CVE Vulnerability Catalog

Translated CVE descriptions from NVD NIST - in English

Browse vulnerabilities by package

CISA KEV catalog updated: (v2026.08.31)

Weekly CVE digest

One email a week with newly published vulnerabilities worth knowing about. No account needed.

This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.

I agree to receive the weekly CVE digest at the address above. I can withdraw this consent at any time using the link in the footer of every message.

CVE-2026-60503
High

Vulnerability in WebCenter Content: Imaging (Core component) allows a low-privileged attacker to take over the system over the network via HTTP. Versions 12.2.1.4.0 and 14.1.2.0.0 are affected.

CVE-2026-60502
High

Vulnerability in Oracle Fusion Middleware WebCenter Content: Imaging (Core component). Versions 12.2.1.4.0 and 14.1.2.0.0 are affected. A high-privileged attacker with network access via T3 or IIOP can easily exploit this, leading to full system takeover.

CVE-2026-60499
High

Vulnerability in JD Edwards EnterpriseOne Solution Advisor (Solution Advisor component) allows a low-privileged attacker to take over the system over the network via HTTP. Version 9.2 is affected.

CVE-2026-60498
High

Vulnerability in JD Edwards EnterpriseOne Human Resources Management (version 9.2) in Human Resources component. Difficult to exploit, low-privileged attacker via JDENET can take over the system.

CVE-2026-60497
High

Vulnerability in JD Edwards EnterpriseOne CRM Foundation (version 9.2) in CRM Foundation component. Difficult to exploit, low-privileged attacker via JDENET can take over the system.

CVE-2026-60496
High

Vulnerability in JD Edwards EnterpriseOne Advanced Pricing - Procurement (version 9.2) in Advanced Pricing component. Difficult to exploit, low-privileged attacker via JDENET can take over the system.

CVE-2026-60495
High

Vulnerability in JD Edwards EnterpriseOne Requirements Planning (version 9.2) in Requirements Planning component. Difficult to exploit, low-privileged attacker via JDENET can take over the system.

CVE-2026-60494
High

Vulnerability in the JD Edwards EnterpriseOne General Ledger product of Oracle JD Edwards (component: E1 Foundation). Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise JD Edwards EnterpriseOne General Ledger.

CVE-2026-60493
High

Vulnerability in JD Edwards EnterpriseOne Human Resources Management (Human Resources component) allows a low-privileged attacker to take over the system over the network via HTTP. Version 9.2 is affected.

CVE-2026-60492
High

Vulnerability in JD Edwards EnterpriseOne HCM Foundation (OW HR PR Foundation component) version 9.2. A low-privileged attacker with network access via HTTP can cause a hang or frequent crash (DOS) and unauthorized read access to a subset of data.

CVE-2026-60490
High

Vulnerability in JD Edwards EnterpriseOne CRM Foundation version 9.2. A low-privileged attacker with network access via HTTP can take over the CRM system.

CVE-2026-60489
High

Vulnerability in Oracle's JD Edwards EnterpriseOne CRM Foundation product (component: CRM Foundation). Affected version is 9.2. An easily exploitable vulnerability allows a low-privileged attacker with network access via HTTP to compromise JD Edwards EnterpriseOne CRM Foundation.

CVE-2026-60472
High

Vulnerability in Oracle Fusion Middleware's WebCenter Content: Imaging product (component: Core). Affected versions are 12.2.1.4.0 and 14.1.2.0.0. An easily exploitable vulnerability allows a low-privileged attacker with network access via HTTP to compromise WebCenter Content: Imaging.

CVE-2026-60471
High

Vulnerability in WebCenter Content: Imaging product of Oracle Fusion Middleware, component Core. Affects versions 12.2.1.4.0 and 14.1.2.0.0. A difficult-to-exploit vulnerability allows an unauthenticated attacker with access to the physical communication segment to take over WebCenter Content: Imaging. Attacks may significantly impact additional products (scope change).

CVE-2026-60470
High

Vulnerability in WebCenter Content: Imaging (component: Core) in Oracle Fusion Middleware. A low-privileged attacker via HTTP, with user interaction, can gain unauthorized access to critical data and the ability to create, delete, or modify it, affecting other products.

CVE-2026-60469
High

Vulnerability in WebCenter Content: Imaging (Fusion Middleware). Low-privileged attacker via HTTP can compromise data confidentiality and integrity, requiring user interaction, affecting other products.

CVE-2026-60468
High

Vulnerability in WebCenter Content: Imaging (part of Oracle Fusion Middleware) versions 12.2.1.4.0 and 14.1.2.0.0. A low-privileged attacker with network access via HTTP can gain full access to critical data and modify some data.

CVE-2026-60467
High

Vulnerability in Oracle Fusion Middleware WebCenter Content: Imaging product (Core component). Affects versions 12.2.1.4.0 and 14.1.2.0.0. Difficult to exploit, requires network access via HTTP and user interaction. Successful attack can lead to takeover of WebCenter Content: Imaging.

CVE-2026-60466
High

Vulnerability in Oracle Fusion Middleware WebCenter Content: Imaging (Core component). Versions 12.2.1.4.0 and 14.1.2.0.0 are affected. A high-privileged attacker with network access via HTTP can easily exploit this, leading to full system takeover.

CVE-2026-60465
High

Vulnerability in WebCenter Content: Imaging (Core component) allows a low-privileged attacker to take over the system over the network via T3 and IIOP protocols. Versions 12.2.1.4.0 and 14.1.2.0.0 are affected.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS