#oracle
7 articles
CVE-2026-21962: Oracle HTTP Server and WebLogic Proxy Plug-in takeover (actively exploited, CVSS 10)
Oracle Fusion Middleware 12.2.1.4.0, 14.1.1.0.0 and 14.1.2.0.0 contain an access control flaw letting an unauthenticated attacker over HTTP gain complete access to server data and the systems behind it...
CVE-2026-73930: Ten critical flaws in Oracle Helidon — August Oracle bulletin
The August Oracle bulletin contains ten critical flaws in the Imperative Web Server component of the Helidon framework, spanning the 1.x, 3.x and 4.x lines...
CVE-2026-46817: Oracle E-Business Suite Improper Privilege Management Vulnerability
Oracle E-Business Suite contains an improper privilege management vulnerability that allows an unauthenticated attacker with network access via HTTP to compromise Oracle Payments. Successful attacks o...
CVE-2024-21182: 2024 Vulnerability Now Actively Exploited (Oracle)
Oracle WebLogic contains an unspecified vulnerability that could allow an unauthenticated attacker with network access via T3, IIOP to compromise Oracle WebLogic Server. Successful attacks of this vul...
CVE-2026-34279: Scope-change compromise in Oracle Enterprise Manager Event Management
Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Event Management). Supported versions that are affected are 13.5 and 24.1. Easily exploi...
CVE-2026-34286: Unauthenticated data tampering in Oracle Identity Manager Connector (Fusion Middleware)
Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Core). The supported version that is affected is 12.2.1.4.0. Easily exploitable vulnerability a...
CVE-2026-21992: Critical Vulnerability in Oracle Oracle Identity Manager - Immediate Update Required
Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: REST WebServices) and Oracle Web Services Manager product of Oracle Fusion Middleware (component: Web Servi...