These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.
CVE-2026-60399 is a vulnerability in the Receiver Service Executable component of Oracle GoldenGate, a data integration platform. This vulnerability has a CVSS 3.1 Base Score of 6.5 and can be exploited by a low-privileged attacker with network access via HTTP, potentially leading to a complete DOS of Oracle GoldenGate. Organizations should review their deployments and assess the risk of this vulnerabilit [truncated]
The CVE-2026-60398 vulnerability is an easily exploitable issue in Oracle GoldenGate's Microservices component. It allows a low-privileged attacker with network access via HTTP to compromise Oracle GoldenGate, potentially leading to a takeover. The vulnerability has a CVSS 3.1 Base Score of 8.8, indicating high impacts on confidentiality, integrity, and availability. Affected versions include 19.1.0.0.0-1 [truncated]
A high-severity vulnerability was discovered in Oracle GoldenGate, specifically in the Distribution Server executable. The vulnerability affects versions 21.3-21.21 and 23.4-23.26.1. It allows high-privileged attackers with network access via HTTPS to compromise Oracle GoldenGate, potentially leading to a takeover of the system. The CVSS 3.1 Base Score is 7.2, indicating high impacts on Confidentiality, I [truncated]
AI-assisted PatchSiren debrief based on the supplied source corpus. The CVE record was published on 2026-07-21T22:17:41.940Z and has not been modified since then. This vulnerability affects Oracle GoldenGate versions 19.1.0.0.0-19.30.0.0, 21.3-21.21, and 23.4-23.26.1, allowing low-privileged attackers with network access via HTTP to compromise Oracle GoldenGate and gain unauthorized read access to a subse [truncated]
The CVE-2026-60394 vulnerability affects Oracle GoldenGate's Admin Server Executable, allowing unauthenticated attackers with network access via HTTPS to compromise Oracle GoldenGate, potentially leading to unauthorized read access to a subset of accessible data. Organizations should prioritize patching to prevent potential data breaches. The vulnerability has a CVSS score of 5.3 and is considered medium [truncated]
AI-assisted PatchSiren debrief based on the supplied source corpus. The CVE record was published on 2026-07-21T22:17:41.717Z and has not been modified since then. The CVE-2026-60389 vulnerability affects Oracle Fusion Middleware's Service Delivery Platform, specifically versions 12.2.1.4.0 and 14.1.2.0.0. It allows unauthenticated attackers with network access via HTTP to compromise the platform, potentia [truncated]
CVE-2026-60386 is a critical vulnerability in Oracle Fusion Middleware's Service Delivery Platform, specifically affecting versions 12.2.1.4.0 and 14.1.2.0.0. The vulnerability allows unauthenticated attackers with network access via HTTP to compromise the platform, potentially leading to a takeover. The CVSS 3.1 Base Score is 9.8, indicating a critical severity level with high impacts on confidentiality, [truncated]
AI-assisted PatchSiren debrief based on the supplied source corpus. The CVE record was published on 2026-07-21T22:17:41.167Z and has not been modified since then. The CVE-2026-60384 vulnerability is a critical issue in Oracle Fusion Middleware's Service Delivery Platform, specifically affecting versions 12.2.1.4.0 and 14.1.2.0.0. It allows unauthenticated attackers with network access via T3, IIOP to comp [truncated]
AI-assisted PatchSiren debrief based on the supplied source corpus. The CVE record was published on 2026-07-21T22:17:41.053Z and has not been modified since then. The CVE-2026-60383 vulnerability affects Oracle Fusion Middleware's Service Delivery Platform, specifically versions 12.2.1.4.0 and 14.1.2.0.0. The CVSS score is 8.4, indicating high severity. The vulnerability allows low-privileged attackers wi [truncated]
AI-assisted PatchSiren debrief based on the supplied source corpus. The CVE record was published on 2026-07-21T22:17:40.940Z and has not been modified since then. CVE-2026-60382 is a high-severity vulnerability in Oracle Fusion Middleware's Service Delivery Platform, specifically in the Messaging Enabler component. The vulnerability has a CVSS score of 7.5 and allows unauthenticated attackers with network [truncated]
The CVE-2026-60381 vulnerability is a critical issue in Oracle Fusion Middleware's Service Delivery Platform, specifically affecting versions 12.2.1.4.0 and 14.1.2.0.0. It is easily exploitable by a low-privileged attacker with network access via T3, IIOP, potentially leading to a complete takeover of the Service Delivery Platform. The vulnerability has a CVSS 3.1 Base Score of 9.9, indicating a critical [truncated]
AI-assisted PatchSiren debrief based on the supplied source corpus. The CVE record was published on 2026-07-21T22:17:40.597Z and has not been modified since then. CVE-2026-60379 is a critical vulnerability in Oracle Fusion Middleware's Service Delivery Platform, specifically affecting versions 12.2.1.4.0 and 14.1.2.0.0. The vulnerability allows unauthenticated attackers with network access via SOAP to com [truncated]
The CVE-2026-60378 vulnerability is a Critical severity issue in Oracle Fusion Middleware's Service Delivery Platform, specifically affecting versions 12.2.1.4.0 and 14.1.2.0.0. This vulnerability allows unauthenticated attackers with network access via HTTP to compromise the Service Delivery Platform, potentially leading to a takeover. The CVSS 3.1 Base Score is 9.8, indicating a Critical severity level. [truncated]
The CVE-2026-60377 vulnerability affects Oracle Fusion Middleware's Service Delivery Platform, specifically versions 12.2.1.4.0 and 14.1.2.0.0. This vulnerability allows a low-privileged attacker with network access via T3, IIOP to compromise Service Delivery Platform. Successful attacks can result in unauthorized creation, deletion or modification access to critical data or all Service Delivery Platform [truncated]
The CVE-2026-60376 vulnerability affects Oracle Fusion Middleware's Service Delivery Platform, specifically versions 12.2.1.4.0 and 14.1.2.0.0. It is a critical vulnerability that allows unauthenticated attackers with network access via T3 or IIOP to compromise the platform, potentially leading to a takeover. The CVSS 3.1 score is 9.8, indicating critical severity. Organizations should prioritize verifica [truncated]
The CVE-2026-60375 vulnerability is a critical issue in Oracle Fusion Middleware's Service Delivery Platform, specifically affecting versions 12.2.1.4.0 and 14.1.2.0.0. This vulnerability allows unauthenticated attackers with network access via T3 or IIOP to compromise the Service Delivery Platform, potentially leading to a takeover. The CVSS 3.1 Base Score is 9.8, indicating a critical vulnerability. Org [truncated]
AI-assisted PatchSiren debrief based on the supplied source corpus. The CVE record was published on 2026-07-21T22:17:39.980Z and has not been modified since then. The CVE-2026-60374 vulnerability is a critical issue in Oracle Fusion Middleware's Service Delivery Platform, specifically affecting versions 12.2.1.4.0 and 14.1.2.0.0. It is an easily exploitable vulnerability that allows unauthenticated attack [truncated]
The CVE-2026-60365 vulnerability affects Oracle Weblogic Server Proxy Plug-in version 15.1.1.0.0, a component of Oracle Fusion Middleware. This critical vulnerability, with a CVSS score of 10.0, allows unauthenticated attackers with network access via HTTP to compromise the Oracle Weblogic Server Proxy Plug-in. The vulnerability may significantly impact additional products, and successful attacks can resu [truncated]
The CVE-2026-60364 vulnerability affects the Oracle Weblogic Server Proxy Plug-in product of Oracle Fusion Middleware, specifically the WebLogic Server Proxy Plug-In for Third-Party Web Servers. This vulnerability has a critical CVSS score of 9.8 and allows an unauthenticated attacker with network access via HTTP to compromise Oracle Weblogic Server Proxy Plug-in, potentially leading to unauthorized creat [truncated]
AI-assisted PatchSiren debrief based on the supplied source corpus. The CVE record was published on 2026-07-21T22:17:39.527Z and has not been modified since then. The NVD entry is currently Analyzed. This critical vulnerability in Oracle Unified Directory's OUD Core component allows unauthenticated attackers with network access via LDAP to compromise the system, potentially leading to a total takeover. Th [truncated]
AI-assisted PatchSiren debrief based on the supplied source corpus. The CVE record was published on 2026-07-21T22:17:39.293Z and has not been modified since then. The NVD entry is currently Analyzed. CVE-2026-60360 is a critical vulnerability in Oracle Unified Directory, allowing unauthenticated attackers with network access via LDAP to compromise the product. The vulnerability has a CVSS score of 10.0 an [truncated]
The CVE-2026-60359 vulnerability is in Oracle Unified Directory, a component of Oracle Fusion Middleware. This vulnerability, categorized under OUD Core, affects versions 12.2.1.4.0 and 14.1.2.1.0. It is an easily exploitable vulnerability that allows unauthenticated attackers with network access via HTTP to compromise Oracle Unified Directory. The potential impact is significant as attacks may affect add [truncated]
The CVE-2026-60358 vulnerability is a critical issue in the Oracle Access Manager product of Oracle Fusion Middleware, specifically in the Authentication Engine component. It affects versions 12.2.1.4.0 and 14.1.2.1.0. The vulnerability allows unauthenticated attackers with network access via HTTP to easily exploit the product and potentially impact additional products. Successful attacks can result in th [truncated]
CVE-2026-60357 is a low-severity vulnerability in Oracle Siebel CRM Integration's Siebel Server Sync for Exchange component. The vulnerability allows unauthenticated attackers with network access via HTTP to potentially update, insert, or delete some accessible data. Affected versions range from 17.0 to 26.5. The CVSS 3.1 score is 3.7, indicating a low severity. Organizations should review and apply secur [truncated]
AI-assisted PatchSiren debrief based on the supplied source corpus. The CVE record was published on 2026-07-21T22:17:38.713Z and has not been modified since then. CVE-2026-60355 is a critical vulnerability in Oracle Access Manager's Authentication Engine, allowing unauthenticated network attackers to compromise the product with CVSS score 9.8. The affected versions are 12.2.1.4.0 and 14.1.2.1.0. Oracle Ac [truncated]
A vulnerability was discovered in Oracle JDeveloper, specifically in the Java Business Objects component of Oracle Fusion Middleware. The affected versions are 12.2.1.4.0 and 14.1.2.0.0. This difficult-to-exploit vulnerability allows a low-privileged attacker with network access via HTTP to compromise Oracle JDeveloper. Successful attacks can result in unauthorized access to critical data or complete acce [truncated]
A vulnerability was discovered in Oracle JDeveloper ADF Faces, a component of Oracle Fusion Middleware. This CVE was published on 2026-07-21T22:17:37.920Z and was last modified on 2026-07-27T12:16:48.643Z. The vulnerability is difficult to exploit and allows unauthenticated attackers with network access via HTTP to compromise Oracle JDeveloper, potentially leading to unauthorized access to critical data. [truncated]
A low-severity vulnerability was found in JD Edwards EnterpriseOne Tools, specifically in the Enterprise Infrastructure Security component. This issue allows low-privileged attackers with logon access to compromise the system, potentially leading to unauthorized data modifications and partial denial of service. The vulnerability has a CVSS 3.1 Base Score of 3.6, indicating low severity. However, it is sti [truncated]
A low severity vulnerability was found in JD Edwards EnterpriseOne Tools. This issue is related to the Interoperability Security component and affects version 9.2.26.3. The vulnerability is difficult to exploit and allows an unauthenticated attacker with network access via JDENET to potentially cause a partial denial of service (partial DOS). The CVSS 3.1 Base Score is 3.7, indicating a low severity impac [truncated]
The CVE-2026-60345 vulnerability affects Oracle JDeveloper, specifically the ADF Shared Components. This vulnerability allows high-privileged attackers with network access via HTTP to compromise the system, potentially leading to a complete takeover. The CVSS 3.1 Base Score is 7.2, indicating high confidentiality, integrity, and availability impacts. Organizations should prioritize patching this vulnerabi [truncated]
