These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.
A vulnerability was discovered in Oracle HRMS (France), a component of Oracle E-Business Suite. The vulnerability affects versions 12.2.3-12.2.15 and has a CVSS score of 5.4, indicating medium severity. An attacker with low privileges and network access via HTTP can exploit this vulnerability, potentially leading to unauthorized updates, inserts, or deletes of accessible data, as well as unauthorized read [truncated]
A high-severity vulnerability was discovered in the Core component of Oracle WebLogic Server, which is part of Oracle Fusion Middleware. The vulnerability, rated with a CVSS score of 8.8, affects versions 12.2.1.4.0 and 14.1.1.0.0. An attacker with low privileges and network access via HTTP can exploit this vulnerability to compromise Oracle WebLogic Server, potentially leading to a takeover. Organization [truncated]
The CVE-2026-60335 vulnerability affects Oracle WebCenter Content, specifically versions 12.2.1.4.0 and 14.1.2.0.0. This is an easily exploitable vulnerability that allows high privileged attackers with network access via HTTP to compromise the system, potentially leading to takeover. The CVSS 3.1 Base Score is 7.2, indicating high severity. Users and administrators should prioritize patching and assess e [truncated]
The CVE-2026-60334 vulnerability affects Oracle WebCenter Content, specifically the Content Server component. This vulnerability is classified as easily exploitable, allowing low-privileged attackers with network access via HTTP to compromise the system, potentially leading to takeover. The CVSS score of 8.8 indicates high severity, impacting confidentiality, integrity, and availability. Organizations usi [truncated]
A vulnerability exists in MySQL Server and MySQL Cluster products of Oracle MySQL, specifically in the Server: Group Replication GCS component. The affected versions are MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster: 8.0.0-8.0.47, 8.4.0-8.4.10, and 9.7.0-9.7.1. This difficult-to-exploit vulnerability allows a high-privileged attacker with logon to the infrastructure where MySQL Server and MySQL C [truncated]
A vulnerability exists in MySQL Server and MySQL Cluster products of Oracle MySQL, specifically in the Server: Replication component. The vulnerability is difficult to exploit and allows high privileged attackers with logon to the infrastructure where MySQL Server and MySQL Cluster execute to compromise these products. Successful attacks can result in takeover of MySQL Server and MySQL Cluster. The CVSS 3 [truncated]
A high-severity vulnerability was discovered in Oracle Access Manager, a product of Oracle Fusion Middleware. The vulnerability, tracked as CVE-2026-60327, affects versions 12.2.1.4.0 and 14.1.2.1.0 of Oracle Access Manager. This easily exploitable vulnerability allows unauthenticated attackers with network access via HTTP to compromise Oracle Access Manager, potentially impacting additional products. Suc [truncated]
A vulnerability was discovered in the MySQL Server and MySQL Cluster products of Oracle MySQL, specifically in the Server: Optimizer component. The affected versions are MySQL Server 9.7.0-9.7.1 and MySQL Cluster 9.7.0-9.7.1. This vulnerability allows a low-privileged attacker with network access via multiple protocols to compromise MySQL Server and MySQL Cluster. Successful attacks can result in unauthor [truncated]
A high-severity vulnerability was discovered in Oracle Identity Manager, specifically in the OIM Legacy UI component. The vulnerability, tracked as CVE-2026-60323, has a CVSS score of 8.1 and allows low-privileged attackers with network access via HTTP to compromise the system. Successful attacks can result in unauthorized creation, deletion, or modification of critical data, as well as unauthorized acces [truncated]
A high-severity vulnerability was found in MySQL Connectors, specifically in the Connector/Net component. The vulnerability has a CVSS score of 7.4 and can allow an unauthenticated attacker with network access to compromise MySQL Connectors, potentially leading to unauthorized creation, deletion, or modification of critical data. This vulnerability affects MySQL Connectors versions 9.7.0-9.7.1 and has a C [truncated]
A vulnerability exists in MySQL Server and MySQL Cluster products of Oracle MySQL. The vulnerability is located in the Server: X Plugin component. MySQL Server versions 8.4.0-8.4.10 and 9.7.0-9.7.1 are affected, as well as MySQL Cluster versions 8.0.0-8.0.47, 8.4.0-8.4.10, and 9.7.0-9.7.1. An unauthenticated attacker with network access via multiple protocols can exploit this vulnerability to compromise M [truncated]
The CVE-2026-60314 vulnerability affects the MySQL Router product of Oracle MySQL, specifically the Router: General component. Supported versions that are affected are 8.4.0-8.4.10 and 9.7.0-9.7.1. This vulnerability is easily exploitable and allows an unauthenticated attacker with network access via HTTP to compromise MySQL Router. Successful attacks can result in unauthorized ability to cause a hang or [truncated]
A high-severity vulnerability was found in Oracle WebLogic Server. This issue, tracked as CVE-2026-60313, has a CVSS 3.1 Base Score of 8.8, indicating a high impact on confidentiality, integrity, and availability. The vulnerability affects Oracle WebLogic Server versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. It is easily exploitable by a low-privileged attacker with network access via RMI, p [truncated]
A high-severity vulnerability was discovered in Oracle WebLogic Server, affecting versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. This difficult-to-exploit vulnerability allows unauthenticated attackers with network access via T3 or IIOP to compromise the server, potentially leading to a takeover. The vulnerability, tracked as CVE-2026-60312, is a high-severity issue in the Oracle WebLogic Se [truncated]
A vulnerability was discovered in the MySQL Server and MySQL Cluster products of Oracle MySQL, specifically in the Server: Optimizer component. The affected versions are MySQL Server: 9.0.0-9.7.1 and MySQL Cluster: 9.0.0-9.7.1. This vulnerability allows a low-privileged attacker with network access via multiple protocols to compromise MySQL Server and MySQL Cluster. Successful attacks can result in unauth [truncated]
A critical vulnerability was discovered in Oracle WebLogic Server, specifically in the Core component. The affected versions are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. This vulnerability allows an unauthenticated attacker with network access via SOAP to compromise Oracle WebLogic Server, potentially leading to a takeover of the server. The CVSS 3.1 Base Score is 9.8, indicating a high impact [truncated]
A critical vulnerability was discovered in Oracle WebLogic Server. The vulnerability has been assigned a CVSS score of 9.8, indicating a high severity level. It affects versions 12.2.1.4.0 and 14.1.1.0.0 of the software. The vulnerability allows unauthenticated attackers with network access via HTTP to compromise Oracle WebLogic Server, potentially leading to a takeover of the server.
A critical vulnerability was discovered in Oracle WebLogic Server, affecting versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. This easily exploitable vulnerability allows unauthenticated attackers with network access via HTTP to compromise Oracle WebLogic Server, potentially leading to a complete takeover. The vulnerability is located in the Core component and has a CVSS 3.1 Base Score of 9.8, [truncated]
A high-severity vulnerability was found in Oracle Coherence, a product of Oracle Fusion Middleware. The vulnerability, tracked as CVE-2026-60261, has a CVSS score of 8.8 and can be easily exploited by unauthenticated attackers with access to the physical communication segment attached to the hardware where Oracle Coherence executes. Successful attacks can result in the takeover of Oracle Coherence. The vu [truncated]
A vulnerability was discovered in Oracle Coherence, a product of Oracle Fusion Middleware, specifically in the Core component. The affected versions are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. This difficult-to-exploit vulnerability allows unauthenticated attackers with network access via HTTP to compromise Oracle Coherence. While the vulnerability is in Oracle Coherence, attacks may significa [truncated]
A critical vulnerability was discovered in Oracle WebLogic Server, affecting versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. This vulnerability allows unauthenticated attackers with network access via HTTP to compromise the server, potentially leading to unauthorized creation, deletion, or modification of critical data. The vulnerability has a CVSS 3.1 Base Score of 9.1, indicating a high imp [truncated]
A vulnerability was discovered in Oracle WebLogic Server, a product of Oracle Fusion Middleware, specifically in the Core component. The affected supported versions are 12.2.1.4.0 and 14.1.2.0.0. This vulnerability is easily exploitable, allowing a low-privileged attacker with network access via HTTP to compromise Oracle WebLogic Server. Successful attacks can result in the takeover of Oracle WebLogic Ser [truncated]
A critical vulnerability was discovered in Oracle WebLogic Server, a product of Oracle Fusion Middleware, specifically in the Core component. The affected versions include 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. This vulnerability is easily exploitable by a low-privileged attacker with network access via SAML, potentially leading to a takeover of Oracle WebLogic Server. The CVSS 3.1 Base Score [truncated]
A critical vulnerability was discovered in Oracle WebLogic Server, a product of Oracle Fusion Middleware. The vulnerability affects versions 12.2.1.4.0 and 14.1.2.0.0. It is easily exploitable, allowing unauthenticated attackers with network access via TCP to compromise the server. Successful attacks can result in a complete takeover of Oracle WebLogic Server.
A vulnerability was discovered in the MySQL Server and MySQL Cluster products of Oracle MySQL, specifically in the Server: JSON Duality component. The affected versions are MySQL Server: 9.7.0-9.7.1 and MySQL Cluster: 9.7.0-9.7.1. This vulnerability allows a high privileged attacker with network access via multiple protocols to compromise MySQL Server and MySQL Cluster, potentially leading to a hang or fr [truncated]
CVE-2026-60194 is a medium severity vulnerability in the MySQL Server and MySQL Cluster products of Oracle MySQL (component: Server: JSON Duality). Supported versions that are affected are MySQL Server: 9.7.0-9.7.1; MySQL Cluster: 9.7.0-9.7.1. The vulnerability allows high privileged attackers with network access via multiple protocols to compromise MySQL Server and MySQL Cluster, potentially leading to a [truncated]
A high-severity vulnerability was found in MySQL Connectors, specifically in the Connector/Net component. The vulnerability has a CVSS score of 8.5 and can be exploited by a low-privileged attacker with network access via multiple protocols, potentially leading to a takeover of MySQL Connectors and impacting additional products. This vulnerability is difficult to exploit and requires a low-privileged atta [truncated]
AI-assisted PatchSiren debrief based on the supplied source corpus. The CVE record was published on 2026-07-21T22:17:20.383Z and has not been modified since then. The vulnerability in MySQL Connectors versions 9.7.0-9.7.1 allows unauthenticated attackers with network access via multiple protocols to potentially take over MySQL Connectors, with a high severity CVSS score of 8.1 indicating significant impac [truncated]
A vulnerability exists in MySQL Server and MySQL Cluster products of Oracle MySQL. The vulnerability is difficult to exploit and allows high-privileged attackers with logon to the infrastructure where MySQL Server and MySQL Cluster execute to compromise MySQL Server and MySQL Cluster. Successful attacks can result in unauthorized ability to cause a hang or frequently repeatable crash of MySQL Server and M [truncated]
A vulnerability exists in MySQL Server and MySQL Cluster products of Oracle MySQL, specifically in the Server: Replication component. The vulnerability is difficult to exploit and allows high-privileged attackers with network access via multiple protocols to compromise MySQL Server and MySQL Cluster. Successful attacks can result in unauthorized ability to cause a partial denial of service (partial DOS) o [truncated]
