CVE-2026-61218

CVE-2026-61218 affects Oracle E-Business Suite Secure Enterprise Search (component: Search Integration Engine) and is exploitable on affected 12.2.3–12.2.15 installations. The vulnerability allows a low-privileged user with network access over HTTP to compromise the Secure Enterprise Search, pote...

CVE-2026-61221

This CVE concerns Oracle Item Master in Oracle E-Business Suite, affecting versions 12.2.3–12.2.15 (component: iSet‑up bugs). The vulnerability is exploitable by a low-privilege attacker with network access over HTTP, enabling unauthorized updates/inserts/deletes to some Oracle Item Master data a...

CVE-2026-61220

CVE-2026-61220 affects Oracle Banking Origination (Configuration) in Oracle Financial Services Applications, vulnerable in version 14.5.0.16.0. The flaw allows unauthenticated, network-accessible compromise via HTTP with user interaction required, potentially enabling unauthorized update/insert/d...

CVE-2026-61217

CVE-2026-61217 affects Oracle Fusion Middleware’s Oracle Security Service, specifically the Oracle SSL API component, with affected version 12.2.1.4.0. The vulnerability is exploitable by a low-privileged attacker who has network access via TLS and requires user interaction. Impact includes unaut...

CVE-2026-61214

This CVE (CVE-2026-61214) concerns Oracle HRMS (UK) within Oracle E-Business Suite, specifically the UK Payroll component. Affected versions are 12.2.3–12.2.15. The issue allows a high-privilege attacker with network access via HTTP to compromise Oracle HRMS (UK) and read a subset of data, per CV...

CVE-2026-61216

CVE-2026-61216 concerns Oracle E-Business Suite, Oracle Payroll component (Payroll). Affected are 12.2.3–12.2.15. The vulnerability can be exploited by a low-privileged attacker with network access over HTTP to Oracle Payroll, potentially enabling unauthorized update/insert/delete and unauthorize...

CVE-2026-61210

CVE-2026-61210 affects Oracle PeopleSoft Enterprise SCM Manufacturing (component: Security) for the 9.2 release. The vulnerability is exploitable over HTTPS with network access and requires no authentication, enabling an attacker to perform unauthorized creation, deletion, or modification of data...

CVE-2026-61209

Technical details are not publicly available in the provided documents. Monitor Oracle CPU July 2026 advisory and NVD entry for affected versions, impact, and fixes.

CVE-2026-61211

Oracle Database Server’s RDBMS component contains CVE-2026-61211 affecting 19.3–19.31 and 23.4.0–23.26.2. A low-privileged attacker with Execute DBMS_CLOUD and network access via Oracle Net can compromise the RDBMS, potentially taking over the system. Patching guidance is included in the Oracle J...

CVE-2026-61204

CVE-2026-61204 affects Oracle PeopleSoft Enterprise FIN Program Management (component: Primavera Integration) with affected version 9.2. The vulnerability allows a low-privileged attacker with network access via HTTP to compromise the FIN Program Management module, requiring user interaction, and...

CVE-2026-61207

Vulnerability CVE-2026-61207 affects Oracle PeopleSoft Enterprise SCM eProcurement (component: Manage Requisition Status) in version 9.2. An unauthenticated attacker with network access via HTTP can compromise the SCM eProcurement, with potential scope impact to additional products and outcomes i...

CVE-2026-61205

CVE-2026-61205 affects Oracle PeopleSoft 9.2 SCM Purchasing (component: Purchasing). The vulnerability allows an unauthenticated attacker over HTTP to compromise PeopleSoft SCM Purchasing, enabling unauthorized creation, deletion or modification of data, and unauthorized read access to a subset o...

CVE-2026-61201

CVE-2026-61201 affects Oracle PeopleSoft: PeopleSoft Enterprise CRM Common Objects (component: Common Objects) in version 9.2.23. An unauthenticated attacker with network access via HTTP can compromise the Common Objects, with potential impact across related products (scope change) and possible t...

CVE-2026-61203

CVE-2026-61203 concerns Oracle PeopleSoft Enterprise FIN Expenses (component: Expenses). The affected product/version is PeopleSoft FIN Expenses 9.2. The vulnerability is exploitable over HTTP by an unauthenticated network attacker, enabling unauthorized creation/modification/deletion of data and...

CVE-2026-61202

CVE-2026-61202 affects Oracle Solaris (Utility) with targeted impact on versions 11.3 and 11.4. The vulnerability is exploitable by a low-privilege user who can log on to the infrastructure where Oracle Solaris runs, resulting in compromised Solaris and potential scope expansion to other products...

CVE-2026-61200

CVE-2026-61200 affects Oracle E-Business Suite, Oracle Labor Distribution (Internal Operations). Affects 12.2.3–12.2.15; an attacker with network access over HTTP and low privileges can compromise data, including unauthorized update/insert/delete and read access to subset of Oracle Labor Distribu...

CVE-2026-61195

CVE-2026-61195 affects Oracle Agile Engineering Data Management (Oracle Supply Chain), Core component, version 6.2.1. The vulnerability enables a low-privilege, unauthenticated attacker with network access over TCP to cause a hang or frequent crashes (DoS) in the affected product. The CVSS 3.1 ba...

CVE-2026-61197

CVE-2026-61197 affects the Oracle Identity Manager (OIM) Legacy UI in Oracle Fusion Middleware. Affected versions: 12.2.1.4.0 and 14.1.2.1.0. The flaw allows an unauthenticated, network-based attacker (via HTTP) to compromise OIM, leading to unauthorized creation, deletion, or modification of dat...

CVE-2026-61196

Summary : CVE-2026-61196 affects Oracle Identity Manager (OIM) within Oracle Fusion Middleware, specifically the OIM Legacy UI. Affected versions are 12.2.1.4.0 and 14.1.2.1.0. The flaw allows unauthenticated, network-accessible attackers via HTTP to compromise OIM, with the potential takeover of...

CVE-2026-61194

Oracle Agile Engineering Data Management (Supply Chain, Core) is affected in version 6.2.1. The flaw allows a low-privileged, network-accessible attacker (TCP) to trigger a hang or frequent crash (DoS). CVSS 3.1 base score 6.5 (AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H). Exploitation details are not pr...