CyberSecBulletin

Oracle vulnerabilities

We track 3,014 vulnerabilities in Oracle products across 60+ products. 3,006 are rated high or critical, and 81 have been exploited in real attacks. The most recent was published on October 24, 2026.

3,014vulnerabilities
715critical
2,291high
81exploited
8.3average CVSS score

Latest Oracle vulnerabilities

  • 9.9 Critical severity

    Oracle WebCenter Enterprise Capture: Improper Access Control

    CVE-2026-60445Oracle

    Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with ne

  • 8.5 High severity

    Oracle WebCenter Content: Improper Access Control

    CVE-2026-60444Oracle

    Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network acce

  • 8.7 High severity

    Oracle WebCenter Content: Improper Access Control

    CVE-2026-60443Oracle

    Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network acce

  • 9.8 Critical severity

    Service Delivery Platform: Missing Authentication for Critical Functionality

    CVE-2026-60442Oracle

    Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabler). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network

  • 9.8 Critical severity

    Service Delivery Platform: Missing Authentication for Critical Functionality

    CVE-2026-60441Oracle

    Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabler). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network

  • 7.7 High severity

    Service Delivery Platform: Exposure of Sensitive Information to an Unauthorized Actor

    CVE-2026-60440Oracle

    Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabler). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network

  • 9.1 Critical severity

    Oracle HTTP Server: Improper Access Control

    CVE-2026-60438Oracle

    Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware (component: mod_ssl). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP

  • 8.7 High severity

    Oracle Unified Directory: Improper Access Control

    CVE-2026-60437Oracle

    Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows high privileged attacker with network access vi

  • 7.5 High severity

    Oracle Unified Directory: Uncontrolled Resource Consumption

    CVE-2026-60436Oracle

    Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access vi

  • 9.8 Critical severity

    Oracle WebCenter Content: Missing Authentication for Critical Functionality

    CVE-2026-60435Oracle

    Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network acc

  • 8.6 High severity

    Oracle HTTP Server: Exposure of Sensitive Information to an Unauthorized Actor

    CVE-2026-60431Oracle

    Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware (component: mod_proxy). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTT

  • 8.8 High severity

    Oracle Unified Directory: Improper Access Control

    CVE-2026-60430Oracle

    Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via

  • 9.9 Critical severity

    Oracle Unified Directory: Improper Access Control

    CVE-2026-60429Oracle

    Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via

  • 8.2 High severity

    Oracle Unified Directory: Improper Access Control

    CVE-2026-60428Oracle

    Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access vi

  • 8.7 High severity

    Oracle Unified Directory: Improper Access Control

    CVE-2026-60427Oracle

    Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access

  • 8.5 High severity

    Oracle Unified Directory: Improper Access Control

    CVE-2026-60426Oracle

    Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via

  • 7.5 High severity

    Oracle Unified Directory: Uncontrolled Resource Consumption

    CVE-2026-60425Oracle

    Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access vi

  • 9.0 Critical severity

    Oracle Unified Directory: Missing Authentication for Critical Functionality

    CVE-2026-60424Oracle

    Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access

  • 8.8 High severity

    Oracle Unified Directory: Improper Authentication

    CVE-2026-60423Oracle

    Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via

  • 9.9 Critical severity

    Oracle Unified Directory: Improper Access Control

    CVE-2026-60422Oracle

    Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core). The supported version that is affected is 14.1.2.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via LDAP to compr

  • 8.2 High severity

    Oracle Unified Directory: Improper Access Control

    CVE-2026-60421Oracle

    Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Difficult to exploit vulnerability allows low privileged attacker with network access v

  • 8.5 High severity

    Oracle Unified Directory: Improper Access Control

    CVE-2026-60420Oracle

    Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via

  • 8.8 High severity

    Oracle Unified Directory: Improper Privilege Management

    CVE-2026-60419Oracle

    Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via

  • 7.2 High severity

    Oracle Unified Directory: Improper Privilege Management

    CVE-2026-60418Oracle

    Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows high privileged attacker with network access vi

  • 8.1 High severity

    Oracle Unified Directory: Missing Authentication for Critical Functionality

    CVE-2026-60417Oracle

    Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access

  • 8.1 High severity

    Oracle Access Manager: Improper Authentication

    CVE-2026-60416Oracle

    Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Difficult to exploit vulnerability allows unauthenticated attacker with netwo

  • 9.9 Critical severity

    TimesTen In-Memory Database: Improper Access Control

    CVE-2026-60402Oracle

    Vulnerability in the TimesTen In-Memory Database product of Oracle TimesTen In-Memory Database (component: Kubernetes Operator). The supported version that is affected is 26.1.1.1.0. Easily exploitable vulnerability allows low privileged attacker with network

  • 8.8 High severity

    Oracle GoldenGate: Improper Access Control

    CVE-2026-60400Oracle

    Vulnerability in Oracle GoldenGate (component: Admin Server Executable). Supported versions that are affected are 19.1.0.0.0-19.30.0.0, 21.3-21.21 and 23.4-23.26.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTPS t

  • 8.8 High severity

    Oracle GoldenGate: Missing Authentication for Critical Functionality

    CVE-2026-60398Oracle

    Vulnerability in Oracle GoldenGate (component: Oracle GoldenGate Microservices). Supported versions that are affected are 19.1.0.0.0-19.30.0.0, 21.3-21.21 and 23.4-23.26.1. Easily exploitable vulnerability allows low privileged attacker with network access via

  • 7.2 High severity

    Oracle GoldenGate: Missing Authentication for Critical Functionality

    CVE-2026-60396Oracle

    Vulnerability in Oracle GoldenGate (component: Distribution Server executable). Supported versions that are affected are 21.3-21.21 and 23.4-23.26.1. Easily exploitable vulnerability allows high privileged attacker with network access via HTTPS to compromise O

  • 10.0 Critical severity

    Service Delivery Platform: Missing Authentication for Critical Functionality

    CVE-2026-60389Oracle

    Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabler). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network

  • 9.8 Critical severity

    Service Delivery Platform: Missing Authentication for Critical Functionality

    CVE-2026-60388Oracle

    Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabler). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network

  • 9.8 Critical severity

    Service Delivery Platform: Missing Authentication for Critical Functionality

    CVE-2026-60387Oracle

    Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabler). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network

  • 9.8 Critical severity

    Service Delivery Platform: Missing Authentication for Critical Functionality

    CVE-2026-60386Oracle

    Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabler). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network

  • 9.8 Critical severity

    Service Delivery Platform: Missing Authentication for Critical Functionality

    CVE-2026-60385Oracle

    Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabler). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network

  • 9.8 Critical severity

    Service Delivery Platform: Missing Authentication for Critical Functionality

    CVE-2026-60384Oracle

    Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabler). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network

  • 8.4 High severity

    Service Delivery Platform: Improper Access Control

    CVE-2026-60383Oracle

    Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabler). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with logon to

  • 7.5 High severity

    Service Delivery Platform: Uncontrolled Resource Consumption

    CVE-2026-60382Oracle

    Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabler). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network

  • 9.9 Critical severity

    Service Delivery Platform: Improper Access Control

    CVE-2026-60381Oracle

    Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabler). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network

  • 9.8 Critical severity

    Service Delivery Platform: Missing Authentication for Critical Functionality

    CVE-2026-60380Oracle

    Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabler). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network