375224 matches found
CVE-2026-61211
Oracle Database Server’s RDBMS component contains CVE-2026-61211 affecting 19.3–19.31 and 23.4.0–23.26.2. A low-privileged attacker with Execute DBMS_CLOUD and network access via Oracle Net can compromise the RDBMS, potentially taking over the system. Patching guidance is included in the Oracle J...
CVE-2026-61210
CVE-2026-61210 affects Oracle PeopleSoft Enterprise SCM Manufacturing (component: Security) for the 9.2 release. The vulnerability is exploitable over HTTPS with network access and requires no authentication, enabling an attacker to perform unauthorized creation, deletion, or modification of data...
CVE-2026-61207
Vulnerability CVE-2026-61207 affects Oracle PeopleSoft Enterprise SCM eProcurement (component: Manage Requisition Status) in version 9.2. An unauthenticated attacker with network access via HTTP can compromise the SCM eProcurement, with potential scope impact to additional products and outcomes i...
CVE-2026-61205
CVE-2026-61205 affects Oracle PeopleSoft 9.2 SCM Purchasing (component: Purchasing). The vulnerability allows an unauthenticated attacker over HTTP to compromise PeopleSoft SCM Purchasing, enabling unauthorized creation, deletion or modification of data, and unauthorized read access to a subset o...
CVE-2026-61204
CVE-2026-61204 affects Oracle PeopleSoft Enterprise FIN Program Management (component: Primavera Integration) with affected version 9.2. The vulnerability allows a low-privileged attacker with network access via HTTP to compromise the FIN Program Management module, requiring user interaction, and...
CVE-2026-61202
CVE-2026-61202 affects Oracle Solaris (Utility) with targeted impact on versions 11.3 and 11.4. The vulnerability is exploitable by a low-privilege user who can log on to the infrastructure where Oracle Solaris runs, resulting in compromised Solaris and potential scope expansion to other products...
CVE-2026-61201
CVE-2026-61201 affects Oracle PeopleSoft: PeopleSoft Enterprise CRM Common Objects (component: Common Objects) in version 9.2.23. An unauthenticated attacker with network access via HTTP can compromise the Common Objects, with potential impact across related products (scope change) and possible t...
CVE-2026-61203
CVE-2026-61203 concerns Oracle PeopleSoft Enterprise FIN Expenses (component: Expenses). The affected product/version is PeopleSoft FIN Expenses 9.2. The vulnerability is exploitable over HTTP by an unauthenticated network attacker, enabling unauthorized creation/modification/deletion of data and...
CVE-2026-61195
CVE-2026-61195 affects Oracle Agile Engineering Data Management (Oracle Supply Chain), Core component, version 6.2.1. The vulnerability enables a low-privilege, unauthenticated attacker with network access over TCP to cause a hang or frequent crashes (DoS) in the affected product. The CVSS 3.1 ba...
CVE-2026-61200
CVE-2026-61200 affects Oracle E-Business Suite, Oracle Labor Distribution (Internal Operations). Affects 12.2.3–12.2.15; an attacker with network access over HTTP and low privileges can compromise data, including unauthorized update/insert/delete and read access to subset of Oracle Labor Distribu...
CVE-2026-61197
CVE-2026-61197 affects the Oracle Identity Manager (OIM) Legacy UI in Oracle Fusion Middleware. Affected versions: 12.2.1.4.0 and 14.1.2.1.0. The flaw allows an unauthenticated, network-based attacker (via HTTP) to compromise OIM, leading to unauthorized creation, deletion, or modification of dat...
CVE-2026-61196
Summary : CVE-2026-61196 affects Oracle Identity Manager (OIM) within Oracle Fusion Middleware, specifically the OIM Legacy UI. Affected versions are 12.2.1.4.0 and 14.1.2.1.0. The flaw allows unauthenticated, network-accessible attackers via HTTP to compromise OIM, with the potential takeover of...
CVE-2026-61194
Oracle Agile Engineering Data Management (Supply Chain, Core) is affected in version 6.2.1. The flaw allows a low-privileged, network-accessible attacker (TCP) to trigger a hang or frequent crash (DoS). CVSS 3.1 base score 6.5 (AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H). Exploitation details are not pr...
CVE-2026-61192
The CVE-2026-61192 entry concerns Oracle Agile Engineering Data Management (Oracle Supply Chain), specifically the Install component in version 6.2.1. The issue is exploitable by a low-privilege attacker with network access over HTTP, potentially causing a hang or frequent crash (complete DOS). T...
CVE-2026-61191
The CVE-2026-61191 entry pertains to Oracle Agile Engineering Data Management (Oracle Supply Chain), specifically the Document Management component in version 6.2.1. The vulnerability is characterized as easily exploitable with local access (low privileges, user login required) and can lead to un...
CVE-2026-61189
CVE-2026-61189 concerns Oracle Agile Engineering Data Management (Oracle Supply Chain), specifically the Install component in version 6.2.1. The vulnerability allows a low-privilege user with login access to the infrastructure where Oracle Agile Engineering Data Management runs to compromise the ...
CVE-2026-61190
CVE-2026-61190 affects Oracle Agile Engineering Data Management (Oracle Supply Chain), specifically the Install component, version 6.2.1. The vulnerability allows a low-privilege attacker who has network access via HTTP to compromise the system. Successful exploitation requires user interaction a...
CVE-2026-61188
CVE-2026-61188 affects Oracle Agile Product Lifecycle Management for Process (Oracle Supply Chain), specifically the Installation component in version 6.2.4. The vulnerability is described as exploitable with network access over HTTP by a low-privileged attacker, potentially leading to takeover o...
CVE-2026-61187
The CVE-2026-61187 entry concerns Oracle Agile Engineering Data Management (Oracle Supply Chain) with the Install component affected in version 6.2.1. The vulnerability is described as exploitable locally via the Install component, requiring a user who is logged into the infrastructure and perfor...