CVE-2026-47012

The CVE-2026-47012 entry concerns Oracle MySQL: Server (Optimizer) in MySQL Server and MySQL Cluster. Affects MySQL Server versions 8.4.0–8.4.10 and 9.7.0–9.7.1; MySQL Cluster 8.0.0–8.0.47, 8.4.0–8.4.10, and 9.7.0–9.7.1. The vulnerability is exploitable by a high-privilege attacker with network a...

CVE-2026-47013

CVE-2026-47013 affects Oracle Java SE (JavaFX) with Java 8u491. Vulnerability allows unauthenticated network access to compromise Java SE, potentially causing a partial denial of service via APIs that load untrusted data, impacting client deployments using sandboxed Java Web Start/applets. Connec...

CVE-2026-47008

CVE-2026-47008 affects Oracle MySQL products (MySQL Server and MySQL Cluster) with InnoDB as the component. Affected versions are MySQL Server 9.7.0–9.7.1 and MySQL Cluster 9.7.0–9.7.1. The description states an easily exploitable vulnerability that allows a high-privilege attacker with network a...

CVE-2026-47009

CVE-2026-47009 affects Oracle Agile PLM (Oracle Supply Chain) with the Folders, Files & Attachments component in version 9.3.6. The vulnerability is exploitable over HTTP with network access and unauthenticated access, requiring human interaction from a user other than the attacker. Successful ex...

CVE-2026-47010

Vulnerability CVE-2026-47010 affects Oracle Java SE and Oracle GraalVM products (ImageIO component). Affected versions: Oracle Java SE 8u491, 8u491-perf, 11.0.31, 17.0.19, 21.0.11, 25.0.3, 26.0.1; Oracle GraalVM for JDK 17.0.19 and 21.0.11; Oracle GraalVM Enterprise Edition 21.3.18. The issue can...

CVE-2026-47005

CVE-2026-47005 affects Oracle Enterprise Manager Base Platform (Self Update Framework) and is listed for affected versions 13.5 and 24.1. The vulnerability allows a high-privileged attacker with network access over HTTPS to compromise the Base Platform, potentially leading to takeover. CVSS v3.1 ...

CVE-2026-47007

CVE-2026-47007 affects Oracle Communications Pricing Design Center (On-premise Deployment). Affects versions 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0 and 15.2.0.0.0. The vulnerability allows a low-privileged user who can log on to the infrastructure running Oracle Communications Pricing Design Center t...

CVE-2026-47006

The CVE-2026-47006 affects Oracle Enterprise Manager Base Platform (Self Update Framework) with affected versions 13.5 and 24.1. An attacker with high privileges can exploit over HTTPS from the network to compromise the Base Platform, potentially taking over the system. The CVSS v3.1 base score i...

CVE-2026-47003

CVE-2026-47003 affects Oracle Enterprise Manager Base Platform, specifically the UI Framework. Affected versions are 13.5 and 24.1. The vulnerability is exploitable over a network via HTTPS by an unauthenticated attacker, potentially leading to unauthorized access to critical data or the entire s...

CVE-2026-47004

CVE-2026-47004 affects Oracle Enterprise Manager Base Platform (Self Update Framework) in versions 13.5 and 24.1. The vulnerability allows a low-privileged attacker with HTTPS network access to compromise the Base Platform, potentially leading to takeover. The provided documents do not specify ex...

CVE-2026-47001

CVE-2026-47001 affects Oracle Enterprise Manager Base Platform (Web Services Framework) with affected versions 13.5 and 24.1. The vulnerability allows low-privilege remote attackers authenticated over HTTPS to perform unauthorized updates/inserts/deletes and read access to data. CVSS 3.1 base sco...

CVE-2026-47002

Vulnerability in Oracle Enterprise Manager Base Platform (UI Framework) affecting versions 13.5 and 24.1. The issue is exploitable over HTTPS with network access and requires user interaction. Affected component is the UI Framework within Oracle Enterprise Manager Base Platform; attack could lead...

CVE-2026-46999

CVE-2026-46999 affects Oracle Enterprise Manager Base Platform (Discovery Framework) on versions 13.5 and 24.1. The vulnerability is exploitable over a network via HTTPS by an unauthenticated attacker, with potential for unauthorized create/delete/modify access to data, unauthorized read access t...

CVE-2026-46998

The CVE-2026-46998 entry concerns Oracle Enterprise Manager Base Platform (Metadata Plugin) with affected versions 13.5 and 24.1. The vulnerability allows an unauthenticated attacker with network access over HTTPS to compromise the Base Platform, requiring user interaction, and can lead to full t...

CVE-2026-47000

Oracle Enterprise Manager Base Platform (Security Framework) is affected in version 24.1. The CVE-2026-47000 entry indicates an easily exploitable vulnerability that allows a low-privileged, network-accessing attacker (HTTPS) to compromise the Base Platform. Successful attacks can lead to unautho...

CVE-2026-46996

Affected product/component: Oracle Enterprise Manager Base Platform, Metadata Plugin. Vulnerable versions: 13.5 and 24.1. Root cause/impact: exposes an attacker with network access over HTTPS to cause unauthorized creation, deletion, or modification of data, and unauthorized read access; CVSS 3.1...

CVE-2026-46995

CVE-2026-46995 affects Oracle Enterprise Manager Base Platform (component: Metadata Plugin) in versions 13.5 and 24.1. The vulnerability allows a low-privilege, network-accessible attacker over HTTPS to compromise the Base Platform, potentially leading to full takeover (CVSS 3.1 base score 8.8). ...

CVE-2026-46997

CVE-2026-46997 affects Oracle Enterprise Manager Base Platform (Metadata Plugin) with vulnerable versions 13.5 and 24.1. The flaw allows a low-privilege, network-authenticated attacker (via HTTPS) to compromise data integrity, potentially enabling unauthorized creation, deletion, or modification ...

CVE-2026-46994

CVE-2026-46994 affects Oracle Enterprise Manager Base Platform (Oracle Enterprise Manager) - Agent Next Gen component. Affected supported versions are 13.5 and 24.1. The vulnerability allows an unauthenticated attacker with network access over HTTPS to compromise the Base Platform, potentially le...

CVE-2026-46992

The CVE-2026-46992 entry concerns Oracle Enterprise Manager Base Platform, specifically the Enterprise Config Management component. Affected versions are 13.5 and 24.1. The vulnerability is exploitable remotely over HTTPS by a low-privileged attacker, with successful exploitation potentially resu...

CVE-2026-46993

CVE-2026-46993 affects Oracle Enterprise Manager Base Platform (component: Agent Next Gen). Affected versions: 13.5 and 24.1. The vulnerability, exploitable by a low-privileged attacker with network access over HTTPS, can compromise the Base Platform, potentially enabling unauthorized creation, d...

CVE-2026-46989

CVE-2026-46989 affects Oracle Enterprise Manager Base Platform (UI Framework). Affected versions: 13.5 and 24.1. Root cause unspecified beyond the UI Framework component. The vulnerability is exploitable by a low-privilege attacker with network access over HTTPS, with potential to gain unauthoriz...

CVE-2026-46991

The CVE-2026-46991 entry concerns Oracle Enterprise Manager Base Platform (Enterprise Config Management) with affected versions 13.5 and 24.1. The vulnerability allows a low-privilege, locally authenticated attacker to compromise the Base Platform, potentially enabling unauthorized updates/insert...

CVE-2026-46990

CVE-2026-46990 affects Oracle Enterprise Manager Base Platform (Enterprise Config Management) in Oracle Enterprise Manager, with affected versions 13.5 and 24.1. The vulnerability allows an unauthenticated, network-accessible attacker over HTTP to modify or read data and cause a partial DOS, per ...

CVE-2026-46988

The vulnerability affects Oracle Enterprise Manager Base Platform (Connector Framework) with affected versions 13.5 and 24.1. The root cause is not explicitly detailed in the provided documents, but the issue enables a high-privilege attacker who can reach the service over HTTPS to compromise the...

CVE-2026-46987

CVE-2026-46987 affects Oracle Enterprise Manager Base Platform (component: Application Service Level Mgmt). Affected supported versions are 13.5 and 24.1. The vulnerability allows a low-privileged attacker who can reach the system over HTTPS to compromise the Base Platform, with potential scope i...

CVE-2026-46986

The CVE-2026-46986 entry affects Oracle Enterprise Manager Base Platform (Agent Next Gen). Affected versions include 13.5 and 24.1. The vulnerability allows an unauthenticated attacker with network access over HTTPS to read a subset of data, per CVSS 3.1 base score 5.3 (Confidentiality impact: Lo...

CVE-2026-46985

CVE-2026-46985 concerns Oracle Enterprise Manager Base Platform, specifically the Agent Next Gen component, with affected versions 13.5 and 24.1. The vulnerability allows an unauthenticated attacker with network access over HTTPS to read a subset of data, per CVSS 3.1 base score 5.3 (Confidential...

CVE-2026-46984

CVE-2026-46984 affects Oracle Enterprise Manager Base Platform (Agent Next Gen) with impacted versions 13.5 and 24.1. The vulnerability allows an unauthenticated attacker with HTTPS network access to compromise the base platform and obtain read access to a subset of data. The descriptions in the ...

CVE-2026-46981

The CVE-2026-46981 entry affects Oracle Utilities Network Management System (Mobile component) with affected versions 2.5.0.1.0–2.5.0.1.17, 2.5.0.2.0–2.5.0.2.11, 2.6.0.1.0–2.6.0.1.12, 2.6.0.2.0–2.6.0.2.8, and 25.12.0.0.0–25.12.0.0.2. It is an unauthenticated, network-accessible vulnerability expl...

CVE-2026-46983

CVE-2026-46983 affects Oracle Retail Integration Bus (RIB Kernel) in Oracle Retail Applications, with affected version 16.0.3. The vulnerability is exploitable by an unauthenticated attacker with network access via HTTP, potentially enabling takeover of the Oracle Retail Integration Bus. CVSS 3.1...

CVE-2026-46982

VULNERABILITY SUMMARY: CVE-2026-46982 affects Oracle Retail Integration Bus (RIB Kernel) in Oracle Retail Applications, version 14.1.3.2. The issue allows unauthenticated, network-accessible attackers over HTTP to compromise the RIB and potentially take over the system. CVSS v3.1 base score is 9....

CVE-2026-46968

This CVE concerns Oracle Java SE JSSE with affected versions listed (Oracle Java SE: 8u491, 8u491-perf, 11.0.31, 17.0.19, 21.0.11, 25.0.3, 26.0.1; Oracle GraalVM for JDK: 17.0.19 and 21.0.11; Oracle GraalVM Enterprise Edition: 21.3.18). The vulnerability is exploitable over a network via TLS and ...

CVE-2026-46975

Technical details about CVE-2026-46975 are not publicly available in the provided documents. Monitor the Oracle July 2026 CPU advisory for patched versions and exact vulnerable components.

CVE-2026-46980

CVE-2026-46980 affects Oracle Utilities Network Management System (NMS) Mobile component. Affected versions include 2.5.0.1.0–2.5.0.1.17, 2.5.0.2.0–2.5.0.2.11, 2.6.0.1.0–2.6.0.1.12, 2.6.0.2.0–2.6.0.2.8, and 25.12.0.0.0–25.12.0.0.2. The vulnerability allows a low-privileged attacker with network a...

CVE-2026-46943

Oracle Retail EFTLink (Core/Plugin) is affected in versions 21.0.0–25.0.0. A unauthenticated attacker able to access over HTTPS can compromise EFTLink, enabling unauthorized creation, deletion, or modification of data, and broader data access. The CVSS v3.1 base score is 7.4 (Confidentiality and ...

CVE-2026-46954

CVE-2026-46954 affects Oracle E-Business Suite Human Resources, Data Removal Tool (versions 12.2.3–12.2.15). The vulnerability allows a high-privilege attacker with network access via HTTP to take over Oracle HR; CVSSv3.1 base score 7.2 (C/H/I/A). The provided documents do not describe the exact ...

CVE-2026-46948

CVE-2026-46948 affects Oracle Utilities Network Management System (Oracle Utilities Applications), specifically the Security component, with affected versions: 2.4.0.1.0-2.4.0.1.32, 2.5.0.1.0-2.5.0.1.17, 2.5.0.2.0-2.5.0.2.11, 2.6.0.2.0-2.6.0.2.7 and 25.12.0.0.0. The vulnerability is exploitable r...

CVE-2026-46936

CVE-2026-46936 affects Oracle MySQL Server (component: Server: DDL) and MySQL Cluster. Affected versions include MySQL Server 8.4.0–8.4.10, 9.7.0–9.7.1 and MySQL Cluster 8.0.0–8.0.47, 8.4.0–8.4.10, 9.7.0–9.7.1. The vulnerability is described as difficult to exploit and requires network access via...

CVE-2026-46941

Oracle E-Business Suite Cost Management's Cost Maintenance component is affected (CVE-2026-46941) in versions 12.2.3–12.2.15. A low-privilege attacker with network access via HTTP can compromise Oracle Cost Management, potentially taking full control (CVSS 7.5). The vulnerability details, impact ...

CVE-2026-46924

CVE-2026-46924 affects Oracle Application Testing Suite (ATS) 13.3.0.1. The vulnerability allows an unauthenticated attacker with network access via TCP to compromise ATS, enabling takeover with high impact on confidentiality, integrity, and availability. The CVSS 3.1 base score is 9.8 (CRITICAL)...

CVE-2026-46923

CVE-2026-46923 affects Oracle E-Business Suite Public Sector Financials (International) — Authorization component. Affected versions are 12.2.3 through 12.2.15. The issue can be triggered by a high-privileged attacker with network access via HTTP, potentially leading to takeover of Oracle Public ...

CVE-2026-46917

The CVE-2026-46917 entry affects Oracle Java SE (components including JSSE) and Oracle GraalVM for JDK/Enterprise Edition. Affected Oracle Java SE versions: 11.0.31, 17.0.19, 21.0.11, 25.0.3, 26.0.1; Oracle GraalVM for JDK: 17.0.19, 21.0.11; Oracle GraalVM Enterprise Edition: 21.3.18. The vulnera...

CVE-2026-46876

CVE-2026-46876 affects Oracle Application Testing Suite, specifically version 13.3.0.1. The vulnerability is described as easily exploitable with unauthenticated network access via Oracle Net, allowing takeover of Oracle Application Testing Suite and carrying a CVSS v3.1 base score of 9.8 (C/H/I/...

CVE-2026-35290

CVE-2026-35290 affects Oracle Application Testing Suite, version 13.3.0.1. The vulnerability allows an unauthenticated attacker with network access via TCP to compromise the suite, with potential takeover and a CVSS v3.1 base score of 9.8 (C­: H, I: H, A: H). Connected sources confirm the same af...

CVE-2026-35287

Affected product: Oracle Application Testing Suite 13.3.0.1. Description shows an unauthenticated, network-accessible vulnerability via TCP that can lead to unauthorized data access. CVSS v3.1 base score 7.5 (ConfidentialityImpact H). No concrete root cause, vulnerable component, or remediation d...

CVE-2026-34316

Oracle Core: CVE-2026-34316 affects Oracle Commerce Service Center (component: Commerce Service Center) in Oracle Commerce 11.4.0. The vulnerability is exploitable over HTTP with network access by an unauthenticated attacker and requires user interaction. Impact includes unauthorized update/inser...

CVE-2026-21954

CVE-2026-21954 affects Oracle Retail Xstore Point of Service (Xstore Mobile), affected in version 21.0.3. A low-privileged, network-access attacker (via HTTP) can cause unauthorized read access to a subset of Xstore POS data. CVSSv3.1 base score 4.3 (Confidentiality). The Oracle July 2026 Critica...

CVE-2026-21953

Oracle Retail Xstore Point of Service (Xstore Mobile) vulnerability CVE-2026-21953 affects version 21.0.3; a low-privilege, locally authenticated attacker can read a subset of Xstore Mobile data. The CVSS v3.1 base score is 3.3 (Confidentiality impact). No exploitation details are provided in the...

CVE-2026-56745

Netty CVE-2026-56745 affects the SPDY-to-HTTP codec SpdyHttpDecoder. In vulnerable versions (4.2.0.Final–4.2.15.Final and 4.1.0.Final–4.1.135.Final), processing a client SYN_STREAM with FLAG_FIN=0 can cause the decoder to pool a ByteBuf and cache a partially built FullHttpRequest in messageMap. W...