-60344 entry concerns Oracle E-Business Suite’s Oracle HRMS (France) with the French HR Payroll component. Affected releases are 12.2.3 through 12.2.15. The issue is exploitable by a low-privilege attacker over HTTP on the network, potentially enabling unauthorized update, insert, or ...

CVE-2026-60345

CVE-2026-60345 affects Oracle Fusion Middleware’s JDeveloper component (ADF Shared Components). Affected are 12.2.1.4.0 and 14.1.2.0.0. The vulnerability allows a high-privilege attacker with network access via HTTP to compromise Oracle JDeveloper, potentially leading to takeover. CVSS 3.1 base s...

CVE-2026-60343

CVE-2026-60343 affects Oracle WebLogic Server (Core) in Oracle Fusion Middleware. Affected are 12.2.1.4.0 and 14.1.1.0.0. The vulnerability is described as easily exploitable, with a low-privileged attacker able to exploit over HTTP to compromise WebLogic Server, potentially leading to full serve...

CVE-2026-60339

The CVE-2026-60339 entry concerns Oracle E-Business Suite, specifically the Oracle Project Manufacturing (PJM Command Center) component. Affected product: Oracle E-Business Suite PJM Command Center in version V16. Root cause details are not explicitly stated beyond the vulnerability permitting a ...

CVE-2026-60342

The CVE-2026-60342 issue affects Oracle Access Manager (Authentication Engine) in Oracle Fusion Middleware, with affected versions 12.2.1.4.0 and 14.1.2.1.0. An unauthenticated remote attacker with network access via HTTP can read a subset of Oracle Access Manager data. Publicly provided connecte...

CVE-2026-60340

The CVE-2026-60340 entry applies to Oracle E-Business Suite, specifically the Oracle Project Costing component (Enterprise Command Center). Affected versions are 12.2.3–12.2.15. The vulnerability, described across NVD/Oracle sources, permits a high-privilege attacker with network access over HTTP...

CVE-2026-60336

The CVE concerns Oracle E-Business Suite’s Oracle Project Manufacturing (PJM Command Center) on V16. It enables a highly privileged local attacker to compromise PJM, potentially creating/deleting/modifying critical data and gaining access to all PJM data. The CVSS v3.1 base score is 5.7 (Confiden...

CVE-2026-60337

Technical details about CVE-2026-60337 are not publicly provided in the supplied documents. Monitor Oracle CPU July 2026 advisory and NVD entries for updates on affected versions, impact, and remediation.

CVE-2026-60338

The CVE-2026-60338 entry concerns Oracle E-Business Suite’s Oracle Project Manufacturing with the PJM Command Center component (affected: V16). The vulnerability description indicates a low-privilege attacker who can log on to the infrastructure where Oracle Project Manufacturing runs could poten...

CVE-2026-60335

CVE-2026-60335 affects Oracle WebCenter Content (Content Server) in Oracle Fusion Middleware. Affected versions are 12.2.1.4.0 and 14.1.2.0.0. The vulnerability is exploitable by a high-privilege attacker with network access via HTTP and can lead to takeover of Oracle WebCenter Content (CVSS 3.1 ...

CVE-2026-60334

CVE-2026-60334 affects Oracle WebCenter Content (Content Server) in Oracle Fusion Middleware. Affected versions are 12.2.1.4.0 and 14.1.2.0.0. The vulnerability is exploitable over HTTP with network access by a low-privilege attacker and can lead to takeover of Oracle WebCenter Content. CVSS v3.1...

CVE-2026-60333

CVE-2026-60333 affects Oracle Fusion Middleware’s Oracle Access Manager (Authentication Engine). Affected versions are 12.2.1.4.0 and 14.1.2.1.0. The vulnerability permits a low-privilege attacker with network access over HTTP to compromise Oracle Access Manager, with potential impact on related ...

CVE-2026-60332

CVE-2026-60332 affects Oracle/MySQL products (MySQL Server and MySQL Cluster) in the Group Replication GCS component. Affected versions: MySQL Server 8.4.0–8.4.10 and 9.7.0–9.7.1; MySQL Cluster 8.0.0–8.0.47, 8.4.0–8.4.10, and 9.7.0–9.7.1. The vulnerability is described as allowing a high-privileg...

CVE-2026-60331

CVE-2026-60331 affects Oracle MySQL products: MySQL Server components (Server: Replication) and MySQL Cluster. Affected versions: MySQL Server 8.4.0–8.4.10, 9.7.0–9.7.1; MySQL Cluster 8.0.0–8.0.47, 8.4.0–8.4.10, 9.7.0–9.7.1. The vulnerability is described as difficult to exploit and requires high...

CVE-2026-60330

The CVE-2026-60330 affects Oracle Identity Manager (OIM Legacy UI) in Oracle Fusion Middleware, with affected versions 12.2.1.4.0 and 14.1.2.1.0. The issue allows a low-privileged, unauthenticated-looking attacker with network access via HTTP to compromise OIM, potentially taking over the product...

CVE-2026-60328

Summary : CVE-2026-60328 affects Oracle Access Manager, part of Oracle Fusion Middleware, specifically the Authentication Engine. Affected supported versions are 12.2.1.4.0 and 14.1.2.1.0. The vulnerability is described as easily exploitable with network access over HTTP by an unauthenticated att...

CVE-2026-60327

CVE-2026-60327 affects Oracle Access Manager (Authentication Engine) within Oracle Fusion Middleware. Affects 12.2.1.4.0 and 14.1.2.1.0; the issue allows unauthenticated, network-accessible HTTP compromise of Oracle Access Manager, potentially granting unauthorized access to data. The vulnerabili...

CVE-2026-60329

CVE-2026-60329 affects Oracle Identity Manager (OIM Legacy UI) in Oracle Fusion Middleware. Affected products/version: 12.2.1.4.0 and 14.1.2.1.0. The vulnerability permits an unauthenticated, network-accessible attacker via T3/IIOP to compromise OIM and can lead to takeover. The CVSS v3.1 base sc...

CVE-2026-60326

CVE-2026-60326 affects Oracle Access Manager (Authentication Engine) in Oracle Fusion Middleware. Affected versions: 12.2.1.4.0 and 14.1.2.1.0. The vulnerability enables unauthenticated, network-based access via HTTP to compromise OAM, potentially allowing unauthorized creation, deletion, or modi...

CVE-2026-60325

CVE-2026-60325 is a vulnerability in the Oracle Access Manager (Authentication Engine) component of Oracle Fusion Middleware. Affected versions are 12.2.1.4.0 and 14.1.2.1.0. The vulnerability enables a low-privilege attacker with access to the hardware communication segment to compromise Oracle ...

CVE-2026-60324

The CVE-2026-60324 entry describes a vulnerability in Oracle MySQL Server and MySQL Cluster (component: Server: Optimizer) affecting MySQL Server 9.7.0–9.7.1 and MySQL Cluster 9.7.0–9.7.1. The issue enables a low-privileged, network-accessible attacker (via multiple protocols) to cause a hang or ...

CVE-2026-60323

CVE-2026-60323 affects Oracle Identity Manager (OIM Legacy UI) in Oracle Fusion Middleware, with affected versions 12.2.1.4.0 and 14.1.2.1.0. The vulnerability is exploitable over HTTP by a low-privileged, network-accessible attacker, enabling unauthorized creation, deletion or modification of da...

CVE-2026-60322

The CVE-2026-60322 issue affects Oracle Applications Manager within Oracle E-Business Suite, specifically the Oracle Diagnostics Interfaces component. Affected versions are 12.2.3 through 12.2.15. The vulnerability allows an unauthenticated attacker who can reach Oracle AS via HTTP to compromise ...

CVE-2026-60320

Summary: CVE-2026-60320 affects Oracle Data Integrator (Oracle Fusion Middleware) Patchset Assistant in versions 12.2.1.4.0 and 14.1.2.0.0. An unauthenticated, network-accessible attacker can exploit via HTTP to gain unauthorized access to data. The base score is 7.5 (CVSSv3.1, HIGH). The connect...

CVE-2026-60321

CVE-2026-60321 affects Oracle E-Business Suite Oracle Project Manufacturing (PJM Command Center) in version V16. The vulnerability allows a high-privilege user with local logon to compromise PJM, potentially leading to unauthorized creation/modification/deletion of data or access to all PJM data....

CVE-2026-60318

CVE-2026-60318 affects Oracle Data Integrator (Fusion Middleware) Patchset Assistant. Affected versions are 12.2.1.4.0 and 14.1.2.0.0. The vulnerability is exploitable with local access in the infrastructure where ODI runs, potentially leading to unauthorized read access of a subset of ODI data. ...

CVE-2026-60319

CVE-2026-60319 affects Oracle Data Integrator (Patchset Assistant) in Oracle Fusion Middleware. Affected versions: 12.2.1.4.0 and 14.1.2.0.0. The issue allows a low-privileged, logon-based attacker to compromise ODI, with potential to reveal or access Oracle Data Integrator data beyond the compro...

CVE-2026-60315

CVE-2026-60315 affects Oracle MySQL Server (components: Server: X Plugin) and MySQL Cluster across multiple versions (MySQL Server 8.4.0–8.4.10, 9.7.0–9.7.1; MySQL Cluster 8.0.0–8.0.47, 8.4.0–8.4.10, 9.7.0–9.7.1). The vulnerability allows an unauthenticated attacker with network access to cause a...

CVE-2026-60317

CVE-2026-60317 affects Oracle MySQL Connector/Net within the MySQL Connectors product. Affected versions are 9.7.0–9.7.1. The vulnerability can be exploited by an unauthenticated attacker over network protocols to compromise data, including unauthorized creation, deletion, or modification of data...

CVE-2026-60316

CVE-2026-60316 affects Oracle MySQL products: MySQL Server (component: Server: X Plugin) and MySQL Cluster. Affected versions include MySQL Server 8.4.0–8.4.10 and 9.7.0–9.7.1; MySQL Cluster 8.0.0–8.0.47, 8.4.0–8.4.10, and 9.7.0–9.7.1. The vulnerability is easily exploitable with network access v...

CVE-2026-60314

CVE-2026-60314 affects Oracle MySQL Router (Router: General). Affects MySQL Router versions 8.4.0–8.4.10 and 9.7.0–9.7.1. The vulnerability allows an unauthenticated attacker with network access via HTTP to compromise MySQL Router, potentially causing the service to hang or crash (complete denial...

CVE-2026-60312

CVE-2026-60312 affects Oracle WebLogic Server (Fusion Middleware Core). Affected versions: 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, 15.1.1.0.0. The vulnerability allows an unauthenticated attacker with network access via T3 or IIOP to compromise the server and potentially takeover the Oracle WebLogic ...

CVE-2026-60313

CVE-2026-60313 affects Oracle WebLogic Server (Core) in Oracle Fusion Middleware. Affected versions are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. The flaw allows a low-privilege attacker with network access via RMI to compromise the server, potentially leading to takeover of Oracle WebL...