CVE-2026-61108

CVE-2026-61108 concerns a vulnerability in Oracle MySQL’s GIS component affecting MySQL Server (9.7.0–9.7.1) and MySQL Cluster (9.7.0–9.7.1). The issue, described in the connected sources, can allow a low-privileged, network-attached attacker to cause a Hang or frequent crashes (complete DoS) of ...

CVE-2026-61106

CVE-2026-61106 affects Oracle GoldenGate, specifically the Config Service Executable. Affected versions are 23.4 through 23.26.2. The vulnerability is exploitable remotely over HTTP by an unauthenticated attacker, with potential for takeover of Oracle GoldenGate and impacts to confidentiality, in...

CVE-2026-61104

An Oracle PeopleSoft vulnerability in the Enterprise CS Student Records product (component: Research Tracking) affects version 9.2.38. The issue can be exploited by an unauthenticated attacker over HTTP to cause unauthorized read access to a subset of PeopleSoft Enterprise CS Student Records data...

CVE-2026-61105

The CVE-2026-61105 entry describes a vulnerability in Oracle Banking Trade Finance (Infrastructure) affecting Oracle Financial Services Applications, versions 14.6.0–14.8.0. The flaw enables a low-privilege, network-accessible attacker (via HTTP) to cause unauthorized creation/modification/deleti...

CVE-2026-61103

The CVE-2026-61103 affects Oracle PeopleSoft Enterprise CS Campus Community (PeopleSoft CS Campus Community) with the Security component, specifically version 9.2.38. The description indicates a vulnerability that is difficult to exploit but allows an unauthenticated attacker who has access to th...

CVE-2026-61102

Vulnerability detail available for CVE-2026-61102 affecting Oracle Banking Trade Finance (Oracle Financial Services Applications) Infrastructure component. Affected versions are 14.6.0–14.8.0. The issue is exploitable over HTTP with network access by a low-privileged attacker, potentially allowin...

CVE-2026-61101

CVE-2026-61101 affects Oracle MES for Process Manufacturing (Internal Operations) within Oracle E-Business Suite, versions 12.2.3–12.2.15. The vulnerability allows unauthenticated network access via HTTP and requires user interaction, with potential for unauthorized read and write of Oracle MES d...

CVE-2026-61099

The CVE-2026-61099 entry concerns Oracle WebCenter Enterprise Capture (Client Bundle) with affected versions 12.2.1.4.0 and 14.1.2.0.0. The vulnerability is exploitable over HTTP by a low-privilege, network-accessible attacker and can result in takeover of Oracle WebCenter Enterprise Capture. CVS...

CVE-2026-61100

CVE-2026-61100 affects Oracle WebCenter Enterprise Capture (Client Bundle) in Oracle Fusion Middleware. Affected versions are 12.2.1.4.0 and 14.1.2.0.0. The issue allows an unauthenticated, network-accessible attacker via HTTP to compromise the product, with potential takeover and impact to confi...

CVE-2026-61097

CVE-2026-61097 describes a vulnerability in Oracle Financial Services Applications, specifically the Oracle Banking Trade Finance Process Management product (component: Common). Affected are versions 14.6.0 through 14.8.0. The flaw enables an unauthenticated attacker with network access via HTTP ...

CVE-2026-61098

CVE-2026-61098 affects Oracle WebCenter Enterprise Capture (Product: Oracle Fusion Middleware) in the Client Bundle component. Affected versions are 12.2.1.4.0 and 14.1.2.0.0. The vulnerability allows a low-privilege, unauthenticated attacker with network access via HTTP to compromise systems, po...

CVE-2026-61096

CVE-2026-61096 affects Oracle MySQL Server and MySQL Cluster (Server: Pluggable Auth). Affected versions: MySQL Server 8.4.0–8.4.10, 9.7.0–9.7.1; MySQL Cluster 8.0.0–8.0.47, 8.4.0–8.4.10, 9.7.0–9.7.1. The vulnerability allows an unauthenticated attacker with logon to the infrastructure where MySQ...

CVE-2026-61093

The CVE-2026-61093 entry concerns Oracle MySQL: Server (Optimizer) with affected MySQL Server 9.7.0–9.7.1 and MySQL Cluster 9.7.0–9.7.1. The vulnerability allows a low-privilege attacker who can reach the server over multiple protocols to cause the MySQL Server/Cluster to hang or crash (complete ...

CVE-2026-61095

The CVE-2026-61095 entry concerns Oracle Communications Unified Inventory Management (component: Security). Affected supported versions are 7.5.0, 7.5.1, 7.6.0, 7.7.0, 7.8.0, and 8.0.1. The issue is exploitable by a low-privileged attacker with network access via HTTP, potentially resulting in un...

CVE-2026-61094

CVE-2026-61094 affects Oracle MySQL Server (Server: Replication) and MySQL Cluster. Affected versions include MySQL Server 8.4.0–8.4.10 and 9.7.0–9.7.1; MySQL Cluster 8.0.0–8.0.47, 8.4.0–8.4.10, and 9.7.0–9.7.1. The vulnerability is exploitable with network access via multiple protocols and can l...

CVE-2026-61090

CVE-2026-61090 affects Oracle E-Business Suite — Oracle Project Foundation (Miscellaneous). Affected: 12.2.3–12.2.15. If already logged in locally, a low-privilege user can exploit to take over Oracle Project Foundation (CVSS 3.1 base 7.8; LOCAL access, LOW privileges, NONE interaction, C/I/A HIG...

CVE-2026-61091

CVE-2026-61091 affects Oracle Communications Billing and Revenue Management (BRM Server). Affected versions are 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0 and 15.2.0.0.0. The flaw is exploitable locally by a low-privilege user with logon to the infrastructure hosting BRM, potentially leading to takeover ...

CVE-2026-61092

CVE-2026-61092 affects Oracle WebCenter Enterprise Capture (Oracle Fusion Middleware) — Client Bundle. Affected versions: 12.2.1.4.0 and 14.1.2.0.0. The vulnerability permits an unauthenticated attacker with network access over HTTP to compromise the product, potentially leading to takeover. CVSS...

CVE-2026-61089

The CVE-2026-61089 entry concerns Oracle PeopleSoft Enterprise SCM Inventory (component: Security) with affected version 9.2. The vulnerability allows unauthenticated network access via HTTP to compromise SCM Inventory, potentially yielding unauthorized data access and the ability to update/inser...

CVE-2026-61087

CVE-2026-61087 affects Oracle PeopleSoft Enterprise FIN Payables (v9.2) — a vulnerability in the Security component that an unauthenticated, network-accessing attacker can exploit via HTTP to access or compromise FIN Payables data. The CVSSv3.1 base score is 7.5 (Impact: Confidentiality) with vec...