Oracle Fusion Middleware: Mehrere Schwachstellen

Summary

Product

Vulnerabilities 345

• Critical 10.0
  CVE-2026-47056

  Vulnerability in the Oracle Data Integrator product of Oracle Fusion Middleware (component: Rest Service). Supported ve…

  Oracle Oracle Data Integrator
  Jul 21, 2026
• Critical 10.0
  CVE-2026-60217

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that ar…

  Oracle Oracle Coherence
  Jul 21, 2026
• Critical 10.0
  CVE-2026-60358

  Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). Supp…

  Oracle Oracle Access Manager
  Jul 21, 2026
• Critical 10.0
  CVE-2026-60360

  Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core). Supported vers…

  Oracle Oracle Unified Directory
  Jul 21, 2026
• Critical 10.0
  CVE-2026-60365

  Vulnerability in the Oracle Weblogic Server Proxy Plug-in product of Oracle Fusion Middleware (component: WebLogic Serv…

  Oracle Oracle HTTP Server Oracle Weblogic Server Proxy Plug-in
  Jul 21, 2026
• Critical 10.0
  CVE-2026-60366

  Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (component: Centralized Thir…

  Oracle Oracle Platform Security for Java
  Jul 22, 2026
• Critical 10.0
  CVE-2026-60379

  Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabler). Supp…

  Oracle Service Delivery Platform
  Jul 21, 2026
• Critical 10.0
  CVE-2026-60389

  Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabler). Supp…

  Oracle Service Delivery Platform
  Jul 21, 2026
• Critical 10.0
  CVE-2026-60644

  Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Web Content Management). …

  Oracle Oracle WebCenter Content
  Jul 21, 2026
• Critical 9.9
  CVE-2026-60206 Public exploit

  Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions t…

  Oracle Oracle WebLogic Server
  Jul 21, 2026
• Critical 9.9
  CVE-2026-60333

  Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). Supp…

  Oracle Oracle Access Manager
  Jul 21, 2026
• Critical 9.9
  CVE-2026-60361

  Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core). Supported vers…

  Oracle Oracle Unified Directory
  Jul 21, 2026
• Critical 9.9
  CVE-2026-60369

  Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (component: Centralized Thir…

  Oracle Oracle Platform Security for Java
  Jul 22, 2026
• Critical 9.9
  CVE-2026-60377

  Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabler). Supp…

  Oracle Service Delivery Platform
  Jul 21, 2026
• Critical 9.9
  CVE-2026-60381

  Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabler). Supp…

  Oracle Service Delivery Platform
  Jul 21, 2026
• Critical 9.9
  CVE-2026-60422

  Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core). The supported …

  Oracle Oracle Unified Directory
  Jul 21, 2026
• Critical 9.9
  CVE-2026-60429

  Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core). Supported vers…

  Oracle Oracle Unified Directory
  Jul 21, 2026
• Critical 9.9
  CVE-2026-60445

  Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle)…

  Oracle Oracle WebCenter Enterprise Capture
  Jul 21, 2026
• Critical 9.9
  CVE-2026-60447

  Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle)…

  Oracle Oracle WebCenter Enterprise Capture
  Jul 21, 2026
• Critical 9.9
  CVE-2026-60456

  Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle)…

  Oracle Oracle WebCenter Enterprise Capture
  Jul 21, 2026
• Critical 9.9
  CVE-2026-60457

  Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle)…

  Oracle Oracle WebCenter Enterprise Capture
  Jul 21, 2026
• Critical 9.9
  CVE-2026-60458

  Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle)…

  Oracle Oracle WebCenter Enterprise Capture
  Jul 21, 2026
• Critical 9.9
  CVE-2026-60459

  Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle)…

  Oracle Oracle WebCenter Enterprise Capture
  Jul 21, 2026
• Critical 9.9
  CVE-2026-60461

  Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle)…

  Oracle Oracle WebCenter Enterprise Capture
  Jul 21, 2026
• Critical 9.9
  CVE-2026-60524

  Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle)…

  Oracle Oracle WebCenter Enterprise Capture
  Jul 21, 2026
• Critical 9.9
  CVE-2026-60531

  Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Core). Supported…

  Oracle Oracle Identity Manager Connector
  Jul 21, 2026
• Critical 9.9
  CVE-2026-60537

  Vulnerability in the Oracle Managed File Transfer product of Oracle Fusion Middleware (component: MFT Runtime Server). …

  Oracle Oracle Managed File Transfer
  Jul 21, 2026
• Critical 9.9
  CVE-2026-60542

  Vulnerability in the Oracle Business Process Management Suite product of Oracle Fusion Middleware (component: Human Wor…

  Oracle Oracle Business Process Management Suite
  Jul 21, 2026
• Critical 9.9
  CVE-2026-60547

  Vulnerability in the Oracle Managed File Transfer product of Oracle Fusion Middleware (component: MFT Runtime Server). …

  Oracle Oracle Managed File Transfer
  Jul 21, 2026
• Critical 9.9
  CVE-2026-60552

  Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported…

  Oracle Oracle WebCenter Sites
  Jul 21, 2026
• Critical 9.9
  CVE-2026-60561

  Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools). Supported …

  Oracle Oracle WebCenter Portal
  Jul 21, 2026
• Critical 9.9
  CVE-2026-60562

  Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools). Supported …

  Oracle Oracle WebCenter Portal
  Jul 21, 2026
• Critical 9.9
  CVE-2026-60565

  Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools). Supported …

  Oracle Oracle WebCenter Portal
  Jul 21, 2026
• Critical 9.9
  CVE-2026-60568

  Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools). Supported …

  Oracle Oracle WebCenter Portal
  Jul 21, 2026
• Critical 9.9
  CVE-2026-60663

  Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Web Content Management). …

  Oracle Oracle WebCenter Content
  Jul 21, 2026
• Critical 9.8
  CVE-2022-25315 Public exploit

  In Expat (aka libexpat) before 2.4.5, there is an integer overflow in storeRawNames.

  thunderbird firefox insighttoolkit4 expat Debian Ubuntu Azure Linux Alpine
  Feb 18, 2022
• Critical 9.8
  CVE-2026-41409

  Apache MINA: CWE-502 Deserialization of Untrusted Data

  The fix for CVE-2024-52046 in Apache MINA AbstractIoBuffer.getObject() was incomplete. The classname allowlist of classes allowed to be deserialized was applied too late after a static initializer in a class to be read might already have been executed. Affect…

  Apache Software Foundation Apache MINA apache-nifi jenkins-2-openjdk-21 Debian Ubuntu Wolfi Maven
  Apr 27, 2026
• Critical 9.8
  CVE-2026-60197

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that ar…

  Oracle Oracle Coherence
  Jul 21, 2026
• Critical 9.8
  CVE-2026-60198

  Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions t…

  Oracle Oracle WebLogic Server
  Jul 21, 2026
• Critical 9.8
  CVE-2026-60199

  Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions t…

  Oracle Oracle WebLogic Server
  Jul 21, 2026
• Critical 9.8
  CVE-2026-60200

  Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions t…

  Oracle Oracle WebLogic Server
  Jul 21, 2026
• Critical 9.8
  CVE-2026-60202

  Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions t…

  Oracle Oracle WebLogic Server
  Jul 21, 2026
• Critical 9.8
  CVE-2026-60204

  Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions t…

  Oracle Oracle WebLogic Server
  Jul 21, 2026
• Critical 9.8
  CVE-2026-60205

  Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions t…

  Oracle Oracle WebLogic Server
  Jul 21, 2026
• Critical 9.8
  CVE-2026-60209

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that ar…

  Oracle Oracle Coherence
  Jul 21, 2026
• Critical 9.8
  CVE-2026-60210

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that ar…

  Oracle Oracle Coherence
  Jul 21, 2026
• Critical 9.8
  CVE-2026-60212

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that ar…

  Oracle Oracle Coherence
  Jul 21, 2026
• Critical 9.8
  CVE-2026-60215

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that ar…

  Oracle Oracle Coherence
  Jul 21, 2026
• Critical 9.8
  CVE-2026-60216

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that ar…

  Oracle Oracle Coherence
  Jul 21, 2026
• Critical 9.8
  CVE-2026-60219

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that ar…

  Oracle Oracle Coherence
  Jul 21, 2026
• Critical 9.8
  CVE-2026-60221

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that ar…

  Oracle Oracle Coherence
  Jul 21, 2026
• Critical 9.8
  CVE-2026-60224

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that ar…

  Oracle Oracle Coherence
  Jul 21, 2026
• Critical 9.8
  CVE-2026-60225

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that ar…

  Oracle Oracle Coherence
  Jul 21, 2026
• Critical 9.8
  CVE-2026-60226

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that ar…

  Oracle Oracle Coherence
  Jul 21, 2026
• Critical 9.8
  CVE-2026-60227

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that ar…

  Oracle Oracle Coherence
  Jul 21, 2026
• Critical 9.8
  CVE-2026-60228

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that ar…

  Oracle Oracle Coherence
  Jul 21, 2026
• Critical 9.8
  CVE-2026-60229

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that ar…

  Oracle Oracle Coherence
  Jul 21, 2026
• Critical 9.8
  CVE-2026-60230

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that ar…

  Oracle Oracle Coherence
  Jul 21, 2026
• Critical 9.8
  CVE-2026-60232

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that ar…

  Oracle Oracle Coherence
  Jul 21, 2026
• Critical 9.8
  CVE-2026-60234

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that ar…

  Oracle Oracle Coherence
  Jul 21, 2026
• Critical 9.8
  CVE-2026-60236

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that ar…

  Oracle Oracle Coherence
  Jul 21, 2026
• Critical 9.8
  CVE-2026-60240

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that ar…

  Oracle Oracle Coherence
  Jul 21, 2026
• Critical 9.8
  CVE-2026-60241

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that ar…

  Oracle Oracle Coherence
  Jul 21, 2026
• Critical 9.8
  CVE-2026-60242

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that ar…

  Oracle Oracle Coherence
  Jul 21, 2026
• Critical 9.8
  CVE-2026-60244

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that ar…

  Oracle Oracle Coherence
  Jul 21, 2026
• Critical 9.8
  CVE-2026-60246

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that ar…

  Oracle Oracle Coherence
  Jul 21, 2026
• Critical 9.8
  CVE-2026-60247

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that ar…

  Oracle Oracle Coherence
  Jul 21, 2026
• Critical 9.8
  CVE-2026-60250

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that ar…

  Oracle Oracle Coherence
  Jul 21, 2026
• Critical 9.8
  CVE-2026-60251

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that ar…

  Oracle Oracle Coherence
  Jul 21, 2026
• Critical 9.8
  CVE-2026-60253

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that ar…

  Oracle Oracle Coherence
  Jul 21, 2026
• Critical 9.8
  CVE-2026-60254

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that ar…

  Oracle Oracle Coherence
  Jul 21, 2026
• Critical 9.8
  CVE-2026-60256

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that ar…

  Oracle Oracle Coherence
  Jul 21, 2026
• Critical 9.8
  CVE-2026-60257

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that ar…

  Oracle Oracle Coherence
  Jul 21, 2026
• Critical 9.8
  CVE-2026-60258

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that ar…

  Oracle Oracle Coherence
  Jul 21, 2026
• Critical 9.8
  CVE-2026-60259

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that ar…

  Oracle Oracle Coherence
  Jul 21, 2026
• Critical 9.8
  CVE-2026-60262

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that ar…

  Oracle Oracle Coherence
  Jul 21, 2026
• Critical 9.8
  CVE-2026-60264

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that ar…

  Oracle Oracle Coherence
  Jul 21, 2026
• Critical 9.8
  CVE-2026-60269

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that ar…

  Oracle Oracle Coherence
  Jul 21, 2026
• Critical 9.8
  CVE-2026-60272

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that ar…

  Oracle Oracle Coherence
  Jul 21, 2026
• Critical 9.8
  CVE-2026-60274

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that ar…

  Oracle Oracle Coherence
  Jul 21, 2026
• Critical 9.8
  CVE-2026-60275

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that ar…

  Oracle Oracle Coherence
  Jul 21, 2026
• Critical 9.8
  CVE-2026-60276

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that ar…

  Oracle Oracle Coherence
  Jul 21, 2026
• Critical 9.8
  CVE-2026-60278

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that ar…

  Oracle Oracle Coherence
  Jul 21, 2026
• Critical 9.8
  CVE-2026-60279

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that ar…

  Oracle Oracle Coherence
  Jul 21, 2026
• Critical 9.8
  CVE-2026-60280

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that ar…

  Oracle Oracle Coherence
  Jul 21, 2026
• Critical 9.8
  CVE-2026-60285

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that ar…

  Oracle Oracle Coherence
  Jul 21, 2026
• Critical 9.8
  CVE-2026-60286

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that ar…

  Oracle Oracle Coherence
  Jul 21, 2026
• Critical 9.8
  CVE-2026-60287

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that ar…

  Oracle Oracle Coherence
  Jul 21, 2026
• Critical 9.8
  CVE-2026-60288

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that ar…

  Oracle Oracle Coherence
  Jul 21, 2026
• Critical 9.8
  CVE-2026-60289

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that ar…

  Oracle Oracle Coherence
  Jul 21, 2026
• Critical 9.8
  CVE-2026-60290

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that ar…

  Oracle Oracle Coherence
  Jul 21, 2026
• Critical 9.8
  CVE-2026-60291

  Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions t…

  Oracle Oracle WebLogic Server
  Jul 21, 2026
• Critical 9.8
  CVE-2026-60292

  Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions t…

  Oracle Oracle WebLogic Server
  Jul 21, 2026
• Critical 9.8
  CVE-2026-60294

  Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions t…

  Oracle Oracle WebLogic Server
  Jul 21, 2026
• Critical 9.8
  CVE-2026-60296

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that ar…

  Oracle Oracle Coherence
  Jul 21, 2026
• Critical 9.8
  CVE-2026-60297

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that ar…

  Oracle Oracle Coherence
  Jul 21, 2026
• Critical 9.8
  CVE-2026-60298

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that ar…

  Oracle Oracle Coherence
  Jul 21, 2026
• Critical 9.8
  CVE-2026-60299

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that ar…

  Oracle Oracle Coherence
  Jul 21, 2026
• Critical 9.8
  CVE-2026-60300

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that ar…

  Oracle Oracle Coherence
  Jul 21, 2026
• Critical 9.8
  CVE-2026-60302

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that ar…

  Oracle Oracle Coherence
  Jul 21, 2026
• Critical 9.8
  CVE-2026-60306

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that ar…

  Oracle Oracle Coherence
  Jul 21, 2026
• Critical 9.8
  CVE-2026-60308

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that ar…

  Oracle Oracle Coherence
  Jul 21, 2026
• Critical 9.8
  CVE-2026-60328

  Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). Supp…

  Oracle Oracle Access Manager
  Jul 21, 2026
• Critical 9.8
  CVE-2026-60329

  Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Legacy UI). Supported …

  Oracle Oracle Identity Manager
  Jul 21, 2026
• Critical 9.8
  CVE-2026-60355

  Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). Supp…

  Oracle Oracle Access Manager
  Jul 21, 2026
• Critical 9.8
  CVE-2026-60362

  Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core). Supported vers…

  Oracle Oracle Unified Directory
  Jul 21, 2026
• Critical 9.8
  CVE-2026-60363

  Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware (component: Apache Plugin). Supported versi…

  Oracle Oracle HTTP Server
  Jul 21, 2026
• Critical 9.8
  CVE-2026-60364

  Vulnerability in the Oracle Weblogic Server Proxy Plug-in product of Oracle Fusion Middleware (component: WebLogic Serv…

  Oracle Oracle HTTP Server Oracle Weblogic Server Proxy Plug-in
  Jul 21, 2026
• Critical 9.8
  CVE-2026-60367

  Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (component: Centralized Thir…

  Oracle Oracle Platform Security for Java
  Jul 22, 2026
• Critical 9.8
  CVE-2026-60372

  Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (component: Centralized Thir…

  Oracle Oracle Platform Security for Java
  Jul 22, 2026
• Critical 9.8
  CVE-2026-60374

  Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabler). Supp…

  Oracle Service Delivery Platform
  Jul 21, 2026
• Critical 9.8
  CVE-2026-60375

  Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabler). Supp…

  Oracle Service Delivery Platform
  Jul 21, 2026
• Critical 9.8
  CVE-2026-60376

  Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabler). Supp…

  Oracle Service Delivery Platform
  Jul 21, 2026
• Critical 9.8
  CVE-2026-60378

  Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabler). Supp…

  Oracle Service Delivery Platform
  Jul 21, 2026
• Critical 9.8
  CVE-2026-60380

  Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabler). Supp…

  Oracle Service Delivery Platform
  Jul 21, 2026
• Critical 9.8
  CVE-2026-60384

  Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabler). Supp…

  Oracle Service Delivery Platform
  Jul 21, 2026
• Critical 9.8
  CVE-2026-60385

  Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabler). Supp…

  Oracle Service Delivery Platform
  Jul 21, 2026
• Critical 9.8
  CVE-2026-60386

  Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabler). Supp…

  Oracle Service Delivery Platform
  Jul 21, 2026
• Critical 9.8
  CVE-2026-60387

  Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabler). Supp…

  Oracle Service Delivery Platform
  Jul 21, 2026
• Critical 9.8
  CVE-2026-60388

  Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabler). Supp…

  Oracle Service Delivery Platform
  Jul 21, 2026
• Critical 9.8
  CVE-2026-60435

  Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supporte…

  Oracle Oracle WebCenter Content
  Jul 21, 2026
• Critical 9.8
  CVE-2026-60441

  Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabler). Supp…

  Oracle Service Delivery Platform
  Jul 21, 2026
• Critical 9.8
  CVE-2026-60442

  Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabler). Supp…

  Oracle Service Delivery Platform
  Jul 21, 2026
• Critical 9.8
  CVE-2026-60446

  Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle)…

  Oracle Oracle WebCenter Enterprise Capture
  Jul 21, 2026
• Critical 9.8
  CVE-2026-60460

  Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle)…

  Oracle Oracle WebCenter Enterprise Capture
  Jul 21, 2026
• Critical 9.8
  CVE-2026-60463

  Vulnerability in the WebCenter Content: Imaging product of Oracle Fusion Middleware (component: Core). Supported versio…

  Oracle WebCenter Content: Imaging
  Jul 21, 2026
• Critical 9.8
  CVE-2026-60532

  Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: PeopleSoft Appli…

  Oracle Oracle Identity Manager Connector
  Jul 21, 2026
• Critical 9.8
  CVE-2026-60535

  Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: PeopleSoft Appli…

  Oracle Oracle Identity Manager Connector
  Jul 21, 2026
• Critical 9.8
  CVE-2026-60538

  Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Enterprise Scheduling System). Su…

  Oracle Oracle SOA Suite
  Jul 21, 2026
• Critical 9.8
  CVE-2026-60541

  Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Enterprise Scheduling System). Su…

  Oracle Oracle SOA Suite
  Jul 21, 2026
• Critical 9.8
  CVE-2026-60551

  Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported…

  Oracle Oracle WebCenter Sites
  Jul 21, 2026
• Critical 9.8
  CVE-2026-60555

  Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported…

  Oracle Oracle WebCenter Sites
  Jul 21, 2026
• Critical 9.8
  CVE-2026-60566

  Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools). Supported …

  Oracle Oracle WebCenter Portal
  Jul 21, 2026
• Critical 9.8
  CVE-2026-60999

  Vulnerability in the Oracle Data Integrator product of Oracle Fusion Middleware (component: Rest Service). The supporte…

  Oracle Oracle Data Integrator
  Jul 21, 2026
• Critical 9.8
  CVE-2026-61065

  Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). Supp…

  Oracle Oracle Access Manager
  Jul 21, 2026
• Critical 9.8
  CVE-2026-61100

  Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle)…

  Oracle Oracle WebCenter Enterprise Capture
  Jul 21, 2026
• Critical 9.8
  CVE-2026-61140

  Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). The suppo…

  Oracle Oracle WebCenter Sites
  Jul 21, 2026
• Critical 9.8
  CVE-2026-61196

  Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Legacy UI). Supported …

  Oracle Oracle Identity Manager
  Jul 21, 2026
• Critical 9.6
  CVE-2026-60239

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that ar…

  Oracle Oracle Coherence
  Jul 21, 2026
• Critical 9.6
  CVE-2026-60540

  Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Integration Business Insight). Su…

  Oracle Oracle SOA Suite
  Jul 21, 2026
• Critical 9.6
  CVE-2026-60564

  Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools). Supported …

  Oracle Oracle WebCenter Portal
  Jul 21, 2026
• Critical 9.3
  CVE-2026-60220

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that ar…

  Oracle Oracle Coherence
  Jul 21, 2026
• Critical 9.3
  CVE-2026-60248

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that ar…

  Oracle Oracle Coherence
  Jul 21, 2026
• Critical 9.3
  CVE-2026-60631

  Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supporte…

  Oracle Oracle WebCenter Content
  Jul 21, 2026
• Critical 9.3
  CVE-2026-60632

  Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supporte…

  Oracle Oracle WebCenter Content
  Jul 21, 2026
• Critical 9.1
  CVE-2026-33557

  Apache Kafka: Missing JWT token validation in OAUTHBEARER authentication

  A possible security vulnerability has been identified in Apache Kafka. By default, the broker property `sasl.oauthbearer.jwt.validator.class` is set to `org.apache.kafka.common.security.oauthbearer.DefaultJwtValidator`. It accepts any JWT token without valida…

  Apache Software Foundation Apache Kafka apache-nifi debezium-3.5-connector-jdbc Ubuntu Wolfi Maven
  Apr 20, 2026
• Critical 9.1
  CVE-2026-60208

  Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions t…

  Oracle Oracle WebLogic Server
  Jul 21, 2026
• Critical 9.1
  CVE-2026-60267

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that ar…

  Oracle Oracle Coherence
  Jul 21, 2026
• Critical 9.1
  CVE-2026-60326

  Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). Supp…

  Oracle Oracle Access Manager
  Jul 21, 2026
• Critical 9.1
  CVE-2026-60438

  Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware (component: mod_ssl). Supported versions th…

  Oracle Oracle HTTP Server
  Jul 21, 2026
• Critical 9.1
  CVE-2026-60567

  Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Legacy UI). Supported …

  Oracle Oracle Identity Manager
  Jul 21, 2026
• Critical 9.1
  CVE-2026-60649

  Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Web Content Management). …

  Oracle Oracle WebCenter Content
  Jul 21, 2026
• Critical 9.1
  CVE-2026-61197

  Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Legacy UI). Supported …

  Oracle Oracle Identity Manager
  Jul 21, 2026
• Critical 9.0
  CVE-2026-60249

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that ar…

  Oracle Oracle Coherence
  Jul 21, 2026
• Critical 9.0
  CVE-2026-60424

  Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core). Supported vers…

  Oracle Oracle Unified Directory
  Jul 21, 2026
• High 8.9
  CVE-2026-5598

  Non-constant time comparisons risk private key leakage in FrodoKEM.

  Covert timing channel vulnerability in Legion of the Bouncy Castle Inc. BC-JAVA core on all (core modules). This vulnerability is associated with program files FrodoEngine.Java. This issue affects BC-JAVA: from 1.71 before 1.80.2, from 1.81 before 1.81.1, fro…

  Legion of the Bouncy Castle BC-JAVA druid thingsboard-tb-node Debian Ubuntu Wolfi Maven
  Apr 15, 2026
• High 8.8
  CVE-2025-67030

  Plexus-Utils has a Directory Traversal vulnerability in its extractFile method

  Directory Traversal vulnerability in the extractFile method of org.codehaus.plexus.util.Expand in plexus-utils before 6d780b3378829318ba5c2d29547e0012d5b29642. This allows an attacker to execute arbitrary code

  druid akhq dependency-track-bundled dependency-track Debian Ubuntu Azure Linux Wolfi Maven
  Mar 25, 2026
• High 8.8
  CVE-2026-41044 Public exploit

  Apache ActiveMQ, Apache ActiveMQ Broker, Apache ActiveMQ All: Authenticated user can perform RCE via DestinationView MBean exposed by Jolokia

  Improper Input Validation, Improper Control of Generation of Code ('Code Injection') vulnerability in Apache ActiveMQ, Apache ActiveMQ Broker, Apache ActiveMQ All. An authenticated attacker can use the admin web console page to construct a malicious broker na…

  Apache Software Foundation Apache ActiveMQ Apache ActiveMQ All Apache ActiveMQ Broker Debian Ubuntu Maven
  Apr 24, 2026
• High 8.8
  CVE-2026-47037

  Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). The …

  Oracle Oracle Access Manager
  Jul 21, 2026
• High 8.8
  CVE-2026-60203

  Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions t…

  Oracle Oracle WebLogic Server
  Jul 21, 2026
• High 8.8
  CVE-2026-60207

  Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions t…

  Oracle Oracle WebLogic Server
  Jul 21, 2026
• High 8.8
  CVE-2026-60211

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that ar…

  Oracle Oracle Coherence
  Jul 21, 2026
• High 8.8
  CVE-2026-60218

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that ar…

  Oracle Oracle Coherence
  Jul 21, 2026
• High 8.8
  CVE-2026-60261

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that ar…

  Oracle Oracle Coherence
  Jul 21, 2026
• High 8.8
  CVE-2026-60268

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that ar…

  Oracle Oracle Coherence
  Jul 21, 2026
• High 8.8
  CVE-2026-60309

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that ar…

  Oracle Oracle Coherence
  Jul 21, 2026
• High 8.8
  CVE-2026-60313

  Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions t…

  Oracle Oracle WebLogic Server
  Jul 21, 2026
• High 8.8
  CVE-2026-60334

  Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supporte…

  Oracle Oracle WebCenter Content
  Jul 21, 2026
• High 8.8
  CVE-2026-60343

  Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions t…

  Oracle Oracle WebLogic Server
  Jul 21, 2026
• High 8.8
  CVE-2026-60368

  Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (component: Centralized Thir…

  Oracle Oracle Platform Security for Java
  Jul 22, 2026
• High 8.8
  CVE-2026-60373

  Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (component: Centralized Thir…

  Oracle Oracle Platform Security for Java
  Jul 22, 2026
• High 8.8
  CVE-2026-60419

  Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core). Supported vers…

  Oracle Oracle Unified Directory
  Jul 21, 2026
• High 8.8
  CVE-2026-60423

  Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core). Supported vers…

  Oracle Oracle Unified Directory
  Jul 21, 2026
• High 8.8
  CVE-2026-60430

  Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core). Supported vers…

  Oracle Oracle Unified Directory
  Jul 21, 2026
• High 8.8
  CVE-2026-60439

  Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (component: Centralized Thir…

  Oracle Oracle Platform Security for Java
  Jul 22, 2026
• High 8.8
  CVE-2026-60455

  Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (component: Centralized Thir…

  Oracle Oracle Platform Security for Java
  Jul 22, 2026
• High 8.8
  CVE-2026-60464

  Vulnerability in the WebCenter Content: Imaging product of Oracle Fusion Middleware (component: Core). Supported versio…

  Oracle WebCenter Content: Imaging
  Jul 21, 2026
• High 8.8
  CVE-2026-60465

  Vulnerability in the WebCenter Content: Imaging product of Oracle Fusion Middleware (component: Core). Supported versio…

  Oracle WebCenter Content: Imaging
  Jul 21, 2026
• High 8.8
  CVE-2026-60472

  Vulnerability in the WebCenter Content: Imaging product of Oracle Fusion Middleware (component: Core). Supported versio…

  Oracle WebCenter Content: Imaging
  Jul 21, 2026
• High 8.8
  CVE-2026-60503

  Vulnerability in the WebCenter Content: Imaging product of Oracle Fusion Middleware (component: Core). Supported versio…

  Oracle WebCenter Content: Imaging
  Jul 21, 2026
• High 8.8
  CVE-2026-60539

  Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Integration Business Insight). Su…

  Oracle Oracle SOA Suite
  Jul 21, 2026
• High 8.8
  CVE-2026-60545

  Vulnerability in the Oracle Managed File Transfer product of Oracle Fusion Middleware (component: MFT Runtime Server). …

  Oracle Oracle Managed File Transfer
  Jul 21, 2026
• High 8.8
  CVE-2026-60549

  Vulnerability in the Oracle Managed File Transfer product of Oracle Fusion Middleware (component: MFT Runtime Server). …

  Oracle Oracle Managed File Transfer
  Jul 21, 2026
• High 8.8
  CVE-2026-60563

  Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools). Supported …

  Oracle Oracle WebCenter Portal
  Jul 21, 2026
• High 8.8
  CVE-2026-60633

  Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supporte…

  Oracle Oracle WebCenter Content
  Jul 21, 2026
• High 8.8
  CVE-2026-60634

  Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supporte…

  Oracle Oracle WebCenter Content
  Jul 21, 2026
• High 8.8
  CVE-2026-60635

  Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supporte…

  Oracle Oracle WebCenter Content
  Jul 21, 2026
• High 8.8
  CVE-2026-60636

  Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supporte…

  Oracle Oracle WebCenter Content
  Jul 21, 2026
• High 8.8
  CVE-2026-60637

  Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supporte…

  Oracle Oracle WebCenter Content
  Jul 21, 2026
• High 8.8
  CVE-2026-60638

  Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supporte…

  Oracle Oracle WebCenter Content
  Jul 21, 2026
• High 8.8
  CVE-2026-60639

  Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supporte…

  Oracle Oracle WebCenter Content
  Jul 21, 2026
• High 8.8
  CVE-2026-60651

  Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Web Content Management). …

  Oracle Oracle WebCenter Content
  Jul 21, 2026
• High 8.8
  CVE-2026-60654

  Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Web Content Management). …

  Oracle Oracle WebCenter Content
  Jul 21, 2026
• High 8.8
  CVE-2026-60655

  Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Web Content Management). …

  Oracle Oracle WebCenter Content
  Jul 21, 2026
• High 8.8
  CVE-2026-60656

  Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Web Content Management). …

  Oracle Oracle WebCenter Content
  Jul 21, 2026
• High 8.8
  CVE-2026-60664

  Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supporte…

  Oracle Oracle WebCenter Content
  Jul 21, 2026
• High 8.8
  CVE-2026-61098

  Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle)…

  Oracle Oracle WebCenter Enterprise Capture
  Jul 21, 2026
• High 8.8
  CVE-2026-61099

  Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle)…

  Oracle Oracle WebCenter Enterprise Capture
  Jul 21, 2026
• High 8.8
  CVE-2026-61246

  Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (component: Centralized Thir…

  Oracle Oracle Platform Security for Java
  Jul 22, 2026
• High 8.7
  CVE-2026-60214

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that ar…

  Oracle Oracle Coherence
  Jul 21, 2026
• High 8.7
  CVE-2026-60427

  Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core). Supported vers…

  Oracle Oracle Unified Directory
  Jul 21, 2026
• High 8.7
  CVE-2026-60437

  Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core). Supported vers…

  Oracle Oracle Unified Directory
  Jul 21, 2026
• High 8.7
  CVE-2026-60443

  Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supporte…

  Oracle Oracle WebCenter Content
  Jul 21, 2026
• High 8.7
  CVE-2026-60448

  Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supporte…

  Oracle Oracle WebCenter Content
  Jul 21, 2026
• High 8.7
  CVE-2026-60469

  Vulnerability in the WebCenter Content: Imaging product of Oracle Fusion Middleware (component: Core). Supported versio…

  Oracle WebCenter Content: Imaging
  Jul 21, 2026
• High 8.7
  CVE-2026-60470

  Vulnerability in the WebCenter Content: Imaging product of Oracle Fusion Middleware (component: Core). Supported versio…

  Oracle WebCenter Content: Imaging
  Jul 21, 2026
• High 8.7
  CVE-2026-60523

  Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supporte…

  Oracle Oracle WebCenter Content
  Jul 21, 2026
• High 8.7
  CVE-2026-60553

  Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported…

  Oracle Oracle WebCenter Sites
  Jul 21, 2026
• High 8.6
  CVE-2026-60235

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). The supported version that…

  Oracle Oracle Coherence
  Jul 21, 2026
• High 8.6
  CVE-2026-60293

  Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: WLS - Web Services). Suppor…

  Oracle Oracle WebLogic Server
  Jul 21, 2026
• High 8.6
  CVE-2026-60327

  Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). Supp…

  Oracle Oracle Access Manager
  Jul 21, 2026
• High 8.6
  CVE-2026-60356

  Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). Supp…

  Oracle Oracle Access Manager
  Jul 21, 2026
• High 8.6
  CVE-2026-60359

  Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core). Supported vers…

  Oracle Oracle Unified Directory
  Jul 21, 2026
• High 8.6
  CVE-2026-60431

  Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware (component: mod_proxy). Supported versions …

  Oracle Oracle HTTP Server
  Jul 21, 2026
• High 8.6
  CVE-2026-60536

  Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: PeopleSoft Appli…

  Oracle Oracle Identity Manager Connector
  Jul 21, 2026
• High 8.6
  CVE-2026-60550

  Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported…

  Oracle Oracle WebCenter Sites
  Jul 21, 2026
• High 8.6
  CVE-2026-60556

  Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported…

  Oracle Oracle WebCenter Sites
  Jul 21, 2026
• High 8.6
  CVE-2026-60559

  Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). Supp…

  Oracle Oracle Access Manager
  Jul 21, 2026
• High 8.5
  CVE-2026-60295

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that ar…

  Oracle Oracle Coherence
  Jul 21, 2026
• High 8.5
  CVE-2026-60330

  Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Legacy UI). Supported …

  Oracle Oracle Identity Manager
  Jul 21, 2026
• High 8.5
  CVE-2026-60420

  Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core). Supported vers…

  Oracle Oracle Unified Directory
  Jul 21, 2026
• High 8.5
  CVE-2026-60426

  Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core). Supported vers…

  Oracle Oracle Unified Directory
  Jul 21, 2026
• High 8.5
  CVE-2026-60444

  Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supporte…

  Oracle Oracle WebCenter Content
  Jul 21, 2026
• High 8.5
  CVE-2026-60452

  Vulnerability in the WebCenter Content: Imaging product of Oracle Fusion Middleware (component: Core). Supported versio…

  Oracle WebCenter Content: Imaging
  Jul 21, 2026
• High 8.4
  CVE-2026-60196

  Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions t…

  Oracle Oracle WebLogic Server
  Jul 21, 2026
• High 8.4
  CVE-2026-60383

  Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabler). Supp…

  Oracle Service Delivery Platform
  Jul 21, 2026
• High 8.4
  CVE-2026-60723

  Vulnerability in the Oracle Data Integrator product of Oracle Fusion Middleware (component: Market Place). Supported ve…

  Oracle Oracle Data Integrator
  Jul 21, 2026
• High 8.3
  CVE-2026-60471

  Vulnerability in the WebCenter Content: Imaging product of Oracle Fusion Middleware (component: Core). Supported versio…

  Oracle WebCenter Content: Imaging
  Jul 21, 2026
• High 8.3
  CVE-2026-60640

  Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supporte…

  Oracle Oracle WebCenter Content
  Jul 21, 2026
• High 8.2
  CVE-2026-60255

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that ar…

  Oracle Oracle Coherence
  Jul 21, 2026
• High 8.2
  CVE-2026-60284

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that ar…

  Oracle Oracle Coherence
  Jul 21, 2026
• High 8.2
  CVE-2026-60421

  Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core). Supported vers…

  Oracle Oracle Unified Directory
  Jul 21, 2026
• High 8.2
  CVE-2026-60428

  Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core). Supported vers…

  Oracle Oracle Unified Directory
  Jul 21, 2026
• High 8.2
  CVE-2026-60525

  Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supporte…

  Oracle Oracle WebCenter Content
  Jul 21, 2026
• High 8.2
  CVE-2026-60544

  Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: B2B Engine). Supported versions t…

  Oracle Oracle SOA Suite
  Jul 21, 2026
• High 8.1
  CVE-2026-54512 Public exploit

  jackson-databind: PolymorphicTypeValidator bypass via generic type parameters allows arbitrary class instantiation

  jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor. From 2.10.0 until 2.18.8, 2.21.4, and 3.1.4, jackson-databind's PolymorphicTypeValidator (PTV) is the primary safety mechanism guarding polymor…

  FasterXML jackson-databind druid thingsboard-tb-node Debian Ubuntu Wolfi Maven
  Jun 23, 2026
• High 8.1
  CVE-2026-60201

  Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions t…

  Oracle Oracle WebLogic Server
  Jul 21, 2026
• High 8.1
  CVE-2026-60222

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that ar…

  Oracle Oracle Coherence
  Jul 21, 2026
• High 8.1
  CVE-2026-60273

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that ar…

  Oracle Oracle Coherence
  Jul 21, 2026
• High 8.1
  CVE-2026-60277

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that ar…

  Oracle Oracle Coherence
  Jul 21, 2026
• High 8.1
  CVE-2026-60281

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that ar…

  Oracle Oracle Coherence
  Jul 21, 2026
• High 8.1
  CVE-2026-60312

  Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions t…

  Oracle Oracle WebLogic Server
  Jul 21, 2026
• High 8.1
  CVE-2026-60323

  Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Legacy UI). Supported …

  Oracle Oracle Identity Manager
  Jul 21, 2026
• High 8.1
  CVE-2026-60416

  Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). Supp…

  Oracle Oracle Access Manager
  Jul 21, 2026
• High 8.1
  CVE-2026-60417

  Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core). Supported vers…

  Oracle Oracle Unified Directory
  Jul 21, 2026
• High 8.1
  CVE-2026-60450

  Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supporte…

  Oracle Oracle WebCenter Content
  Jul 21, 2026
• High 8.1
  CVE-2026-60462

  Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supporte…

  Oracle Oracle WebCenter Content
  Jul 21, 2026
• High 8.1
  CVE-2026-60520

  Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core). Supported vers…

  Oracle Oracle Unified Directory
  Jul 21, 2026
• High 8.1
  CVE-2026-60543

  Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: B2B Engine). Supported versions t…

  Oracle Oracle SOA Suite
  Jul 21, 2026
• High 8.1
  CVE-2026-60558

  Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported…

  Oracle Oracle WebCenter Sites
  Jul 21, 2026
• High 8.1
  CVE-2026-60560

  Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: REST WebServices). Support…

  Oracle Oracle Identity Manager
  Jul 21, 2026
• High 8.1
  CVE-2026-60653

  Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Web Content Management). …

  Oracle Oracle WebCenter Content
  Jul 21, 2026
• High 8.1
  CVE-2026-61092

  Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle)…

  Oracle Oracle WebCenter Enterprise Capture
  Jul 21, 2026
• High 8.0
  CVE-2026-60325

  Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). Supp…

  Oracle Oracle Access Manager
  Jul 21, 2026
• High 8.0
  CVE-2026-60371

  Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (component: Centralized Thir…

  Oracle Oracle Platform Security for Java
  Jul 22, 2026
• High 8.0
  CVE-2026-60533

  Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Generic Unix Con…

  Oracle Oracle Identity Manager Connector
  Jul 21, 2026
• High 8.0
  CVE-2026-60643

  Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supporte…

  Oracle Oracle WebCenter Content
  Jul 21, 2026
• High 8.0
  CVE-2026-60646

  Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Web Content Management). …

  Oracle Oracle WebCenter Content
  Jul 21, 2026
• High 8.0
  CVE-2026-60648

  Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Web Content Management). …

  Oracle Oracle WebCenter Content
  Jul 21, 2026
• High 8.0
  CVE-2026-60650

  Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Web Content Management). …

  Oracle Oracle WebCenter Content
  Jul 21, 2026
• High 8.0
  CVE-2026-60652

  Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Web Content Management). …

  Oracle Oracle WebCenter Content
  Jul 21, 2026
• High 8.0
  CVE-2026-61067

  Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). Supp…

  Oracle Oracle Access Manager
  Jul 21, 2026
• High 7.8
  CVE-2026-60271

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that ar…

  Oracle Oracle Coherence
  Jul 21, 2026
• High 7.8
  CVE-2026-60454

  Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware (component: Core). Supported versions that …

  Oracle Oracle HTTP Server
  Jul 21, 2026
• High 7.8
  CVE-2026-60530

  Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware (component: mod_http2.so). The supported ve…

  Oracle Oracle HTTP Server
  Jul 21, 2026
• High 7.8
  CVE-2026-60625

  Vulnerability in the Oracle Data Integrator product of Oracle Fusion Middleware (component: Studio). Supported versions…

  Oracle Oracle Data Integrator
  Jul 21, 2026
• High 7.7
  CVE-2026-60440

  Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabler). Supp…

  Oracle Service Delivery Platform
  Jul 21, 2026
• High 7.7
  CVE-2026-60534

  Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: PeopleSoft Appli…

  Oracle Oracle Identity Manager Connector
  Jul 21, 2026
• High 7.7
  CVE-2026-60548

  Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Integration Business Insight). Su…

  Oracle Oracle SOA Suite
  Jul 21, 2026
• High 7.7
  CVE-2026-60657

  Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supporte…

  Oracle Oracle WebCenter Content
  Jul 21, 2026
• High 7.6
  CVE-2026-60522

  Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supporte…

  Oracle Oracle WebCenter Content
  Jul 21, 2026
• High 7.6
  CVE-2026-60528

  Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console). Supported version…

  Oracle Oracle WebLogic Server
  Jul 21, 2026
• High 7.6
  CVE-2026-60641

  Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supporte…

  Oracle Oracle WebCenter Content
  Jul 21, 2026
• High 7.6
  CVE-2026-60642

  Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supporte…

  Oracle Oracle WebCenter Content
  Jul 21, 2026
• High 7.5
  CVE-2026-1605

  The Eclipse Jetty Server Artifact has a Gzip request memory leak

  In Eclipse Jetty, versions 12.0.0-12.0.31 and 12.1.0-12.0.5, class GzipHandler exposes a vulnerability when a compressed HTTP request, with Content-Encoding: gzip, is processed and the corresponding response is not compressed. This happens because the JDK Inf…

  Eclipse Foundation Eclipse Jetty druid trino Debian Ubuntu Wolfi Maven
  Mar 5, 2026
• High 7.5
  CVE-2026-42587

  Netty: HttpContentDecompressor maxAllocation bypass via Content-Encoding: br/zstd/snappy enables decompression bomb DoS

  Netty is an asynchronous, event-driven network application framework. Prior to 4.2.13.Final and 4.1.133.Final, HttpContentDecompressor accepts a maxAllocation parameter to limit decompression buffer size and prevent decompression bomb attacks. This limit is c…

  netty io.netty netty netty-codec-http Debian Wolfi Maven
  May 13, 2026
• High 7.5
  CVE-2026-60223

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that ar…

  Oracle Oracle Coherence
  Jul 21, 2026
• High 7.5
  CVE-2026-60252

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that ar…

  Oracle Oracle Coherence
  Jul 21, 2026
• High 7.5
  CVE-2026-60263

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that ar…

  Oracle Oracle Coherence
  Jul 21, 2026
• High 7.5
  CVE-2026-60301

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that ar…

  Oracle Oracle Coherence
  Jul 21, 2026
• High 7.5
  CVE-2026-60320

  Vulnerability in the Oracle Data Integrator product of Oracle Fusion Middleware (component: Patchset Assistant). Suppor…

  Oracle Oracle Data Integrator
  Jul 21, 2026
• High 7.5
  CVE-2026-60370

  Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (component: Centralized Thir…

  Oracle Oracle Platform Security for Java
  Jul 22, 2026
• High 7.5
  CVE-2026-60382

  Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabler). Supp…

  Oracle Service Delivery Platform
  Jul 21, 2026
• High 7.5
  CVE-2026-60425

  Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core). Supported vers…

  Oracle Oracle Unified Directory
  Jul 21, 2026
• High 7.5
  CVE-2026-60436

  Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core). Supported vers…

  Oracle Oracle Unified Directory
  Jul 21, 2026
• High 7.5
  CVE-2026-60467

  Vulnerability in the WebCenter Content: Imaging product of Oracle Fusion Middleware (component: Core). Supported versio…

  Oracle WebCenter Content: Imaging
  Jul 21, 2026
• High 7.5
  CVE-2026-60554

  Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported…

  Oracle Oracle WebCenter Sites
  Jul 21, 2026
• High 7.5
  CVE-2026-60622

  Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware (component: Security Framework). Supported v…

  Oracle Oracle JDeveloper
  Jul 21, 2026
• High 7.5
  CVE-2026-60629

  Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware (component: Data Visualization Tools). Suppo…

  Oracle Oracle JDeveloper
  Jul 21, 2026
• High 7.5
  CVE-2026-60658

  Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supporte…

  Oracle Oracle WebCenter Content
  Jul 21, 2026
• High 7.2
  CVE-2026-60153

  Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console). Supported version…

  Oracle Oracle WebLogic Server
  Jul 21, 2026
• High 7.2
  CVE-2026-60245

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that ar…

  Oracle Oracle Coherence
  Jul 21, 2026
• High 7.2
  CVE-2026-60335

  Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supporte…

  Oracle Oracle WebCenter Content
  Jul 21, 2026
• High 7.2
  CVE-2026-60345

  Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware (component: ADF Shared Components). Supporte…

  Oracle Oracle JDeveloper
  Jul 21, 2026
• High 7.2
  CVE-2026-60418

  Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core). Supported vers…

  Oracle Oracle Unified Directory
  Jul 21, 2026
• High 7.2
  CVE-2026-60466

  Vulnerability in the WebCenter Content: Imaging product of Oracle Fusion Middleware (component: Core). Supported versio…

  Oracle WebCenter Content: Imaging
  Jul 21, 2026
• High 7.2
  CVE-2026-60502

  Vulnerability in the WebCenter Content: Imaging product of Oracle Fusion Middleware (component: Core). Supported versio…

  Oracle WebCenter Content: Imaging
  Jul 21, 2026
• High 7.2
  CVE-2026-60519

  Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core). Supported vers…

  Oracle Oracle Unified Directory
  Jul 21, 2026
• High 7.2
  CVE-2026-60529

  Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console). Supported version…

  Oracle Oracle WebLogic Server
  Jul 21, 2026
• High 7.2
  CVE-2026-60546

  Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Integration Business Insight). Su…

  Oracle Oracle SOA Suite
  Jul 21, 2026
• High 7.2
  CVE-2026-60645

  Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Web Content Management). …

  Oracle Oracle WebCenter Content
  Jul 21, 2026
• High 7.1
  CVE-2026-60305

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that ar…

  Oracle Oracle Coherence
  Jul 21, 2026
• High 7.1
  CVE-2026-60449

  Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supporte…

  Oracle Oracle WebCenter Content
  Jul 21, 2026
• High 7.1
  CVE-2026-60451

  Vulnerability in the WebCenter Content: Imaging product of Oracle Fusion Middleware (component: Core). Supported versio…

  Oracle WebCenter Content: Imaging
  Jul 21, 2026
• High 7.1
  CVE-2026-60468

  Vulnerability in the WebCenter Content: Imaging product of Oracle Fusion Middleware (component: Core). Supported versio…

  Oracle WebCenter Content: Imaging
  Jul 21, 2026
• High 7.1
  CVE-2026-60527

  Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console). Supported version…

  Oracle Oracle WebLogic Server
  Jul 21, 2026
• High 7.1
  CVE-2026-60647

  Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Web Content Management). …

  Oracle Oracle WebCenter Content
  Jul 21, 2026
• High 7.0
  CVE-2026-61061

  Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware (component: Security Framework). Supported v…

  Oracle Oracle JDeveloper
  Jul 21, 2026
• Medium 6.9
  CVE-2026-34480

  Apache Log4j Core: Silent log event loss in XmlLayout due to unescaped XML 1.0 forbidden characters

  Apache Log4j Core's XmlLayout https://logging.apache.org/log4j/2.x/manual/layouts.html#XmlLayout , in versions up to and including 2.25.3, fails to sanitize characters forbidden by the XML 1.0 specification https://www.w3.org/TR/xml/#charsets producing invali…

  Apache Software Foundation Apache Log4j Core druid airflow-3 Debian Ubuntu Wolfi Maven
  Apr 10, 2026
• Medium 6.5
  CVE-2025-68431

  libheif has Potential Heap Buffer Over-Read

  libheif is an HEIF and AVIF file format decoder and encoder. Prior to version 1.21.0, a crafted HEIF that exercises the overlay image item path triggers a heap buffer over-read in `HeifPixelImage::overlay()`. The function computes a negative row length (likel…

  strukturag libheif libheif libheif Debian Ubuntu Alpine
  Dec 29, 2025
• Medium 6.5
  CVE-2026-42404

  Apache Neethi: Unrestricted HTTP Redirect Following in Policy References

  Apache Neethi does not impose any restrictions on URIs when manually fetching remote policy references through the PolicyReference API. When an application explicitly calls the API to retrieve a policy from a remote URI, an outbound request is made for arbitr…

  Apache Software Foundation Apache Neethi wildfly-openjdk-21 wildfly-openjdk-17 Wolfi Maven
  May 1, 2026
• Medium 6.5
  CVE-2026-60213

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that ar…

  Oracle Oracle Coherence
  Jul 21, 2026
• Medium 6.5
  CVE-2026-60243

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that ar…

  Oracle Oracle Coherence
  Jul 21, 2026
• Medium 6.5
  CVE-2026-60304

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that ar…

  Oracle Oracle Coherence
  Jul 21, 2026
• Medium 6.5
  CVE-2026-60319

  Vulnerability in the Oracle Data Integrator product of Oracle Fusion Middleware (component: Patchset Assistant). Suppor…

  Oracle Oracle Data Integrator
  Jul 21, 2026
• Medium 6.5
  CVE-2026-60350

  Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware (component: ADF Faces). Supported versions t…

  Oracle Oracle JDeveloper
  Jul 21, 2026
• Medium 6.5
  CVE-2026-60557

  Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported…

  Oracle Oracle WebCenter Sites
  Jul 21, 2026
• Medium 6.4
  CVE-2026-61217

  Vulnerability in the Oracle Security Service product of Oracle Fusion Middleware (component: Oracle SSL API). The suppo…

  Oracle Oracle Security Service
  Jul 21, 2026
• Medium 6.3
  CVE-2026-34481

  Apache Log4j JSON Template Layout: Improper serialization of non-finite floating-point values in JsonTemplateLayout

  Apache Log4j's JsonTemplateLayout https://logging.apache.org/log4j/2.x/manual/json-template-layout.html , in versions up to and including 2.25.3, produces invalid JSON output when log events contain non-finite floating-point values (NaN, Infinity, or -Infinit…

  Apache Software Foundation Apache Log4j JSON Template Layout spark-4.0-scala-2.13 spark-4.1-scala-2.13 Debian Ubuntu Wolfi Maven
  Apr 10, 2026
• Medium 6.3
  CVE-2026-5588

  PKIX draft CompositeVerifier accepts empty signature sequence as valid.

  Use of a Broken or Risky Cryptographic Algorithm vulnerability in Legion of the Bouncy Castle Inc. BC-JAVA bcpkix on all (pkix modules), Legion of the Bouncy Castle Inc. BCPKIX-FIPS bcpkix on All (pkix modules), Legion of the Bouncy Castle Inc. BCPIX-LTS bcpk…

  Legion of the Bouncy Castle BC-JAVA BCPKIX-FIPS BCPIX-LTS Debian Ubuntu Wolfi Maven
  Apr 15, 2026
• Medium 6.1
  CVE-2026-60146

  Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). Supp…

  Oracle Oracle Access Manager
  Jul 21, 2026
• Medium 6.0
  CVE-2025-7962

  Jakarta Mail vulnerable to SMTP Injection

  In Jakarta Mail versions prior to 2.0.2 it is possible to perform an SMTP Injection by utilizing the \r and \n UTF-8 characters to separate different messages.

  Eclipse Foundation Jakarta Mail thingsboard-tb-node apache-nifi Debian Ubuntu Wolfi Maven
  Jul 21, 2025
• Medium 6.0
  CVE-2026-60265

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that ar…

  Oracle Oracle Coherence
  Jul 21, 2026
• Medium 5.9
  CVE-2026-22737

  Spring Framework Improper Path Limitation with Script View Templates

  Use of Java scripting engine enabled (e.g. JRuby, Jython) template views in Spring MVC and Spring WebFlux applications can result in disclosure of content from files outside the configured locations for script template views. This issue affects Spring Framewo…

  Spring Spring Framework thingsboard-tb-node thingsboard-tb-mqtt-transport Debian Ubuntu Wolfi Maven
  Mar 19, 2026
• Medium 5.9
  CVE-2026-60266

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that ar…

  Oracle Oracle Coherence
  Jul 21, 2026
• Medium 5.9
  CVE-2026-60348

  Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware (component: ADF Faces). Supported versions t…

  Oracle Oracle JDeveloper
  Jul 21, 2026
• Medium 5.9
  CVE-2026-60349

  Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware (component: Java Business Objects). Supporte…

  Oracle Oracle JDeveloper
  Jul 21, 2026
• Medium 5.5
  CVE-2026-60270

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that ar…

  Oracle Oracle Coherence
  Jul 21, 2026
• Medium 5.4
  CVE-2026-60231

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that ar…

  Oracle Oracle Coherence
  Jul 21, 2026
• Medium 5.4
  CVE-2026-60238

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that ar…

  Oracle Oracle Coherence
  Jul 21, 2026
• Medium 5.4
  CVE-2026-60282

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that ar…

  Oracle Oracle Coherence
  Jul 21, 2026
• Medium 5.3
  CVE-2025-48924 Public exploit

  Apache Commons Lang, Apache Commons Lang: ClassUtils.getClass(...) can throw a StackOverflowError on very long inputs

  Uncontrolled Recursion vulnerability in Apache Commons Lang. This issue affects Apache Commons Lang: Starting with commons-lang:commons-lang 2.0 to 2.6, and, from org.apache.commons:commons-lang3 3.0 before 3.18.0. The methods ClassUtils.getClass(...) can thr…

  Apache Software Foundation Apache Commons Lang druid thingsboard-tb-node Debian Ubuntu Azure Linux Wolfi Maven
  Jul 11, 2025
• Medium 5.3
  CVE-2026-60237

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that ar…

  Oracle Oracle Coherence
  Jul 21, 2026
• Medium 5.3
  CVE-2026-60260

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that ar…

  Oracle Oracle Coherence
  Jul 21, 2026
• Medium 5.3
  CVE-2026-60283

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that ar…

  Oracle Oracle Coherence
  Jul 21, 2026
• Medium 5.3
  CVE-2026-60342

  Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). Supp…

  Oracle Oracle Access Manager
  Jul 21, 2026
• Medium 5.2
  CVE-2026-60501

  Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabler). Supp…

  Oracle Service Delivery Platform
  Jul 21, 2026
• Medium 4.8
  CVE-2026-60351

  Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware (component: ADF Faces). Supported versions t…

  Oracle Oracle JDeveloper
  Jul 21, 2026
• Medium 4.3
  CVE-2026-60233

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). The supported version that…

  Oracle Oracle Coherence
  Jul 21, 2026
• Medium 4.3
  CVE-2026-60303

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that ar…

  Oracle Oracle Coherence
  Jul 21, 2026
• Medium 4.3
  CVE-2026-60307

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that ar…

  Oracle Oracle Coherence
  Jul 21, 2026
• Low 3.7
  CVE-2026-60352

  Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware (component: ADF Faces). Supported versions t…

  Oracle Oracle JDeveloper
  Jul 21, 2026
• Low 3.7
  CVE-2026-60354

  Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware (component: Data Visualization Tools). Suppo…

  Oracle Oracle JDeveloper
  Jul 21, 2026
• Low 3.3
  CVE-2026-60318

  Vulnerability in the Oracle Data Integrator product of Oracle Fusion Middleware (component: Patchset Assistant). Suppor…

  Oracle Oracle Data Integrator
  Jul 21, 2026
• Low 3.1
  CVE-2026-60353

  Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware (component: ADF Faces). Supported versions t…

  Oracle Oracle JDeveloper
  Jul 21, 2026

Revision history

1. 2026-10-07 #3

   Neue Updates aufgenommen

2. 2026-07-22 #2

   Referenz(en) aufgenommen: EUVD-2026-47848, EUVD-2026-47849, EUVD-2026-47850, EUVD-2026-47851, EUVD-2026-47853, EUVD-2026-47854, EUVD-2026-47856, EUVD-2026-47855, EUVD-2026-47857, EUVD-2026-47858, EUVD-2026-47852

3. 2026-07-21 #1

   Initiale Fassung

References

• Oracle Critical Patch Update Advisory - July 2026 - Appendix Oracle Fusion Middleware vom 2026-07-21
  https://www.oracle.com/security-alerts/cpujul2026.html#AppendixFMW
• Absolute Secure Access Security Information vom 2026-10-07
  https://www.absolute.com/platform/security-information/vulnerability-archive/multiple-vulnerabilities-addressed-in-secure-access-14-60-and-insights-for-network-4-50