These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.
A critical vulnerability was discovered in Oracle WebCenter Content, a product of Oracle Fusion Middleware. The vulnerability, tracked as CVE-2026-46777, affects versions 12.2.1.4.0 and 14.1.2.0.0. It allows unauthenticated attackers with network access via HTTP to compromise the system, potentially leading to unauthorized creation, deletion, or modification of critical data. This vulnerability has signif [truncated]
A high-severity vulnerability was discovered in Oracle Unified Directory, a component of Oracle Fusion Middleware. CVE-2026-46776 affects versions 12.2.1.4.0 and 14.1.2.1.0, allowing unauthenticated attackers with network access via LDAP to compromise the directory. This could lead to unauthorized data modifications, partial denial of service, and data exposure. Organizations using these versions should p [truncated]
A critical vulnerability, CVE-2026-46774, was discovered in Oracle Unified Directory, a component of Oracle Fusion Middleware. The vulnerability has a CVSS score of 9.8 and allows unauthenticated attackers with network access via RMI to compromise the directory, potentially leading to a complete takeover. The vulnerability is located in the OUD Core component and is easily exploitable. Administrators and [truncated]
A critical vulnerability was discovered in Oracle Unified Directory, a component of Oracle Fusion Middleware. The vulnerability, tracked as CVE-2026-46773, affects versions 12.2.1.4.0 and 14.1.2.1.0 of Oracle Unified Directory. It allows unauthenticated attackers with network access via LDAP to compromise the system, potentially leading to a takeover of Oracle Unified Directory. The CVSS 3.1 Base Score fo [truncated]
A vulnerability was discovered in the Oracle Application Development Framework (ADF) product of Oracle Fusion Middleware (component: ADF Faces). The affected versions are 12.2.1.4.0 and 14.1.2.0.0. This difficult-to-exploit vulnerability allows a high-privileged attacker with logon to the infrastructure where Oracle Application Development Framework (ADF) executes to compromise Oracle Application Developm [truncated]
CVE-2026-46770 is a medium-severity vulnerability in the Oracle Application Development Framework (ADF) product of Oracle Fusion Middleware (component: Security Framework). The vulnerability allows an unauthenticated attacker with network access via HTTP to compromise Oracle Application Development Framework (ADF). Successful attacks require human interaction from a person other than the attacker and whil [truncated]
A vulnerability was discovered in Oracle VM VirtualBox 7.2.8, affecting the VMSVGA device component. This easily exploitable vulnerability allows a high-privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products (scope change). Successfu [truncated]
A critical vulnerability was discovered in Oracle WebCenter Content, a product of Oracle Fusion Middleware. The vulnerability affects versions 12.2.1.4.0 and 14.1.2.0.0. It allows unauthenticated attackers with network access via HTTP to compromise Oracle WebCenter Content, potentially leading to a takeover of the system. The CVSS 3.1 Base Score is 9.8, indicating a high impact on confidentiality, integri [truncated]
A vulnerability was discovered in Oracle WebCenter Content, a product of Oracle Fusion Middleware, specifically in the Content Server component. The affected versions are 12.2.1.4.0 and 14.1.2.0.0. This vulnerability is easily exploitable by a low-privileged attacker with network access via HTTPS. Successful attacks require human interaction from a person other than the attacker and can significantly impa [truncated]
A high-severity vulnerability was found in Oracle WebCenter Content, affecting versions 12.2.1.4.0 and 14.1.2.0.0. This easily exploitable vulnerability allows low-privileged attackers with network access via HTTP to compromise Oracle WebCenter Content, potentially leading to a full takeover of the system. The vulnerability has a CVSS 3.1 Base Score of 8.8, indicating high impacts on Confidentiality, Inte [truncated]
A high-severity vulnerability was discovered in Oracle WebCenter Content, a product of Oracle Fusion Middleware. The vulnerability, tracked as CVE-2026-35324, affects versions 12.2.1.4.0 and 14.1.2.0.0. It is an easily exploitable vulnerability that allows a low-privileged attacker with network access via HTTP to compromise Oracle WebCenter Content, potentially leading to a takeover of the system. The vul [truncated]
A critical vulnerability was discovered in Oracle WebCenter Content, a product of Oracle Fusion Middleware. The vulnerability, tracked as CVE-2026-35323, has a CVSS 3.1 Base Score of 9.9, indicating a high impact on confidentiality, integrity, and availability. The vulnerability affects versions 12.2.1.4.0 and 14.1.2.0.0 of Oracle WebCenter Content.
A high-severity vulnerability was found in Oracle WebCenter Content, affecting versions 12.2.1.4.0 and 14.1.2.0.0. This easily exploitable vulnerability allows low-privileged attackers with network access via HTTP to compromise Oracle WebCenter Content, potentially leading to a full takeover of the system. The vulnerability has a CVSS 3.1 Base Score of 8.8, indicating high impacts on Confidentiality, Inte [truncated]
A critical vulnerability was discovered in Oracle WebCenter Content, a product of Oracle Fusion Middleware. The vulnerability, tracked as CVE-2026-35321, has a CVSS 3.1 Base Score of 9.9, indicating a high impact on confidentiality, integrity, and availability. The vulnerability affects versions 12.2.1.4.0 and 14.1.2.0.0 of Oracle WebCenter Content. The vulnerability allows low-privileged attackers with n [truncated]
A critical vulnerability was discovered in Oracle WebCenter Content, a product of Oracle Fusion Middleware. The vulnerability, tracked as CVE-2026-35320, has a CVSS score of 9.0 and can be exploited by unauthenticated attackers with network access via HTTP, potentially leading to a takeover of Oracle WebCenter Content. This vulnerability affects versions 12.2.1.4.0 and 14.1.2.0.0 of Oracle WebCenter Conte [truncated]
A critical vulnerability was discovered in Oracle WebCenter Content, a product of Oracle Fusion Middleware. The vulnerability affects versions 12.2.1.4.0 and 14.1.2.0.0. It allows unauthenticated attackers with network access via HTTP to compromise Oracle WebCenter Content, potentially leading to a takeover of the system. The CVSS 3.1 Base Score is 9.8, indicating a high impact on confidentiality, integri [truncated]
A high-severity vulnerability was found in Oracle WebCenter Content, affecting versions 12.2.1.4.0 and 14.1.2.0.0. This easily exploitable vulnerability allows low-privileged attackers with network access via HTTP to compromise Oracle WebCenter Content, potentially leading to a full takeover of the system. The vulnerability has a CVSS 3.1 Base Score of 8.8, indicating high impacts on Confidentiality, Inte [truncated]
A critical vulnerability was discovered in Oracle WebCenter Content, a product of Oracle Fusion Middleware. The vulnerability, tracked as CVE-2026-35316, has a CVSS score of 9.9, indicating a high severity level. It affects versions 12.2.1.4.0 and 14.1.2.0.0 of Oracle WebCenter Content. The vulnerability is easily exploitable by low-privileged attackers with network access via HTTP, potentially leading to [truncated]
A high-severity vulnerability was found in Oracle WebCenter Content, affecting versions 12.2.1.4.0 and 14.1.2.0.0. This easily exploitable vulnerability allows low-privileged attackers with network access via HTTP to compromise Oracle WebCenter Content, potentially leading to a full takeover of the system. The vulnerability has a CVSS 3.1 Base Score of 8.8, indicating high impacts on confidentiality, inte [truncated]
A vulnerability was discovered in Oracle Access Manager, specifically in the Web Server Plugin component. This vulnerability affects versions 12.2.1.4.0 and 14.1.2.1.0. It is easily exploitable by unauthenticated attackers with network access via HTTP, potentially leading to unauthorized data access and partial denial of service. The vulnerability has a CVSS 3.1 Base Score of 7.3, indicating high severity [truncated]
A critical vulnerability was discovered in Oracle Access Manager, a product of Oracle Fusion Middleware, specifically in the Authentication Engine component. The vulnerability affects versions 12.2.1.4.0 and 14.1.2.1.0. It is easily exploitable by a low-privileged attacker with network access via HTTP, potentially leading to a takeover of Oracle Access Manager. The CVSS 3.1 Base Score is 9.9, indicating a [truncated]
A critical vulnerability was discovered in Oracle Virtual Directory, a component of Oracle Fusion Middleware. The vulnerability, tracked as CVE-2026-35312, affects versions 12.2.1.4.0 and 14.1.2.0.0 of Oracle Virtual Directory. It allows unauthenticated attackers with network access via LDAP to compromise the system, potentially leading to a takeover of Oracle Virtual Directory. The CVSS 3.1 Base Score fo [truncated]
A critical vulnerability was discovered in Oracle Coherence, a product of Oracle Fusion Middleware. The vulnerability affects versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. It allows unauthenticated attackers with network access via HTTP to compromise Oracle Coherence, potentially leading to a takeover of the system. The CVSS 3.1 Base Score is 9.8, indicating a high impact on confidentiality [truncated]
A critical vulnerability was discovered in Oracle Coherence, a product of Oracle Fusion Middleware. The vulnerability is classified under CVE-2026-35309 and affects versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. It allows unauthenticated attackers with network access via HTTP to compromise Oracle Coherence, potentially leading to a takeover of the system. The CVSS 3.1 Base Score is 9.8, indi [truncated]
A critical vulnerability was discovered in Oracle Coherence, a product of Oracle Fusion Middleware. The vulnerability affects versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. It allows unauthenticated attackers with network access via HTTP to compromise Oracle Coherence, potentially impacting additional products. Successful attacks can result in a takeover of Oracle Coherence.
A critical vulnerability was discovered in Oracle Coherence, a product of Oracle Fusion Middleware. The vulnerability is easily exploitable and allows unauthenticated attackers with network access via HTTP to compromise the system. Successful attacks can result in unauthorized access to critical data or complete access to all Oracle Coherence accessible data, as well as unauthorized update, insert or dele [truncated]
A critical vulnerability was discovered in Oracle Coherence, a product of Oracle Fusion Middleware. The vulnerability is easily exploitable and allows unauthenticated attackers with network access via HTTP to compromise the system. Successful attacks can result in unauthorized access to critical data or complete access to all Oracle Coherence accessible data, as well as unauthorized update, insert or dele [truncated]
A critical vulnerability was discovered in Oracle Coherence, a product of Oracle Fusion Middleware. The vulnerability affects versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. It allows unauthenticated attackers with network access via HTTPS to compromise Oracle Coherence, potentially leading to a takeover of the system. The CVSS 3.1 Base Score is 9.8, indicating a high severity level. Organiza [truncated]
CVE-2026-35303 is a high-severity vulnerability in the Console component of Oracle WebLogic Server. The vulnerability has a CVSS score of 8.8 and can be easily exploited by a low-privileged attacker with network access via HTTP, potentially leading to a takeover of the WebLogic Server. The vulnerability affects Oracle WebLogic Server versions 12.2.1.4.0 and 14.1.1.0.0. The vulnerability is highly severe a [truncated]
A high-severity vulnerability was discovered in the WebLogic Server product of Oracle Fusion Middleware, specifically in the Console component. The vulnerability, tracked as CVE-2026-35302, has a CVSS score of 8.3 and allows an unauthenticated attacker with network access via HTTP to compromise WebLogic Server. Successful attacks require human interaction from a person other than the attacker and can resu [truncated]
