These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.
A high-severity vulnerability was discovered in JD Edwards EnterpriseOne Advanced Pricing - Procurement, a product of Oracle JD Edwards. The vulnerability, tracked as CVE-2026-60496, has a CVSS score of 7.5 and can be exploited by a low-privileged attacker with network access via JDENET, potentially leading to a takeover of the affected system. This vulnerability is located in the Advanced Pricing compone [truncated]
A high-severity vulnerability was discovered in JD Edwards EnterpriseOne Requirements Planning, a component of Oracle JD Edwards. The vulnerability has a CVSS score of 7.5 and can be exploited by a low-privileged attacker with network access via JDENET, potentially leading to a takeover of the affected system. This vulnerability is difficult to exploit and affects version 9.2 of the product.
AI-assisted PatchSiren debrief based on the supplied source corpus. The CVE record was published on 2026-07-21T22:17:50.210Z and has not been modified since then. This vulnerability affects JD Edwards EnterpriseOne HCM Foundation 9.2, allowing low-privileged attackers with network access via HTTP to cause a hang or crash (DOS) and read a subset of accessible data. The CVSS 3.1 score is 7.1, indicating hig [truncated]
A high-severity vulnerability was discovered in JD Edwards EnterpriseOne CRM Foundation, a product of Oracle JD Edwards. The vulnerability, tracked as CVE-2026-60490, has a CVSS score of 8.8 and allows low-privileged attackers with network access via HTTP to compromise the system. Successful attacks can result in a takeover of JD Edwards EnterpriseOne CRM Foundation. The vulnerability is located in the CR [truncated]
A high-severity vulnerability was discovered in JD Edwards EnterpriseOne CRM Foundation, a product of Oracle JD Edwards. The vulnerability, tracked as CVE-2026-60489, has a CVSS score of 8.8 and can be exploited by low-privileged attackers with network access via HTTP, potentially leading to a takeover of the affected system. The vulnerability is located in the CRM Foundation component of JD Edwards Enter [truncated]
A high-severity vulnerability was discovered in Oracle Fusion Middleware's WebCenter Content: Imaging product, specifically in the Core component. The vulnerability is easily exploitable, allowing a low-privileged attacker with network access via HTTP to compromise the system. Successful attacks can result in a takeover of WebCenter Content: Imaging. This vulnerability has significant implications for adm [truncated]
A high-severity vulnerability was discovered in Oracle Fusion Middleware's WebCenter Content: Imaging product, tracked as CVE-2026-60471, with a CVSS score of 8.3. The vulnerability allows unauthenticated attackers with access to the physical communication segment to compromise the product, potentially impacting additional products due to its scope change. Successful attacks can result in the takeover of [truncated]
A high-severity vulnerability was discovered in Oracle Fusion Middleware's WebCenter Content: Imaging, tracked as CVE-2026-60470, with a CVSS score of 8.7. This easily exploitable vulnerability allows a low-privileged attacker with network access via HTTP to compromise WebCenter Content: Imaging. Successful attacks require human interaction and can significantly impact additional products. The vulnerabili [truncated]
A high-severity vulnerability was discovered in Oracle Fusion Middleware's WebCenter Content: Imaging, tracked as CVE-2026-60469, with a CVSS score of 8.7. It can be easily exploited by a low-privileged attacker with network access via HTTP, potentially impacting additional products. Successful attacks require human interaction and can result in unauthorized creation, deletion, or modification access to c [truncated]
CVE-2026-60466 is a high severity vulnerability in Oracle Fusion Middleware WebCenter Content: Imaging. The vulnerability affects versions 12.2.1.4.0 and 14.1.2.0.0, and allows a high privileged attacker with network access via HTTP to compromise WebCenter Content: Imaging, potentially leading to takeover. The CVE record was published on 2026-07-21T22:17:49.080Z and has not been modified since then. Evide [truncated]
CVE-2026-60465 is a high-severity vulnerability in Oracle Fusion Middleware's WebCenter Content: Imaging product, specifically in the Core component. The vulnerability is rated 8.8 on the CVSS scale and allows a low-privileged attacker with network access via T3, IIOP to compromise WebCenter Content: Imaging. Successful attacks can result in takeover of WebCenter Content: Imaging. Organizations using Orac [truncated]
A high-severity vulnerability was found in Oracle Fusion Middleware's WebCenter Content: Imaging product, specifically in the Core component. The vulnerability is easily exploitable, allowing a low-privileged attacker with network access via HTTP to compromise WebCenter Content: Imaging, potentially leading to a takeover. This vulnerability, CVE-2026-60464, affects supported versions 12.2.1.4.0 and 14.1.2 [truncated]
A high-severity vulnerability (CVSS score 8.1) exists in Oracle WebCenter Content, specifically in the Content Server component. The vulnerability allows unauthenticated attackers with network access via HTTP to compromise the system, potentially leading to a takeover of Oracle WebCenter Content. Affected versions include 12.2.1.4.0 and 14.1.2.0.0. This vulnerability is difficult to exploit and requires n [truncated]
The CVE-2026-60458 vulnerability is in the Client Bundle component of Oracle WebCenter Enterprise Capture, a product within Oracle Fusion Middleware. This vulnerability has a CVSS score of 9.9, indicating a critical severity level. It can be exploited by low-privileged attackers with network access via T3 or IIOP, potentially impacting additional products. The vulnerability allows attackers to compromise [truncated]
AI-assisted PatchSiren debrief based on the supplied source corpus. The CVE record was published on 2026-07-21T22:17:47.857Z and has not been modified since then. CVE-2026-60454 is a vulnerability in Oracle HTTP Server, allowing low-privileged attackers with logon access to compromise the server, potentially leading to takeover. The vulnerability has a CVSS score of 7.8 and affects versions 12.2.1.4.0 and [truncated]
The CVE-2026-60452 vulnerability is a highly critical issue in Oracle Webcenter Content: Imaging, affecting versions 12.2.1.4.0 and 14.1.2.0.0. This vulnerability allows low-privileged attackers with network access via HTTP to compromise the system, potentially impacting additional products and allowing unauthorized access to critical data or complete access to all Webcenter Content: Imaging accessible da [truncated]
AI-assisted PatchSiren debrief based on the supplied source corpus. The CVE record was published on 2026-07-21T22:17:47.637Z and has not been modified since then. The CVE-2026-60451 vulnerability is an easily exploitable vulnerability in the Webcenter Content: Imaging product of Oracle Fusion Middleware. It allows low-privileged attackers with network access via HTTP to compromise Webcenter Content: Imagi [truncated]
The CVE-2026-60450 vulnerability affects Oracle WebCenter Content, specifically the Content Server component, in versions 12.2.1.4.0 and 14.1.2.0.0. This difficult-to-exploit vulnerability allows unauthenticated attackers with network access via HTTPS to potentially compromise the system. Successful attacks can result in takeover of Oracle WebCenter Content. The CVSS 3.1 Base Score is 8.1, indicating high [truncated]
The CVE-2026-60449 vulnerability affects Oracle WebCenter Content, a component of Oracle Fusion Middleware. This vulnerability is classified as easily exploitable, allowing unauthenticated attackers with logon to the infrastructure to compromise Oracle WebCenter Content. The vulnerability has a CVSS 3.1 Base Score of 7.1, indicating high severity. Successful attacks can result in unauthorized access to cr [truncated]
AI-assisted PatchSiren debrief based on the supplied source corpus. The CVE record was published on 2026-07-21T22:17:46.853Z and has not been modified since then. The CVE-2026-60444 vulnerability in Oracle WebCenter Content allows a low-privileged attacker with network access via HTTP to compromise Oracle WebCenter Content. The vulnerability has a CVSS score of 8.5, indicating a high severity. Successful [truncated]
AI-assisted PatchSiren debrief based on the supplied source corpus. The CVE record was published on 2026-07-21T22:17:46.283Z and has not been modified since then. The NVD entry is currently Analyzed. CVE-2026-60438 is a vulnerability in Oracle HTTP Server's mod_ssl component, affecting versions 12.2.1.4.0 and 14.1.2.0.0. The vulnerability allows unauthenticated attackers with network access via HTTP to co [truncated]
CVE-2026-60435 is a critical vulnerability in Oracle WebCenter Content, a component of Oracle Fusion Middleware. The vulnerability affects supported versions 12.2.1.4.0 and 14.1.2.0.0, allowing unauthenticated attackers with network access via HTTP to compromise the system. This vulnerability has a high CVSS score of 9.8, indicating severe impacts on confidentiality, integrity, and availability. Administr [truncated]
The CVE-2026-60425 vulnerability affects Oracle Unified Directory, a component of Oracle Fusion Middleware. This vulnerability, classified under OUD Core, allows unauthenticated attackers with network access via LDAP to compromise the directory. The potential impact includes a hang or frequently repeatable crash (complete DOS) of Oracle Unified Directory. The CVSS score of 7.5 indicates high severity, emp [truncated]
The CVE-2026-60411 vulnerability affects Oracle TimesTen In-Memory Database version 26.1.1.1.0, allowing an unauthenticated attacker with access to the physical communication segment to potentially cause a hang or frequently repeatable crash. This vulnerability has a CVSS 3.1 Base Score of 6.5, indicating medium severity. The vulnerability is easily exploitable and requires access to the physical communic [truncated]
The CVE-2026-60410 vulnerability affects Oracle TimesTen In-Memory Database version 26.1.1.1.0, a low-privileged attacker with network access via HTTPS can compromise the database, potentially causing partial denial of service. The CVSS 3.1 Base Score is 4.3, indicating a medium severity. Users should apply security patches to prevent partial denial of service attacks. The CVE record was published on 2026 [truncated]
The CVE-2026-60409 vulnerability is a security issue in the TimesTen In-Memory Database product of Oracle TimesTen In-Memory Database (component: Kubernetes Operator). The supported version that is affected is 26.1.1.1.0. This vulnerability allows high privileged attackers with logon to the infrastructure where TimesTen In-Memory Database executes to compromise TimesTen In-Memory Database. Successful atta [truncated]
AI-assisted PatchSiren debrief based on the supplied source corpus. The CVE record was published on 2026-07-21T22:17:43.390Z and has not been modified since then. The CVE-2026-60408 vulnerability affects Oracle TimesTen In-Memory Database version 26.1.1.1.0, allowing low-privileged attackers with network access via HTTPS to compromise the database, potentially leading to unauthorized read access to a subs [truncated]
The CVE-2026-60407 vulnerability affects the TimesTen In-Memory Database product of Oracle TimesTen In-Memory Database (component: Kubernetes Operator). This difficult-to-exploit vulnerability allows a low-privileged attacker with logon to the infrastructure where TimesTen In-Memory Database executes to compromise the database. While the vulnerability is in TimesTen In-Memory Database, attacks may signifi [truncated]
The CVE-2026-60404 vulnerability is in the Kubernetes Operator component of Oracle TimesTen In-Memory Database version 26.1.1.1.0. This vulnerability allows a low-privileged attacker with network access via HTTPS to compromise the database, potentially causing a hang or frequently repeatable crash (complete DOS) of TimesTen In-Memory Database. The CVSS 3.1 Base Score is 6.5, indicating a medium severity. [truncated]
The CVE-2026-60401 vulnerability is in the Kubernetes Operator component of Oracle TimesTen In-Memory Database version 26.1.1.1.0. This vulnerability is classified as easily exploitable, allowing a low-privileged attacker with logon to the infrastructure to potentially compromise TimesTen In-Memory Database. The vulnerability has a CVSS 3.1 Base Score of 6.5, indicating a medium severity level. Successful [truncated]
