CVE-2026-61137

CVE-2026-61137 affects Oracle Commerce Platform (Dynamo Application Framework) with affected version 11.4.0. An unauthenticated, network-accessible flaw over HTTP can lead to full takeover of the platform (CVSS 3.1: 8.1, C/I/A high). The connected Oracle CPU July 2026 advisory indicates patches e...

CVE-2026-61136

Oracle Commerce Platform (Dynamo Application Framework) is affected in version 11.4.0. The vulnerability allows an unauthenticated attacker over HTTP to perform unauthorized updates, inserts/deletes, read access to data, and cause partial denial of service. CVSS v3.1 base score 7.3 (Confidentiali...

CVE-2026-61135

CVE-2026-61135 affects Oracle Commerce Platform (Dynamo Application Framework) 11.4.0. The vulnerability, exploitable by an unauthenticated attacker over HTTP, could lead to unauthorized creation, deletion, or modification of data and unauthorized access to Oracle Commerce Platform data. CVSS 3.1...

CVE-2026-61134

The CVE-2026-61134 entry concerns Oracle Commerce Platform (Dynamo Application Framework) with affected version 11.4.0. The vulnerability is exploitable by a low-privilege attacker with network access over HTTP, enabling unauthorized creation, deletion or modification of data, or unauthorized acc...

CVE-2026-61133

CVE-2026-61133 relates to Oracle Commerce Platform (Dynamo Application Framework) with affected version 11.4.0. The vulnerability allows an unauthenticated, network‑accessible attacker (via LDAP) to compromise the platform, potentially leading to unauthorized access to sensitive data. CVSS v3.1 b...

CVE-2026-61131

The CVE-2026-61131 entry maps to Oracle Commerce Platform (Dynamo Application Framework) with affected version 11.4.0. The vulnerability is exploitable over HTTP without authentication, enabling an attacker with network access to compromise and potentially takeover the Oracle Commerce Platform. T...

CVE-2026-61130

CVE-2026-61130 affects Oracle Commerce Platform (Dynamo Application Framework) with affected version 11.4.0. The vulnerability allows unauthenticated network-accessible exploitation via HTTP, leading to unauthorized data access and potential complete denial of service by crashes. CVSS 3.1 base sc...

CVE-2026-61132

Oracle Commerce Platform (Dynamo Application Framework) vulnerability CVE-2026-61132 affects version 11.4.0. A low privileged attacker can exploit over HTTP with network access, and user interaction is required, to potentially gain unauthorized access to critical data and perform unauthorized upd...

CVE-2026-61128

CVE-2026-61128 affects Oracle MySQL products: MySQL Server (Optimizer) and MySQL Cluster, with affected versions MySQL Server 9.7.0–9.7.1 and MySQL Cluster 9.7.0–9.7.1. The vulnerability is described as exploitable by a high-privilege attacker who has network access via multiple protocols, potent...

CVE-2026-61127

CVE-2026-61127 affects Oracle Communications Service Catalog and Design (component: Solution Designer). Affected versions are 8.0.0.7.0–8.3.0.2.0. The vulnerability is described as easily exploitable with network access over HTTP by a low-privilege attacker, potentially leading to takeover of the...

CVE-2026-61129

CVE-2026-61129 affects Oracle Commerce Platform ATG Portals, version 11.4.0. The vulnerability allows an unauthenticated, remote attacker over HTTP to compromise the platform, with CVSS v3.1 base score 9.8 (Impact: Confidentiality, Integrity, Availability). The connected Oracle CPU July 2026 advi...

CVE-2026-61126

The CVE-2026-61126 entry affects Oracle Communications Billing and Revenue Management (Platform) and is applicable to Oracle Communications BRM versions 15.0.0.0.0–15.0.1.0.0 and 15.1.0.0.0–15.2.0.0.0. The vulnerability is described as easily exploitable with a low-privilege attacker who can log ...

CVE-2026-61125

Oracle E-Business Suite Configure to Order (Supply to Order Workbench) is affected in versions 12.2.3–12.2.15. A vulnerability allows a low-privilege, network-accessible attacker (via HTTP) to compromise Oracle Configure to Order, with potential scope expansion affecting additional products. Succ...

CVE-2026-61122

CVE-2026-61122 affects Oracle E-Business Suite, Oracle HRMS (UK) Payroll component, for versions 12.2.9–12.2.15. A low-privilege, network-authenticated attacker (HTTP) can compromise HRMS(UK), leading to unauthorized creation/deletion/modification of critical data or full access to HRMS(UK) data....

CVE-2026-61121

Vulnerability CVE-2026-61121 affects Oracle HRMS (UK) within Oracle E-Business Suite (UK Payroll) for versions 12.2.8–12.2.15. The issue allows a low-privilege attacker with network access over HTTP to compromise Oracle HRMS (UK), with potential takeover (CVSS v3.1 base score 8.8; impacts to conf...

CVE-2026-61123

CVE-2026-61123 affects Oracle HRMS (US) within Oracle E-Business Suite, component Internal Operations. Affected versions are 12.2.3–12.2.15. The vulnerability can be triggered by a low-privilege attacker over HTTP with network access, potentially enabling unauthorized read access to a subset of O...

CVE-2026-61119

CVE-2026-61119 describes a vulnerability in Oracle HRMS (UK) within Oracle E-Business Suite (UK Payroll). Affected versions are 12.2.3–12.2.15. The issue is exploitable over HTTP with network access by a low-privilege attacker, potentially leading to unauthorized creation, deletion or modificatio...

CVE-2026-61117

The CVE-2026-61117 entry concerns Oracle E-Business Suite, Oracle HRMS (UK) specifically, with affected versions 12.2.8–12.2.15. The vulnerability is described as exploitable by a low-privilege attacker with network access via HTTP to compromise Oracle HRMS (UK), with potential broader impact on ...

CVE-2026-61116

Affected product: Oracle E-Business Suite, Oracle Application Object Library (Core). Vulnerable versions: 12.2.3 through 12.2.15. Issue: unauthenticated, network-accessible via HTTP attacker can potentially access or exfiltrate Oracle Application Object Library data. Root cause and exact exploit ...

CVE-2026-61120

CVE-2026-61120 affects Oracle HRMS (US) in Oracle E-Business Suite (Internal Operations). Affected versions: 12.2.3–12.2.15. Local, low-privilege logon can compromise Oracle HRMS (US) with potential takeover, impacting confidentiality, integrity, and availability (CVSS 7.0). No root-cause or fix ...