CVE-2026-60143

The CVE-2026-60143 entry concerns Oracle E-Business Suite Oracle Workflow’s Workflow Notification Mailer. Affected are E-Business Suite versions 12.2.3 through 12.2.15. The vulnerability allows an unauthenticated, network-accessible attacker over HTTP to compromise Oracle Workflow, enabling unaut...

CVE-2026-47063

CVE-2026-47063 affects Oracle Java SE and Oracle GraalVM products (Libraries component). Affected: Oracle Java SE 8u491, 8u491-perf, 11.0.31, 17.0.19, 21.0.11, 25.0.3, 26.0.1; GraalVM for JDK 17.0.19, 21.0.11; GraalVM Enterprise Edition 21.3.18. The vulnerability is exploitable remotely over mult...

CVE-2026-47064

CVE-2026-47064 affects Oracle MySQL Server and MySQL Cluster. Affected are MySQL Server 8.4.0–8.4.10 and 9.7.0–9.7.1; MySQL Cluster 8.0.0–8.0.47, 8.4.0–8.4.10, 9.7.0–9.7.1. The issue is in the Server: Optimizer component and allows a low-privilege attacker with network access via multiple protoco...

CVE-2026-47061

CVE-2026-47061 affects the JDBC component of Oracle Database Server. Affects 19.3–19.31, 21.3–21.22, and 23.4.0–23.26.2. The vulnerability, exploitable from an adjacent network, allows an unauthenticated attacker to compromise JDBC; exploitation is difficult and requires human interaction. Succes...

CVE-2026-47062

CVE-2026-47062 affects Oracle VM VirtualBox Core in Oracle VM Virtualization, with affected version 7.2.12. The vulnerability allows a low-privilege, logon-local attacker to cause a hang or frequent crashes (complete DOS) of VirtualBox. There is no exploitation detail beyond local access in the p...

CVE-2026-47060

The CVE-2026-47060 vulnerability affects the JDBC component of Oracle Database Server. Affected versions include 19.3–19.31, 21.3–21.22, and 23.4.0–23.26.2. It is exploitable over the network via Oracle Net and requires user interaction; successful attacks could lead to unauthorized creation, del...

CVE-2026-47058

CVE-2026-47058 affects Oracle Java SE (Scripting) on 8u491, 8u491-perf, and 11.0.31. The vulnerability enables an unauthenticated attacker over network protocols to compromise data confidentiality and integrity, potentially leading to unauthorized creation, deletion, or modification of data. The ...

CVE-2026-47059

CVE-2026-47059 affects Oracle Java SE and Oracle GraalVM offerings (Java SE component 2D). Affected versions include Oracle Java SE: 8u491, 8u491-perf, 11.0.31, 17.0.19, 21.0.11, 25.0.3, 26.0.1; Oracle GraalVM for JDK: 17.0.19 and 21.0.11; Oracle GraalVM Enterprise Edition: 21.3.18. The vulnerabi...

CVE-2026-47057

The CVE-2026-47057 entry concerns Oracle Java SE (Scripting) with affected versions listed as 8u491, 8u491-perf, and 11.0.31. The vulnerability is exploitable over the network via multiple protocols and can allow an unauthenticated attacker to cause a hang or crash (complete DOS). The flaw can be...

CVE-2026-47055

CVE-2026-47055 affects Oracle VM VirtualBox Core in version 7.2.12. The vulnerability allows a high-privilege attacker with local logon to compromise VirtualBox, potentially enabling unauthorized update/insert/delete of some VirtualBox data. CVSS 3.1 base score is 3.2 (LOW) with a local attack ve...

CVE-2026-47056

CVE-2026-47056 affects Oracle Data Integrator (Oracle Fusion Middleware), specifically the Rest Service component. Affected software versions are 12.2.1.4.0 and 14.1.2.0.0. The vulnerability allows an unauthenticated attacker with network access via HTTP to compromise Oracle Data Integrator, with...

CVE-2026-47053

CVE-2026-47053 affects Oracle VM VirtualBox Core in version 7.2.12. The vulnerability is exploitable locally with low privileges and user interaction required, potentially enabling unauthorized read/write/delete of data and partial denial of service within VirtualBox. CVSSv3.1 base score 5.6 (I=H...

CVE-2026-47054

CVE-2026-47054 affects Oracle VM VirtualBox on Windows hosts (Core component), with affected version 7.2.12. The vulnerability allows a low-privileged attacker with logon to the infrastructure where VirtualBox runs to take over VirtualBox. CVSS 3.1 base score 7.8 (HIGH) with local attack vector, ...

CVE-2026-47052

CVE-2026-47052 is a vulnerability in Oracle MySQL Server and MySQL Cluster (InnoDB) affecting MySQL Server 8.4.0–8.4.10, 9.7.0–9.7.1 and MySQL Cluster 8.0.0–8.0.47, 8.4.0–8.4.10, 9.7.0–9.7.1. The issue enables a high-privilege attacker with network access via multiple protocols to cause a hang or...

CVE-2026-47050

CVE-2026-47050 describes a vulnerability in Oracle VM VirtualBox (Core) affecting version 7.2.8. The issue is exploitable locally with high privileges and requires user interaction; it can compromise Oracle VM VirtualBox and potentially impact other products (scope change), with possible unauthor...

CVE-2026-47051

CVE-2026-47051 affects Oracle PeopleSoft Enterprise PeopleTools (versions 8.61 and 8.62). The vulnerability resides in the Security component of PeopleTools and can be exploited by a low-privileged, network-authenticated attacker over HTTP, with user interaction required. Impact includes unauthor...

CVE-2026-47049

The CVE-2026-47049 entry describes a vulnerability in Oracle PeopleSoft’s PeopleTools, specifically the PIA Core Technology component, affecting Supported versions 8.61 and 8.62. An attacker with network access via HTTP and high privileges can compromise PeopleSoft Enterprise PeopleTools, potenti...

CVE-2026-47048

CVE-2026-47048 affects Oracle PeopleSoft Enterprise PeopleTools (component: Security) with affected versions 8.61 and 8.62. The issue is exploitable with network access via HTTP by a low-privilege attacker and requires user interaction. Successful attacks can lead to unauthorized read/update/inse...

CVE-2026-47047

CVE-2026-47047 affects Oracle VM VirtualBox Core in version 7.2.12. Local, low-privilege attacker with logon can compromise and take over VirtualBox (CVSS 3.1 base 7.8). Exploitation status and specific remediation are not provided in the included documents; refer to the Oracle July 2026 CPU advi...

CVE-2026-47046

CVE-2026-47046 affects Oracle Database Server, specifically the RDBMS component, with affected versions 23.4.0–23.26.2. An unauthenticated attacker can exploit this via Oracle Net to compromise the RDBMS, potentially causing a hang or crash (DoS) and unauthorized updates/inserts/deletes on access...

CVE-2026-47044

CVE-2026-47044 affects Oracle VM VirtualBox core on version 7.2.12. It describes a local, low-privilege attacker that can cause a hang or DoS of VirtualBox. CVSS v3.1 base score 5.5 (Availability: High; User Interaction: None). Connected sources confirm the same vulnerability details and point to...

CVE-2026-47045

CVE-2026-47045 affects the JDBC component in Oracle Database Server. Affected supported versions are 19.3–19.31, 21.3–21.22, and 23.4.0–23.26.2. The vulnerability allows a high-privileged attacker with network access via Oracle Net to compromise JDBC, requiring user interaction from a non-attacke...

CVE-2026-47043

CVE-2026-47043 affects Oracle VM VirtualBox (product: Oracle Virtualization) component Core, with affected version 7.2.12. The vulnerability is described as easily exploitable by a high-privilege attacker with local logon to the infrastructure where VirtualBox runs, potentially compromising Oracl...

CVE-2026-47041

CVE-2026-47041 affects Oracle VM VirtualBox Core in the Oracle VM Virtualization product, with the only affected release listed as 7.2.12. The vulnerability enables a high-privilege attacker who has login access to the infrastructure where VirtualBox runs to compromise the application, potentiall...

CVE-2026-47040

CVE-2026-47040 describes a vulnerability in the Oracle Net Services component of Oracle Database Server. Affected are 19.3–19.31, 21.3–21.22, and 23.4.0–23.26.2. An unauthenticated attacker with network access via Oracle Net can compromise Oracle Net Services, potentially leading to unauthorized ...

CVE-2026-47037

CVE-2026-47037 affects Oracle Access Manager, a component of Oracle Fusion Middleware. The vulnerability is in the Authentication Engine for the affected product version 14.1.2.1.0 and is exploitable remotely over HTTP with low privileges, with potential for takeover of Oracle Access Manager as d...

CVE-2026-47038

CVE-2026-47038 affects Oracle Database Server’s RDBMS component. Supported vulnerable versions: 19.3–19.31, 21.3–21.22, and 23.4.0–23.26.2. An attacker with high privileges and network access via Oracle Net can exploit this to perform unauthorized updates/inserts/deletes on some RDBMS data. CVSS ...

CVE-2026-47039

CVE-2026-47039 affects the Java VM component of Oracle Database Server. Affects Oracle Database Server Java VM in versions 19.3–19.31, 21.3–21.22, and 23.4.0–23.26.2. The vulnerability allows a low-privilege attacker with Create Session and network access via Oracle Net to compromise the Java VM,...

CVE-2026-47035

The CVE-2026-47035 entry concerns Oracle Java SE (JavaFX) with an affected version of 8u491. The vulnerability affects JavaFX in Oracle Java SE and can be exploited by an unauthenticated attacker with network access, requiring user interaction. The impact is described as possible unauthorized upd...

CVE-2026-43947

FUXA vulnerability CVE-2026-43947 affects version 1.3.0 where, when secureEnabled is true, an unauthenticated user can trigger Remote Code Execution via POST /api/runscript with test: true if they know a valid script ID/name and at least one server-side script exists. The attack bypasses authoriz...

CVE-2026-47036

The CVE-2026-47036 entry affects Oracle Siebel CRM Development (Siebel Approval Manager) in versions 17.0–26.3. The vulnerability allows an unauthenticated attacker with network access over HTTP to compromise Siebel CRM Development, potentially leading to takeover. CVSS 3.1 base score is 9.8 (Cri...

CVE-2026-47034

CVE-2026-47034 affects Oracle Java SE 8u491 (JavaFX component). The vulnerability allows an unauthenticated attacker with network access via multiple protocols to compromise Java SE, with user interaction required. Impact includes possible unauthorized update/insert/delete of data accessible by J...

CVE-2026-47032

CVE-2026-47032 affects Oracle Siebel CRM End User (component: Redwood UI). Affected versions: 24.4–26.3. The issue is exploitable with network access via HTTP by a high-privilege attacker and requires user interaction; may impact additional products (scope change) and can cause a partial denial o...

CVE-2026-47031

CVE-2026-47031 affects Oracle E-Business Suite — Oracle Bills of Material (Bill Issues). Affected versions are 12.2.3 through 12.2.15. The vulnerability allows a low-privilege attacker with network access over HTTP to compromise Oracle Bills of Material, potentially leading to takeover and impact...

CVE-2026-47033

The CVE-2026-47033 entry affects Oracle E-Business Suite’s Oracle Contracts Integration (Internal Operations) for the 12.2.3–12.2.15 range. The vulnerability is exploitable by a low-privilege attacker with network access over HTTP, and while it is in Oracle Contracts Integration, it may impact ad...

CVE-2026-47030

CVE-2026-47030 affects Oracle Java SE (JavaFX) with an impacted version of 8u491. The vulnerability is described as affecting client deployments that load untrusted code in sandboxed Java Web Start/applets, allowing a network-based, unauthenticated attacker to cause unauthorized updates or deleti...

CVE-2026-47027

CVE-2026-47027 affects Oracle Java SE (Libraries) across multiple supported versions: Oracle Java SE 8u491, 8u491-perf, 11.0.31, 17.0.19, 21.0.11, 25.0.3, 26.0.1; Oracle GraalVM for JDK: 17.0.19, 21.0.11; Oracle GraalVM Enterprise Edition: 21.3.18. The vulnerability allows an unauthenticated atta...

CVE-2026-47028

The CVE-2026-47028 entry concerns Oracle E-Business Suite’s Document Management and Collaboration (Attachments) with affected versions 12.2.3–12.2.15. The underlying issue allows a low-privilege, network-accessible attacker (HTTP) to compromise DMC, enabling unauthorized creation, deletion, or mo...

CVE-2026-47026

CVE-2026-47026 affects Oracle PeopleSoft Enterprise PeopleTools (OpenSearch Dashboards component) with affected versions 8.61 and 8.62. The vulnerability is exploitable over HTTP by a network-accessible, unauthenticated attacker and requires human interaction from a user other than the attacker. ...

CVE-2026-47024

CVE-2026-47024 affects Oracle PeopleSoft: PeopleTools, Panel Processor, with vulnerable version 8.62. An attacker with network access via HTTP and low privileges can trigger the bug, requiring user interaction. The vulnerability can lead to unauthorized update/insert/delete and read access to a s...

CVE-2026-47023

The CVE-2026-47023 entry affects Oracle MySQL products: MySQL Server (versions 8.4.0–8.4.10, 9.7.0–9.7.1) and MySQL Cluster (8.0.0–8.0.47, 8.4.0–8.4.10, 9.7.0–9.7.1). It is described as an easily exploitable vulnerability allowing a high-privilege attacker, over network via multiple protocols, to...

CVE-2026-47019

CVE-2026-47019 affects Oracle E-Business Suite — Oracle Product Hub (Item Catalog) in versions 12.2.3 through 12.2.15. The vulnerability allows a low-privilege, unauthenticated or lightly authenticated attacker with network access over HTTP to potentially create, delete, or modify data within Ora...

CVE-2026-47021

CVE-2026-47021 affects Oracle Java SE and Oracle GraalVM families (Java SE components: 2D; affected versions include Oracle Java SE 8u491, 8u491-perf, 11.0.31, 17.0.19, 21.0.11, 25.0.3, 26.0.1; GraalVM for JDK: 17.0.19, 21.0.11; GraalVM Enterprise 21.3.18). The vulnerability can be exploited over...

CVE-2026-47022

The CVE-2026-47022 affects Oracle GoldenGate’s GoldenGate Stream Analytics (component: Security) in version 26.1.0.0.0. The flaw is described as easily exploitable by a low-privileged, locally authenticated attacker with logon to the infrastructure where GoldenGate Stream Analytics executes, pote...

CVE-2026-47017

The CVE-2026-47017 affects Oracle PeopleSoft Enterprise PeopleTools, specifically the Process Scheduler component, with affected versions 8.61 and 8.62. The vulnerability is exploitable over a network via HTTP by a low-privilege attacker and requires user interaction. Successful attacks can lead ...

CVE-2026-47018

CVE-2026-47018 affects Oracle Siebel CRM Cloud Applications (Siebel Cloud Manager) with the 22.3–26.5 range. An unauthenticated attacker with network access over HTTPS can compromise the service, potentially causing a hang or a repeatable crash (complete DoS). The CVSS 3.1 base score is 7.5 (Avai...

CVE-2026-47015

The CVE-2026-47015 entry concerns Oracle PeopleSoft Enterprise PeopleTools (PIA Core Technology) with affected version 8.62. The vulnerability is exploitable over HTTP by an unauthenticated attacker and requires user interaction to succeed. If exploited, it can lead to unauthorized update/insert/...

CVE-2026-47014

CVE-2026-47014 affects Oracle E-Business Suite, Oracle Product Workbench (Security) with affected versions 12.2.3–12.2.15. An attacker with network access via HTTP and low privileges can potentially read/write data, leading to unauthorized creation, deletion, or modification of data across Oracle...

CVE-2026-47016

The CVE-2026-47016 issue affects Oracle Siebel CRM Integration (component: Event Publish and Subscribe) in Siebel CRM, with affected versions 17.0–26.4. The vulnerability can be exploited with physical access to compromise Siebel CRM Integration, potentially leading to unauthorized read access to...

CVE-2026-47011

CVE-2026-47011 affects Oracle Siebel CRM Deployment (component: Application Interface) with affected versions 17.0–26.4. The vulnerability is exploitable by a low-privilege, network-reachable attacker over HTTP, with user interaction required; it can lead to unauthorized read access to a subset o...