CVE-2026-60882 is a vulnerability in Oracle PeopleSoft Enterprise PeopleTools Search Framework versions 8.61 and 8.62. It allows an unauthenticated attacker with access to the physical communication segment attached to the hardware running PeopleSoft Enterprise PeopleTools to potentially gain unauthorized access to critical or all accessible data. The vulnerability is rated medium severity with a CVSS 3.1 base score of 5.3, primarily impacting confidentiality.
CVE-2026-60881 is a vulnerability in Oracle PeopleSoft Enterprise PeopleTools (component: Meta Data) affecting versions 8.61 through 8.63. It allows a high privileged attacker with network access via HTTP to gain unauthorized access to critical data or all accessible data within PeopleSoft Enterprise PeopleTools. Additionally, the vulnerability can cause a hang or repeated crashes resulting in a denial of service. The CVSS 3.1 base score is 6.5, indicating a medium severity with impacts on confidentiality and availability.
CVE-2026-60878 is a vulnerability in Oracle PeopleSoft Enterprise PeopleTools Process Scheduler component affecting versions 8.61 and 8.62. It allows a low privileged attacker with network access via HTTP to perform unauthorized update, insert, or delete operations on accessible data, as well as unauthorized read access to some data. Exploitation requires human interaction from a user other than the attacker. The vulnerability has a CVSS 3.1 base score of 4.4, indicating medium severity with confidentiality and integrity impacts. Oracle has published a Critical Patch Update advisory including patches for this and other vulnerabilities.
CVE-2026-60876 is a vulnerability in Oracle PeopleSoft Enterprise PeopleTools version 8.62 affecting the Search Framework component. It allows an unauthenticated attacker with network access via HTTP to potentially perform unauthorized read and write operations on accessible data. Exploitation requires human interaction from a user other than the attacker. The vulnerability has a CVSS 3.1 base score of 4.2, indicating medium severity with low confidentiality and integrity impacts and no availability impact.
CVE-2026-60874 is a vulnerability in Oracle PeopleSoft Enterprise PeopleTools Portal component versions 8.61 and 8.62. It allows a low privileged attacker with network access via HTTP to gain unauthorized read access to some accessible data and cause a partial denial of service. The vulnerability is difficult to exploit and has a CVSS 3.1 base score of 4.2, indicating medium severity.
CVE-2026-60869 is a vulnerability in Oracle PeopleSoft Enterprise PeopleTools versions 8.61 through 8.63. It allows a low privileged attacker with network access via HTTP to potentially cause unauthorized creation, deletion, or modification of critical data, or cause a denial of service by hanging or crashing the application. The vulnerability is difficult to exploit and has a CVSS 3.1 base score of 6.8, indicating medium severity with impacts on integrity and availability.
CVE-2026-60839 is a vulnerability in Oracle PeopleSoft Enterprise PeopleTools Query component affecting versions 8.61 and 8.62. It allows a high privileged attacker with network access via HTTP to cause a denial of service by hanging or crashing the application, and to gain unauthorized read and write access to some accessible data. The vulnerability is difficult to exploit and has a CVSS 3.1 base score of 5.5, indicating medium severity.
CVE-2026-60819 is a vulnerability in Oracle PeopleSoft Enterprise PeopleTools versions 8.61 through 8.63. It allows an unauthenticated attacker with network access via SSH to potentially perform unauthorized update, insert, or delete operations on accessible data. The vulnerability is rated as low severity with a CVSS 3.1 base score of 3.7, primarily impacting data integrity. Exploitation is considered difficult. Oracle has included this vulnerability in its October 2026 Critical Patch Update advisory.
CVE-2026-60814 is a vulnerability in Oracle PeopleSoft Enterprise PeopleTools Business Interlink component affecting versions 8.61 through 8.63. It requires high privileges and local access to the infrastructure where PeopleTools executes. Exploitation can lead to unauthorized read, update, insert, or delete access to some accessible data and partial denial of service. The vulnerability is rated low severity with a CVSS 3.1 base score of 3.9. Oracle has included this vulnerability in its October 2026 Critical Patch Update advisory.
CVE-2026-60809 is a vulnerability in Oracle PeopleSoft Enterprise PeopleTools versions 8.61 through 8.63. It allows an unauthenticated attacker with access to the physical communication segment of the hardware running PeopleSoft Enterprise PeopleTools to compromise the system. Successful exploitation can lead to unauthorized read, update, insert, or delete access to some PeopleSoft Enterprise PeopleTools data. The vulnerability has a CVSS 3.1 base score of 4.2, indicating medium severity with limited confidentiality and integrity impact and no availability impact.
CVE-2026-60746 is a vulnerability in Oracle Order Management within the Oracle E-Business Suite (component: Product Diagnostic Tools). It affects versions 12.2.3 through 12.2.15. The flaw allows a low privileged attacker with network access via HTTP to potentially gain unauthorized access to critical data or full access to all accessible data in Oracle Order Management. Additionally, the attacker may perform unauthorized update, insert, or delete operations on some accessible data. The vulnerability has a CVSS 3.1 base score of 5.9, indicating a medium severity level.
CVE-2026-60745 is a vulnerability in Oracle PeopleSoft Enterprise PeopleTools versions 8.61 through 8.63. It allows a high privileged attacker with logon access to the infrastructure running PeopleSoft Enterprise PeopleTools to compromise the product. Successful exploitation can lead to unauthorized access to critical or all accessible data within PeopleSoft Enterprise PeopleTools. The vulnerability has a CVSS 3.1 base score of 4.4, indicating a medium severity focused on confidentiality impact.
CVE-2026-60743 is a vulnerability in Oracle PeopleSoft Enterprise PeopleTools versions 8.61 through 8.63. It allows an unauthenticated attacker with network access via TLS to potentially gain unauthorized access to critical data or full access to all accessible PeopleSoft Enterprise PeopleTools data. The attacker may also perform unauthorized update, insert, or delete operations on some data. The vulnerability is rated medium severity with a CVSS 3.1 base score of 6.5.
CVE-2026-60662 is a vulnerability in Oracle Solaris 11.4 that allows a low privileged attacker with logon access to the infrastructure to compromise the system. Successful exploitation can lead to full takeover of Oracle Solaris. The vulnerability has a CVSS 3.1 base score of 7.8, indicating high severity with impacts on confidentiality, integrity, and availability.
CVE-2026-60500 is a vulnerability in Oracle PeopleSoft Enterprise PeopleTools Web Server component affecting versions 8.61 through 8.63. It allows an unauthenticated attacker with network access via HTTP to gain unauthorized read access to some PeopleSoft Enterprise PeopleTools data. The vulnerability has a CVSS 3.1 base score of 5.8, indicating a medium severity with confidentiality impact only. The vulnerability may also impact additional products beyond PeopleTools due to scope change. Oracle has published a Critical Patch Update advisory that includes patches addressing this and many other vulnerabilities.
CVE-2026-60453 is a vulnerability in Oracle Solaris 11.4 affecting the X Window System component. It allows a low privileged attacker with logon access to the infrastructure running Oracle Solaris to perform unauthorized read, update, insert, or delete operations on some accessible data. The vulnerability can also cause a partial denial of service. The CVSS 3.1 base score is 5.3, indicating a medium severity level.
Vulnerability in the Oracle Solaris product of Oracle Systems (component: Image Packaging System). Supported versions that are affected are 11.3 and 11.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Solaris. Successful attacks of this vulnerability can result in takeover of Oracle Solaris. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).
CVE-2026-47025 is a vulnerability in Oracle Solaris Utility component affecting versions 11.3 and 11.4. It allows a low privileged attacker with network access via HTTP to compromise the system, potentially leading to full takeover. The CVSS 3.1 base score is 8.8, indicating high severity with impacts on confidentiality, integrity, and availability. Oracle has released patches for this vulnerability as part of its October 2026 Critical Patch Update.
CVE-2026-101857 is a vulnerability in Oracle Order Management within Oracle E-Business Suite versions 12.2.3 through 12.2.15. It allows a low privileged attacker with network access via HTTP to gain unauthorized access to critical or all accessible data in Oracle Order Management. The vulnerability has a CVSS 3.1 base score of 6.5, indicating a medium severity with a high confidentiality impact but no impact on integrity or availability.
CVE-2026-101856 is a vulnerability in Oracle Order Management within Oracle E-Business Suite versions 12.2.3 through 12.2.15. It allows a low privileged attacker with network access via HTTP to gain unauthorized access to critical data or potentially all data accessible by Oracle Order Management. The vulnerability has a CVSS 3.1 base score of 6.5, indicating a medium severity focused on confidentiality impact. Oracle has released patches for this and many other vulnerabilities in its October 2026 Critical Patch Update advisory.