CVE-2026-61205

CVE-2026-61205 affects Oracle PeopleSoft 9.2 SCM Purchasing (component: Purchasing). The vulnerability allows an unauthenticated attacker over HTTP to compromise PeopleSoft SCM Purchasing, enabling unauthorized creation, deletion or modification of data, and unauthorized read access to a subset o...

CVE-2026-61201

CVE-2026-61201 affects Oracle PeopleSoft: PeopleSoft Enterprise CRM Common Objects (component: Common Objects) in version 9.2.23. An unauthenticated attacker with network access via HTTP can compromise the Common Objects, with potential impact across related products (scope change) and possible t...

CVE-2026-61203

CVE-2026-61203 concerns Oracle PeopleSoft Enterprise FIN Expenses (component: Expenses). The affected product/version is PeopleSoft FIN Expenses 9.2. The vulnerability is exploitable over HTTP by an unauthenticated network attacker, enabling unauthorized creation/modification/deletion of data and...

CVE-2026-61202

CVE-2026-61202 affects Oracle Solaris (Utility) with targeted impact on versions 11.3 and 11.4. The vulnerability is exploitable by a low-privilege user who can log on to the infrastructure where Oracle Solaris runs, resulting in compromised Solaris and potential scope expansion to other products...

CVE-2026-61195

CVE-2026-61195 affects Oracle Agile Engineering Data Management (Oracle Supply Chain), Core component, version 6.2.1. The vulnerability enables a low-privilege, unauthenticated attacker with network access over TCP to cause a hang or frequent crashes (DoS) in the affected product. The CVSS 3.1 ba...

CVE-2026-61197

CVE-2026-61197 affects the Oracle Identity Manager (OIM) Legacy UI in Oracle Fusion Middleware. Affected versions: 12.2.1.4.0 and 14.1.2.1.0. The flaw allows an unauthenticated, network-based attacker (via HTTP) to compromise OIM, leading to unauthorized creation, deletion, or modification of dat...

CVE-2026-61200

CVE-2026-61200 affects Oracle E-Business Suite, Oracle Labor Distribution (Internal Operations). Affects 12.2.3–12.2.15; an attacker with network access over HTTP and low privileges can compromise data, including unauthorized update/insert/delete and read access to subset of Oracle Labor Distribu...

CVE-2026-61196

Summary : CVE-2026-61196 affects Oracle Identity Manager (OIM) within Oracle Fusion Middleware, specifically the OIM Legacy UI. Affected versions are 12.2.1.4.0 and 14.1.2.1.0. The flaw allows unauthenticated, network-accessible attackers via HTTP to compromise OIM, with the potential takeover of...

CVE-2026-61194

Oracle Agile Engineering Data Management (Supply Chain, Core) is affected in version 6.2.1. The flaw allows a low-privileged, network-accessible attacker (TCP) to trigger a hang or frequent crash (DoS). CVSS 3.1 base score 6.5 (AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H). Exploitation details are not pr...

CVE-2026-61192

The CVE-2026-61192 entry concerns Oracle Agile Engineering Data Management (Oracle Supply Chain), specifically the Install component in version 6.2.1. The issue is exploitable by a low-privilege attacker with network access over HTTP, potentially causing a hang or frequent crash (complete DOS). T...

CVE-2026-61191

The CVE-2026-61191 entry pertains to Oracle Agile Engineering Data Management (Oracle Supply Chain), specifically the Document Management component in version 6.2.1. The vulnerability is characterized as easily exploitable with local access (low privileges, user login required) and can lead to un...

CVE-2026-61189

CVE-2026-61189 concerns Oracle Agile Engineering Data Management (Oracle Supply Chain), specifically the Install component in version 6.2.1. The vulnerability allows a low-privilege user with login access to the infrastructure where Oracle Agile Engineering Data Management runs to compromise the ...

CVE-2026-61190

CVE-2026-61190 affects Oracle Agile Engineering Data Management (Oracle Supply Chain), specifically the Install component, version 6.2.1. The vulnerability allows a low-privilege attacker who has network access via HTTP to compromise the system. Successful exploitation requires user interaction a...

CVE-2026-61188

CVE-2026-61188 affects Oracle Agile Product Lifecycle Management for Process (Oracle Supply Chain), specifically the Installation component in version 6.2.4. The vulnerability is described as exploitable with network access over HTTP by a low-privileged attacker, potentially leading to takeover o...

CVE-2026-61187

The CVE-2026-61187 entry concerns Oracle Agile Engineering Data Management (Oracle Supply Chain) with the Install component affected in version 6.2.1. The vulnerability is described as exploitable locally via the Install component, requiring a user who is logged into the infrastructure and perfor...

CVE-2026-61185

CVE-2026-61185 affects Oracle Agile PLM for Process (component: Installation) with affected version 6.2.4. The vulnerability allows unauthenticated access from the physical network segment attached to the hardware running Oracle Agile PLM for Process, potentially impacting additional products (sc...

CVE-2026-61186

Technical details (affected product/version, root cause, impact, remediation) are not publicly provided in the supplied documents. Monitor for updates.

CVE-2026-61184

The CVE-2026-61184entry concerns Oracle Agile Product Lifecycle Management for Process (Oracle SCM), specifically the Product Quality Management component in version 6.2.4. It states an unauthenticated, network-accessible vulnerability over HTTP that can lead to unauthorized creation, deletion, o...

CVE-2026-61183

CVE-2026-61183 affects Oracle Agile Product Lifecycle Management for Process (component: Reporting) in version 6.2.4. The NVD/NIST entry states an unauthenticated attacker with network access over HTTP can compromise the system, potentially leading to takeover with CVSS 3.1 base score 9.8. No exp...

CVE-2026-61182

CVE-2026-61182 affects Oracle Agile Product Lifecycle Management for Process, Data Import component, version 6.2.4. The description states an easily exploitable, local-privilege scenario where a high-privilege attacker with logon to the hosting infrastructure can compromise the product. CVSS v3.1...