CVE-2026-61307

Affected product: Oracle PeopleSoft Enterprise CC Common Application Objects, version 9.2. Root cause/impact: Unauthenticated, network-accessible attacker via Oracle Net can achieve full takeover of the application (C/I/A HIGH), CVSS 8.1. Remediation: Oracle's August 2026 Critical Patch Update ad...

CVE-2026-61305

A HIGH-severity vulnerability (CVSS 8.3) in Oracle BI Publisher's BI Platform Security component affects versions 8.2.0.0.0, 12.2.1.4.0, and 26.01.0.0.0. A low-privileged network attacker can gain unauthorized read/write access to all BI Publisher data and cause partial DoS. No exploitation detai...

CVE-2026-61300

CVE-2026-61300 affects Oracle Enterprise Manager Base Platform versions 13.5 and 24.1, specifically the Agent Next Gen component. A low-privileged local attacker can exploit this easily exploitable flaw to fully compromise the platform, with HIGH impact on confidentiality, integrity, and availabi...

CVE-2026-61302

CVE-2026-61302 is a vulnerability in the Pod Admin component of Oracle Business Intelligence Enterprise Edition (Oracle Analytics), affecting versions 8.2.0.0.0 and 26.01.0.0.0 . An unauthenticated attacker with network access via HTTP can exploit this with low complexity to gain unauthorized acc...

CVE-2026-61296

The flaw affects Oracle E-Business Suite's Linear Asset Management component in versions 12.2.3 through 12.2.15. A low-privileged network attacker can exploit it via HTTP to gain unauthorized read access to critical data and limited write/delete access, with scope extending beyond the vulnerable ...

CVE-2026-61298

Affected component is the Enterprise Manager Install module in Oracle Enterprise Manager Base Platform versions 13.5 and 24.1. A low-privileged local attacker can exploit it to gain unauthorized access to all EM-managed data (confidentiality impact only; CVSS 5.6 medium). Oracle's August 2026 CPU...

CVE-2026-61295

CVE-2026-61295 affects Oracle WebCenter Content Content Server in Oracle Fusion Middleware versions 12.2.1.4.0 and 14.1.2.0.0. An unauthenticated local attacker can exploit it to gain unauthorized access to critical or all accessible data. CVSS 3.1 base score is 7.1 (HIGH). No exploitation detail...

CVE-2026-61293

CVE-2026-61293 affects Oracle Hyperion Calculation Manager 11.2.25.0.000 (Security component). An unauthenticated attacker with network access via HTTP can compromise the application, with CVSS 8.1 (HIGH) impact on confidentiality, integrity, and availability. Oracle's CSPRAug2026 advisory is the...

CVE-2026-61291

CVE-2026-61291 affects the Content Server component of Oracle WebCenter Content (Oracle Fusion Middleware), versions 12.2.1.4.0 and 14.1.2.0.0 . A low-privileged attacker with local access to the infrastructure can exploit this vulnerability to achieve full takeover of the product, with high impa...

CVE-2026-61288

Oracle WebCenter Content (Content Server component, versions 12.2.1.4.0 and 14.1.2.0.0) is affected by an easily exploitable flaw allowing an unauthenticated network attacker via HTTP to compromise the system, requiring user interaction. Impact: unauthorized access to all accessible data and limi...

CVE-2026-61290

A HIGH-severity (CVSS 7.1) vulnerability in Oracle WebCenter Content's Content Server component affects versions 12.2.1.4.0 and 14.1.2.0.0. A low-privileged attacker with network HTTP access can exploit it (requiring human interaction and high complexity) to compromise all three security pillars ...

CVE-2026-61281

Oracle Hyperion Calculation Manager 11.2.25.0.000's Security component is vulnerable to unauthenticated HTTP exploitation (CVSS 8.1), enabling unauthorized data access, modification, and deletion. No root cause or fix details are provided in the documents; Oracle's August 2026 security alert is t...

CVE-2026-61284

A HIGH-severity (CVSS 8.8) flaw in Oracle Enterprise Manager's Application Config Console affects versions 13.5 and 24.1; an HTTP-accessible, low-privilege attacker can fully compromise the platform (C/I/A impacts). Exploitation details and fix version are not provided in the documents; apply Ora...

CVE-2026-61286

CVE-2026-61286 affects Oracle Enterprise Manager Base Platform versions 13.5 and 24.1, in the Event Management component. An unauthenticated remote attacker can exploit it via HTTP to gain unauthorized data read/write access and partial DoS. No exploitation or patch details are provided; refer to...

CVE-2026-61276

Oracle Hyperion Calculation Manager (version 11.2.25.0.000 ) has a vulnerability in its Security component that allows a low-privileged attacker with network access via HTTP to achieve full takeover of the product, impacting confidentiality, integrity, and availability (CVSS 3.1: 8.8 HIGH ). CISA...

CVE-2026-61273

Oracle JD Edwards EnterpriseOne Tools (component: Installation Security), versions 9.2.0.0–9.2.26.4, has an easily exploitable HTTP-based flaw allowing low-privileged remote attackers to fully compromise the application (CVSS 8.8, HIGH). No exploitation evidence is provided; Oracle's August 2026 ...

CVE-2026-61270

Oracle JD Edwards EnterpriseOne Orchestrator (component: E1 IOT Orchestrator Security), versions 9.2.0.0–9.2.26.4, is affected by an easily exploitable flaw. A low-privileged attacker with network HTTP access can compromise the product, gaining unauthorized creation, deletion, modification, and f...

CVE-2026-61272

Oracle JD Edwards EnterpriseOne Tools (component: Web Runtime SEC , versions 9.2.0.0–9.2.26.4) is affected by a critical (CVSS 9.8) remotely exploitable vulnerability: an unauthenticated attacker over HTTP can fully compromise the application (C/I/A all High). Patch guidance is available in Oracl...

CVE-2026-61268

A high-severity (CVSS 8.1) vulnerability in Oracle JD Edwards EnterpriseOne Tools (component: Business Logic Infra SEC, versions 9.2.0.0–9.2.26.4) allows a low-privileged, network-accessible attacker to gain unauthorized read and write access to critical application data. No exploitation evidence...

CVE-2026-61258

Affected : Oracle Internet Directory OID LDAP Server component in Oracle Fusion Middleware versions 12.2.1.4.0 and 14.1.2.1.0. Cause : unspecified; classified as "easily exploitable." Impact : unauthenticated network attacker via LDAP can fully compromise the directory (C:H/I:H/A:H, CVSS 9.8 Crit...