CVE-2026-47054

CVE-2026-47054 affects Oracle VM VirtualBox on Windows hosts (Core component), with affected version 7.2.12. The vulnerability allows a low-privileged attacker with logon to the infrastructure where VirtualBox runs to take over VirtualBox. CVSS 3.1 base score 7.8 (HIGH) with local attack vector, ...

CVE-2026-47050

CVE-2026-47050 describes a vulnerability in Oracle VM VirtualBox (Core) affecting version 7.2.8. The issue is exploitable locally with high privileges and requires user interaction; it can compromise Oracle VM VirtualBox and potentially impact other products (scope change), with possible unauthor...

CVE-2026-47051

CVE-2026-47051 affects Oracle PeopleSoft Enterprise PeopleTools (versions 8.61 and 8.62). The vulnerability resides in the Security component of PeopleTools and can be exploited by a low-privileged, network-authenticated attacker over HTTP, with user interaction required. Impact includes unauthor...

CVE-2026-47049

The CVE-2026-47049 entry describes a vulnerability in Oracle PeopleSoft’s PeopleTools, specifically the PIA Core Technology component, affecting Supported versions 8.61 and 8.62. An attacker with network access via HTTP and high privileges can compromise PeopleSoft Enterprise PeopleTools, potenti...

CVE-2026-47048

CVE-2026-47048 affects Oracle PeopleSoft Enterprise PeopleTools (component: Security) with affected versions 8.61 and 8.62. The issue is exploitable with network access via HTTP by a low-privilege attacker and requires user interaction. Successful attacks can lead to unauthorized read/update/inse...

CVE-2026-47047

CVE-2026-47047 affects Oracle VM VirtualBox Core in version 7.2.12. Local, low-privilege attacker with logon can compromise and take over VirtualBox (CVSS 3.1 base 7.8). Exploitation status and specific remediation are not provided in the included documents; refer to the Oracle July 2026 CPU advi...

CVE-2026-47046

CVE-2026-47046 affects Oracle Database Server, specifically the RDBMS component, with affected versions 23.4.0–23.26.2. An unauthenticated attacker can exploit this via Oracle Net to compromise the RDBMS, potentially causing a hang or crash (DoS) and unauthorized updates/inserts/deletes on access...

CVE-2026-47044

CVE-2026-47044 affects Oracle VM VirtualBox core on version 7.2.12. It describes a local, low-privilege attacker that can cause a hang or DoS of VirtualBox. CVSS v3.1 base score 5.5 (Availability: High; User Interaction: None). Connected sources confirm the same vulnerability details and point to...

CVE-2026-47045

CVE-2026-47045 affects the JDBC component in Oracle Database Server. Affected supported versions are 19.3–19.31, 21.3–21.22, and 23.4.0–23.26.2. The vulnerability allows a high-privileged attacker with network access via Oracle Net to compromise JDBC, requiring user interaction from a non-attacke...

CVE-2026-47043

CVE-2026-47043 affects Oracle VM VirtualBox (product: Oracle Virtualization) component Core, with affected version 7.2.12. The vulnerability is described as easily exploitable by a high-privilege attacker with local logon to the infrastructure where VirtualBox runs, potentially compromising Oracl...

CVE-2026-47040

CVE-2026-47040 describes a vulnerability in the Oracle Net Services component of Oracle Database Server. Affected are 19.3–19.31, 21.3–21.22, and 23.4.0–23.26.2. An unauthenticated attacker with network access via Oracle Net can compromise Oracle Net Services, potentially leading to unauthorized ...

CVE-2026-47041

CVE-2026-47041 affects Oracle VM VirtualBox Core in the Oracle VM Virtualization product, with the only affected release listed as 7.2.12. The vulnerability enables a high-privilege attacker who has login access to the infrastructure where VirtualBox runs to compromise the application, potentiall...

CVE-2026-47037

CVE-2026-47037 affects Oracle Access Manager, a component of Oracle Fusion Middleware. The vulnerability is in the Authentication Engine for the affected product version 14.1.2.1.0 and is exploitable remotely over HTTP with low privileges, with potential for takeover of Oracle Access Manager as d...

CVE-2026-47038

CVE-2026-47038 affects Oracle Database Server’s RDBMS component. Supported vulnerable versions: 19.3–19.31, 21.3–21.22, and 23.4.0–23.26.2. An attacker with high privileges and network access via Oracle Net can exploit this to perform unauthorized updates/inserts/deletes on some RDBMS data. CVSS ...

CVE-2026-47039

CVE-2026-47039 affects the Java VM component of Oracle Database Server. Affects Oracle Database Server Java VM in versions 19.3–19.31, 21.3–21.22, and 23.4.0–23.26.2. The vulnerability allows a low-privilege attacker with Create Session and network access via Oracle Net to compromise the Java VM,...

CVE-2026-47035

The CVE-2026-47035 entry concerns Oracle Java SE (JavaFX) with an affected version of 8u491. The vulnerability affects JavaFX in Oracle Java SE and can be exploited by an unauthenticated attacker with network access, requiring user interaction. The impact is described as possible unauthorized upd...

CVE-2026-43947

FUXA vulnerability CVE-2026-43947 affects version 1.3.0 where, when secureEnabled is true, an unauthenticated user can trigger Remote Code Execution via POST /api/runscript with test: true if they know a valid script ID/name and at least one server-side script exists. The attack bypasses authoriz...

CVE-2026-47036

The CVE-2026-47036 entry affects Oracle Siebel CRM Development (Siebel Approval Manager) in versions 17.0–26.3. The vulnerability allows an unauthenticated attacker with network access over HTTP to compromise Siebel CRM Development, potentially leading to takeover. CVSS 3.1 base score is 9.8 (Cri...

CVE-2026-47034

CVE-2026-47034 affects Oracle Java SE 8u491 (JavaFX component). The vulnerability allows an unauthenticated attacker with network access via multiple protocols to compromise Java SE, with user interaction required. Impact includes possible unauthorized update/insert/delete of data accessible by J...

CVE-2026-47032

CVE-2026-47032 affects Oracle Siebel CRM End User (component: Redwood UI). Affected versions: 24.4–26.3. The issue is exploitable with network access via HTTP by a high-privilege attacker and requires user interaction; may impact additional products (scope change) and can cause a partial denial o...

CVE-2026-47031

CVE-2026-47031 affects Oracle E-Business Suite — Oracle Bills of Material (Bill Issues). Affected versions are 12.2.3 through 12.2.15. The vulnerability allows a low-privilege attacker with network access over HTTP to compromise Oracle Bills of Material, potentially leading to takeover and impact...

CVE-2026-47033

The CVE-2026-47033 entry affects Oracle E-Business Suite’s Oracle Contracts Integration (Internal Operations) for the 12.2.3–12.2.15 range. The vulnerability is exploitable by a low-privilege attacker with network access over HTTP, and while it is in Oracle Contracts Integration, it may impact ad...

CVE-2026-47030

CVE-2026-47030 affects Oracle Java SE (JavaFX) with an impacted version of 8u491. The vulnerability is described as affecting client deployments that load untrusted code in sandboxed Java Web Start/applets, allowing a network-based, unauthenticated attacker to cause unauthorized updates or deleti...

CVE-2026-47027

CVE-2026-47027 affects Oracle Java SE (Libraries) across multiple supported versions: Oracle Java SE 8u491, 8u491-perf, 11.0.31, 17.0.19, 21.0.11, 25.0.3, 26.0.1; Oracle GraalVM for JDK: 17.0.19, 21.0.11; Oracle GraalVM Enterprise Edition: 21.3.18. The vulnerability allows an unauthenticated atta...

CVE-2026-47028

The CVE-2026-47028 entry concerns Oracle E-Business Suite’s Document Management and Collaboration (Attachments) with affected versions 12.2.3–12.2.15. The underlying issue allows a low-privilege, network-accessible attacker (HTTP) to compromise DMC, enabling unauthorized creation, deletion, or mo...

CVE-2026-47026

CVE-2026-47026 affects Oracle PeopleSoft Enterprise PeopleTools (OpenSearch Dashboards component) with affected versions 8.61 and 8.62. The vulnerability is exploitable over HTTP by a network-accessible, unauthenticated attacker and requires human interaction from a user other than the attacker. ...

CVE-2026-47024

CVE-2026-47024 affects Oracle PeopleSoft: PeopleTools, Panel Processor, with vulnerable version 8.62. An attacker with network access via HTTP and low privileges can trigger the bug, requiring user interaction. The vulnerability can lead to unauthorized update/insert/delete and read access to a s...

CVE-2026-47023

The CVE-2026-47023 entry affects Oracle MySQL products: MySQL Server (versions 8.4.0–8.4.10, 9.7.0–9.7.1) and MySQL Cluster (8.0.0–8.0.47, 8.4.0–8.4.10, 9.7.0–9.7.1). It is described as an easily exploitable vulnerability allowing a high-privilege attacker, over network via multiple protocols, to...

CVE-2026-47019

CVE-2026-47019 affects Oracle E-Business Suite — Oracle Product Hub (Item Catalog) in versions 12.2.3 through 12.2.15. The vulnerability allows a low-privilege, unauthenticated or lightly authenticated attacker with network access over HTTP to potentially create, delete, or modify data within Ora...

CVE-2026-47021

CVE-2026-47021 affects Oracle Java SE and Oracle GraalVM families (Java SE components: 2D; affected versions include Oracle Java SE 8u491, 8u491-perf, 11.0.31, 17.0.19, 21.0.11, 25.0.3, 26.0.1; GraalVM for JDK: 17.0.19, 21.0.11; GraalVM Enterprise 21.3.18). The vulnerability can be exploited over...

CVE-2026-47022

The CVE-2026-47022 affects Oracle GoldenGate’s GoldenGate Stream Analytics (component: Security) in version 26.1.0.0.0. The flaw is described as easily exploitable by a low-privileged, locally authenticated attacker with logon to the infrastructure where GoldenGate Stream Analytics executes, pote...

CVE-2026-47017

The CVE-2026-47017 affects Oracle PeopleSoft Enterprise PeopleTools, specifically the Process Scheduler component, with affected versions 8.61 and 8.62. The vulnerability is exploitable over a network via HTTP by a low-privilege attacker and requires user interaction. Successful attacks can lead ...

CVE-2026-47018

CVE-2026-47018 affects Oracle Siebel CRM Cloud Applications (Siebel Cloud Manager) with the 22.3–26.5 range. An unauthenticated attacker with network access over HTTPS can compromise the service, potentially causing a hang or a repeatable crash (complete DoS). The CVSS 3.1 base score is 7.5 (Avai...

CVE-2026-47015

The CVE-2026-47015 entry concerns Oracle PeopleSoft Enterprise PeopleTools (PIA Core Technology) with affected version 8.62. The vulnerability is exploitable over HTTP by an unauthenticated attacker and requires user interaction to succeed. If exploited, it can lead to unauthorized update/insert/...

CVE-2026-47014

CVE-2026-47014 affects Oracle E-Business Suite, Oracle Product Workbench (Security) with affected versions 12.2.3–12.2.15. An attacker with network access via HTTP and low privileges can potentially read/write data, leading to unauthorized creation, deletion, or modification of data across Oracle...

CVE-2026-47016

The CVE-2026-47016 issue affects Oracle Siebel CRM Integration (component: Event Publish and Subscribe) in Siebel CRM, with affected versions 17.0–26.4. The vulnerability can be exploited with physical access to compromise Siebel CRM Integration, potentially leading to unauthorized read access to...

CVE-2026-47011

CVE-2026-47011 affects Oracle Siebel CRM Deployment (component: Application Interface) with affected versions 17.0–26.4. The vulnerability is exploitable by a low-privilege, network-reachable attacker over HTTP, with user interaction required; it can lead to unauthorized read access to a subset o...

CVE-2026-47012

The CVE-2026-47012 entry concerns Oracle MySQL: Server (Optimizer) in MySQL Server and MySQL Cluster. Affects MySQL Server versions 8.4.0–8.4.10 and 9.7.0–9.7.1; MySQL Cluster 8.0.0–8.0.47, 8.4.0–8.4.10, and 9.7.0–9.7.1. The vulnerability is exploitable by a high-privilege attacker with network a...

CVE-2026-47013

CVE-2026-47013 affects Oracle Java SE (JavaFX) with Java 8u491. Vulnerability allows unauthenticated network access to compromise Java SE, potentially causing a partial denial of service via APIs that load untrusted data, impacting client deployments using sandboxed Java Web Start/applets. Connec...

CVE-2026-47008

CVE-2026-47008 affects Oracle MySQL products (MySQL Server and MySQL Cluster) with InnoDB as the component. Affected versions are MySQL Server 9.7.0–9.7.1 and MySQL Cluster 9.7.0–9.7.1. The description states an easily exploitable vulnerability that allows a high-privilege attacker with network a...

CVE-2026-47009

CVE-2026-47009 affects Oracle Agile PLM (Oracle Supply Chain) with the Folders, Files & Attachments component in version 9.3.6. The vulnerability is exploitable over HTTP with network access and unauthenticated access, requiring human interaction from a user other than the attacker. Successful ex...

CVE-2026-47010

Vulnerability CVE-2026-47010 affects Oracle Java SE and Oracle GraalVM products (ImageIO component). Affected versions: Oracle Java SE 8u491, 8u491-perf, 11.0.31, 17.0.19, 21.0.11, 25.0.3, 26.0.1; Oracle GraalVM for JDK 17.0.19 and 21.0.11; Oracle GraalVM Enterprise Edition 21.3.18. The issue can...

CVE-2026-47005

CVE-2026-47005 affects Oracle Enterprise Manager Base Platform (Self Update Framework) and is listed for affected versions 13.5 and 24.1. The vulnerability allows a high-privileged attacker with network access over HTTPS to compromise the Base Platform, potentially leading to takeover. CVSS v3.1 ...

CVE-2026-47007

CVE-2026-47007 affects Oracle Communications Pricing Design Center (On-premise Deployment). Affects versions 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0 and 15.2.0.0.0. The vulnerability allows a low-privileged user who can log on to the infrastructure running Oracle Communications Pricing Design Center t...

CVE-2026-47006

The CVE-2026-47006 affects Oracle Enterprise Manager Base Platform (Self Update Framework) with affected versions 13.5 and 24.1. An attacker with high privileges can exploit over HTTPS from the network to compromise the Base Platform, potentially taking over the system. The CVSS v3.1 base score i...

CVE-2026-47003

CVE-2026-47003 affects Oracle Enterprise Manager Base Platform, specifically the UI Framework. Affected versions are 13.5 and 24.1. The vulnerability is exploitable over a network via HTTPS by an unauthenticated attacker, potentially leading to unauthorized access to critical data or the entire s...

CVE-2026-47004

CVE-2026-47004 affects Oracle Enterprise Manager Base Platform (Self Update Framework) in versions 13.5 and 24.1. The vulnerability allows a low-privileged attacker with HTTPS network access to compromise the Base Platform, potentially leading to takeover. The provided documents do not specify ex...

CVE-2026-47001

CVE-2026-47001 affects Oracle Enterprise Manager Base Platform (Web Services Framework) with affected versions 13.5 and 24.1. The vulnerability allows low-privilege remote attackers authenticated over HTTPS to perform unauthorized updates/inserts/deletes and read access to data. CVSS 3.1 base sco...

CVE-2026-47002

Vulnerability in Oracle Enterprise Manager Base Platform (UI Framework) affecting versions 13.5 and 24.1. The issue is exploitable over HTTPS with network access and requires user interaction. Affected component is the UI Framework within Oracle Enterprise Manager Base Platform; attack could lead...

CVE-2026-46999

CVE-2026-46999 affects Oracle Enterprise Manager Base Platform (Discovery Framework) on versions 13.5 and 24.1. The vulnerability is exploitable over a network via HTTPS by an unauthenticated attacker, with potential for unauthorized create/delete/modify access to data, unauthorized read access t...