CVE-2026-61153

CVE-2026-61153 impacts Oracle Commerce Guided Search / Oracle Commerce Experience Manager (component: Experience Manager) with affected version 11.4.0. The vulnerability allows unauthenticated network access via HTTP to compromise the product, enabling unauthorized creation, deletion or modificat...

CVE-2026-61150

Oracle Commerce Vulnerability CVE-2026-61150 affects the Oracle Commerce Guided Search / Oracle Commerce Experience Manager component (Experience Manager) in version 11.4.0. The issue allows a low-privileged, network-accessible attacker (HTTP) to compromise data, enabling unauthorized creation, d...

CVE-2026-61149

CVE-2026-61149 affects Oracle Commerce Guided Search / Oracle Commerce Experience Manager (component: Experience Manager) in Oracle Commerce version 11.4.0. The description indicates an easily exploitable vulnerability allowing a low-privileged attacker with network access via HTTP to compromise ...

CVE-2026-61151

CVE-2026-61151 affects Oracle Commerce Guided Search / Oracle Commerce Experience Manager (component: Experience Manager) with affected version 11.4.0. A low-privilege, network-access attacker (HTTP) can compromise the product, leading to unauthorized access to data and possibly unauthorized upda...

CVE-2026-61147

The CVE-2026-61147 entry affects Oracle Commerce Guided Search / Oracle Commerce Experience Manager (Content Acquisition System) for product version 11.4.0. The vulnerability allows a local unauthenticated attacker with access to the hosting infrastructure to cause a hang or frequent crash (DoS) ...

CVE-2026-61146

CVE-2026-61146 affects Oracle Commerce Guided Search / Oracle Commerce Experience Manager (component: Content Acquisition System) with affected version 11.4.0. The vulnerability allows a low-privileged attacker with network access over HTTP to compromise the affected product, potentially leading ...

CVE-2026-61148

Summary: CVE-2026-61148 affects Oracle Commerce Guided Search / Oracle Commerce Experience Manager (component: Experience Manager) with affected version 11.4.0. The vulnerability is exploitable by a low-privilege user over HTTP with network access and can lead to takeover of the Guided Search/Exp...

CVE-2026-61144

The CVE-2026-61144 entry describes a vulnerability in Oracle MySQL 9.7.x (MySQL Server, Cluster) affecting the Server: Optimizer component for versions 9.7.0–9.7.1. An attacker with network access via multiple protocols and high privileges can cause a hang or repeated crashes (complete DoS) in My...

CVE-2026-61145

CVE-2026-61145 affects Oracle Commerce Guided Search / Oracle Commerce Experience Manager (component: Content Acquisition System) in version 11.4.0. An unauthenticated attacker with network access via HTTP can compromise these components, potentially taking over the Guided Search/Experience Manag...

CVE-2026-61143

CVE-2026-61143 affects Oracle Communications Convergent Charging Controller, Prov IF, in versions 15.0.0.0.0 and 15.2.0.0.0. The vulnerability is exploitable with network access over HTTP by a high-privilege attacker and requires user interaction; successful exploitation could lead to takeover of...

CVE-2026-61142

CVE-2026-61142 is a vulnerability in Oracle E-Business Suite Oracle Payroll (Internal Operations) affecting 12.2.3–12.2.15. An attacker with network access via HTTP and low privileges can compromise Oracle Payroll, potentially granting unauthorized access to critical data or full access to Oracle...

CVE-2026-61141

The CVE-2026-61141 entry concerns Oracle E-Business Suite Oracle Advanced Benefits (component: Affordable Care Act), affected in versions 12.2.7–12.2.15. It describes a network-accessible, low-privilege vulnerability that can compromise Oracle Advanced Benefits with CVSS 3.1 base score 7.5 (C/H/I...

CVE-2026-61140

The CVE-2026-61140 entry affects Oracle WebCenter Sites (WebCenter Sites component) in Oracle Fusion Middleware, specifically version 14.1.2.0.0. The vulnerability is exploitable without authentication over HTTP and can lead to takeover of Oracle WebCenter Sites, with a CVSS v3.1 score of 9.8 (Ne...

CVE-2026-61137

CVE-2026-61137 affects Oracle Commerce Platform (Dynamo Application Framework) with affected version 11.4.0. An unauthenticated, network-accessible flaw over HTTP can lead to full takeover of the platform (CVSS 3.1: 8.1, C/I/A high). The connected Oracle CPU July 2026 advisory indicates patches e...

CVE-2026-61138

CVE-2026-61138 affects Oracle E-Business Suite CMRO (Internal Operations) with affected versions 12.2.3–12.2.15. A network-accessible, unauthenticated vulnerability allows compromise via HTTP, potentially leading to unauthorized data access and updates (CVSSv3.1 base 7.5). No exploitation details...

CVE-2026-61136

Oracle Commerce Platform (Dynamo Application Framework) is affected in version 11.4.0. The vulnerability allows an unauthenticated attacker over HTTP to perform unauthorized updates, inserts/deletes, read access to data, and cause partial denial of service. CVSS v3.1 base score 7.3 (Confidentiali...

CVE-2026-61135

CVE-2026-61135 affects Oracle Commerce Platform (Dynamo Application Framework) 11.4.0. The vulnerability, exploitable by an unauthenticated attacker over HTTP, could lead to unauthorized creation, deletion, or modification of data and unauthorized access to Oracle Commerce Platform data. CVSS 3.1...

CVE-2026-61133

CVE-2026-61133 relates to Oracle Commerce Platform (Dynamo Application Framework) with affected version 11.4.0. The vulnerability allows an unauthenticated, network‑accessible attacker (via LDAP) to compromise the platform, potentially leading to unauthorized access to sensitive data. CVSS v3.1 b...

CVE-2026-61134

The CVE-2026-61134 entry concerns Oracle Commerce Platform (Dynamo Application Framework) with affected version 11.4.0. The vulnerability is exploitable by a low-privilege attacker with network access over HTTP, enabling unauthorized creation, deletion or modification of data, or unauthorized acc...

CVE-2026-61132

Oracle Commerce Platform (Dynamo Application Framework) vulnerability CVE-2026-61132 affects version 11.4.0. A low privileged attacker can exploit over HTTP with network access, and user interaction is required, to potentially gain unauthorized access to critical data and perform unauthorized upd...