CyberSecBulletin

Oracle vulnerabilities

We track 3,014 vulnerabilities in Oracle products across 60+ products. 3,006 are rated high or critical, and 81 have been exploited in real attacks. The most recent was published on October 24, 2026.

3,014vulnerabilities
715critical
2,291high
81exploited
8.3average CVSS score

Latest Oracle vulnerabilities

  • 7.7 High severity

    Oracle Process Manufacturing Regulatory…: Improper Access Control

    CVE-2026-60683Oracle

    Vulnerability in the Oracle Process Manufacturing Regulatory Management product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacke

  • 8.8 High severity

    Oracle Process Manufacturing Regulatory…: Improper Access Control

    CVE-2026-60681Oracle

    Vulnerability in the Oracle Process Manufacturing Regulatory Management product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacke

  • 8.8 High severity

    Oracle General Ledger: Improper Privilege Management

    CVE-2026-60678Oracle

    Vulnerability in the Oracle General Ledger product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via SOA

  • 8.4 High severity

    Oracle Common Application Components: Improper Access Control

    CVE-2026-60677Oracle

    Vulnerability in the Oracle Common Application Components product of Oracle E-Business Suite (component: Oracle Common Modules). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with net

  • 8.8 High severity

    Oracle Applications Framework: Improper Access Control

    CVE-2026-60676Oracle

    Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Search Bean). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTT

  • 8.8 High severity

    Oracle Applications Framework: Improper Access Control

    CVE-2026-60675Oracle

    Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Search Bean). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTT

  • 8.2 High severity

    Oracle Business Intelligence Enterprise Edition: Improper Access Control

    CVE-2026-60674Oracle

    Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: BI Platform Security). Supported versions that are affected are 8.2.0.0.0 and 26.01.0.0.0. Easily exploitable vulnerability allows unauthenticated atta

  • 8.6 High severity

    Oracle Business Intelligence Enterprise Edition: Improper Access Control

    CVE-2026-60671Oracle

    Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: BI Platform Security). Supported versions that are affected are 8.2.0.0.0 and 26.01.0.0.0. Easily exploitable vulnerability allows unauthenticated atta

  • 8.1 High severity

    Oracle Applications Technology Stack: Improper Access Control

    CVE-2026-60670Oracle

    Vulnerability in the Oracle Applications Technology Stack product of Oracle E-Business Suite (component: Client System Analyzer). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows unauthenticated attacker with n

  • 8.2 High severity

    PeopleSoft Enterprise HCM Human Resources: Improper Access Control

    CVE-2026-60668Oracle

    Vulnerability in the PeopleSoft Enterprise HCM Human Resources product of Oracle PeopleSoft (component: French Public Sector Specific). The supported version that is affected is 9.2. Easily exploitable vulnerability allows unauthenticated attacker with network

  • 7.4 High severity

    PeopleSoft Enterprise HCM Human Resources: Improper Access Control

    CVE-2026-60667Oracle

    Vulnerability in the PeopleSoft Enterprise HCM Human Resources product of Oracle PeopleSoft (component: Core). The supported version that is affected is 9.2. Difficult to exploit vulnerability allows unauthenticated attacker with network access via TCP to comp

  • 8.2 High severity

    PeopleSoft Enterprise HCM Global Payroll…: Improper Access Control

    CVE-2026-60665Oracle

    Vulnerability in the PeopleSoft Enterprise HCM Global Payroll Switzerland product of Oracle PeopleSoft (component: Global Payroll for Switzerland). The supported version that is affected is 9.2. Difficult to exploit vulnerability allows low privileged attacker

  • 8.8 High severity

    Oracle WebCenter Content: Improper Neutralization of Input During Web Page Generation

    CVE-2026-60664Oracle

    Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network acc

  • 9.9 Critical severity

    Oracle WebCenter Content: Improper Privilege Management

    CVE-2026-60663Oracle

    Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Web Content Management). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with netw

  • 7.8 High severity

    Oracle Solaris: Improper Privilege Management

    CVE-2026-60661Oracle

    Vulnerability in the Oracle Solaris product of Oracle Systems (component: Filesystems). The supported version that is affected is 11.4. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris exec

  • 7.1 High severity

    Oracle Solaris: Improper Access Control

    CVE-2026-60659Oracle

    Vulnerability in the Oracle Solaris product of Oracle Systems (component: Filesystems). The supported version that is affected is 11.4. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris execut

  • 7.5 High severity

    Oracle WebCenter Content: Cross-Site Request Forgery

    CVE-2026-60658Oracle

    Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network a

  • 7.7 High severity

    Oracle WebCenter Content: Improper Access Control

    CVE-2026-60657Oracle

    Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Difficult to exploit vulnerability allows low privileged attacker with network ac

  • 8.8 High severity

    Oracle WebCenter Content: Improper Access Control

    CVE-2026-60656Oracle

    Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Web Content Management). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with netw

  • 8.8 High severity

    Oracle WebCenter Content: Improper Access Control

    CVE-2026-60655Oracle

    Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Web Content Management). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with netw

  • 8.8 High severity

    Oracle WebCenter Content: Improper Privilege Management

    CVE-2026-60654Oracle

    Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Web Content Management). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with netw

  • 8.1 High severity

    Oracle WebCenter Content: Missing Authentication for Critical Functionality

    CVE-2026-60653Oracle

    Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Web Content Management). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with netw

  • 8.0 High severity

    Oracle WebCenter Content: Missing Authentication for Critical Functionality

    CVE-2026-60652Oracle

    Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Web Content Management). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with netw

  • 8.8 High severity

    Oracle WebCenter Content: Improper Access Control

    CVE-2026-60651Oracle

    Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Web Content Management). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with net

  • 8.0 High severity

    Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component…

    CVE-2026-60650Oracle

    Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Web Content Management). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with netw

  • 9.1 Critical severity

    Oracle WebCenter Content: Improper Access Control

    CVE-2026-60649Oracle

    Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Web Content Management). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with net

  • 8.0 High severity

    Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component…

    CVE-2026-60648Oracle

    Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Web Content Management). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with netw

  • 7.1 High severity

    Oracle WebCenter Content: Exposure of Sensitive Information to an Unauthorized Actor

    CVE-2026-60647Oracle

    Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Web Content Management). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with netw

  • 8.0 High severity

    Oracle WebCenter Content: Improper Neutralization of Input During Web Page Generation

    CVE-2026-60646Oracle

    Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Web Content Management). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with netw

  • 7.2 High severity

    Oracle WebCenter Content: Improper Access Control

    CVE-2026-60645Oracle

    Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Web Content Management). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows high privileged attacker with net

  • 10.0 Critical severity

    Oracle WebCenter Content: Missing Authentication for Critical Functionality

    CVE-2026-60644Oracle

    Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Web Content Management). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with net

  • 8.0 High severity

    Oracle WebCenter Content: Cross-Site Request Forgery

    CVE-2026-60643Oracle

    Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network acce

  • 7.6 High severity

    Oracle WebCenter Content: Improper Access Control

    CVE-2026-60642Oracle

    Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network acc

  • 7.6 High severity

    Oracle WebCenter Content: Improper Access Control

    CVE-2026-60641Oracle

    Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network acc

  • 8.3 High severity

    Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component…

    CVE-2026-60640Oracle

    Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network a

  • 8.8 High severity

    Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component…

    CVE-2026-60639Oracle

    Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network acc

  • 8.8 High severity

    Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component…

    CVE-2026-60638Oracle

    Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network acc

  • 8.8 High severity

    Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component…

    CVE-2026-60637Oracle

    Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network acc

  • 8.8 High severity

    Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component…

    CVE-2026-60636Oracle

    Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network acc

  • 8.8 High severity

    Oracle WebCenter Content: Improper Neutralization of Input During Web Page Generation

    CVE-2026-60635Oracle

    Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network acc