Vulnerabilidades — Alertas SI

O Alto vulnerabilidad

21/07/2026

[CVE-2026-60647] Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Web Co…

Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Web Content Management). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle WebCenter Content. Successful attacks of this vulnerability can result in unauthorized access t…

O Crítico vulnerabilidad

21/07/2026

[CVE-2026-60551] Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCente…

Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Sites. Successful attacks of this vulnerability can result in takeover of Oracle WebCenter Sit…

O Crítico vulnerabilidad

21/07/2026

[CVE-2026-60552] Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCente…

Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle WebCenter Sites. While the vulnerability is in Oracle WebCenter Sites, attacks may significantly impact a…

O Alto vulnerabilidad

21/07/2026

[CVE-2026-60553] Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCente…

Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Sites. While the vulnerability is in Oracle WebCenter Sites, attacks may significantly impac…

O Alto vulnerabilidad

21/07/2026

[CVE-2026-60554] Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCente…

Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Sites. Successful attacks of this vulnerability can result in unauthorized access to critical…

O Crítico vulnerabilidad

21/07/2026

[CVE-2026-60555] Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCente…

Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Sites. Successful attacks of this vulnerability can result in takeover of Oracle WebCenter Sit…

O Alto vulnerabilidad

21/07/2026

[CVE-2026-60556] Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCente…

Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Sites. While the vulnerability is in Oracle WebCenter Sites, attacks may significantly impact …

O Alto vulnerabilidad

21/07/2026

[CVE-2026-60558] Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCente…

Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Sites. Successful attacks of this vulnerability can result in takeover of Oracle WebCenter S…

O Alto vulnerabilidad

21/07/2026

[CVE-2026-60548] Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Integration Bu…

Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Integration Business Insight). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle SOA Suite. While the vulnerability is in Oracle SOA Suite, attacks may significantly impact additi…

O Alto vulnerabilidad

21/07/2026

[CVE-2026-60550] Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCente…

Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Sites. While the vulnerability is in Oracle WebCenter Sites, attacks may significantly impact …

O Alto vulnerabilidad

21/07/2026

[CVE-2026-60449] Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Conten…

Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle WebCenter Content executes to compromise Oracle WebCenter Content. While the vulnerability is in Oracle Web…

M Alto vulnerabilidad

21/07/2026

[CVE-2026-60440] Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messa…

Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabler). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Service Delivery Platform. While the vulnerability is in Service Delivery Platform, attacks may significant…

O Alto vulnerabilidad

21/07/2026

[CVE-2026-60431] Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware (component: mod_proxy). …

Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware (component: mod_proxy). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle HTTP Server. While the vulnerability is in Oracle HTTP Server, attacks may significantly impact additional product…

O Alto vulnerabilidad

21/07/2026

[CVE-2026-60315] Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: X Plugi…

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: X Plugin). Supported versions that are affected are MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster: 8.0.0-8.0.47, 8.4.0-8.4.10 and 9.7.0-9.7.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Server, MySQL Cluster. S…

O Alto vulnerabilidad

21/07/2026

[CVE-2026-60293] Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: WLS - We…

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: WLS - Web Services). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Server. While the vulnerability is in Oracle WebLogic Server, attack…

O Crítico vulnerabilidad

21/07/2026

[CVE-2026-60264] Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Suppor…

Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP/2 to compromise Oracle Coherence. Successful attacks of this vulnerability can result in takeover of Oracle Coherence. CVSS 3.1 Ba…

M Alto vulnerabilidad

21/07/2026

[CVE-2026-60176] Vulnerability in the Oracle Payments product of Oracle E-Business Suite (component: File Transmissio…

Vulnerability in the Oracle Payments product of Oracle E-Business Suite (component: File Transmission). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Payments. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access t…

M Alto vulnerabilidad

21/07/2026

[CVE-2026-60167] Vulnerability in the Oracle Hospitality Simphony product of Oracle Food and Beverage Applications (c…

Vulnerability in the Oracle Hospitality Simphony product of Oracle Food and Beverage Applications (component: POS). Supported versions that are affected are 19.8-19.8.5, 19.9-19.9.3 and 19.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hospitality Simphony. Successful attacks of this vulnerability can result in unauthorize…

S Alto vulnerabilidad

21/07/2026

[CVE-2026-47247] libheif is a HEIF and AVIF file format decoder and encoder. Prior to version 1.22.0, two bugs in lib…

libheif is a HEIF and AVIF file format decoder and encoder. Prior to version 1.22.0, two bugs in libheif chain to leak process heap memory as visible pixel values in decoded grid images. An attacker who uploads a crafted AVIF/HEIC file to any server-side image processor (WordPress, Sharp/libvips, ImageMagick, etc.) can recover heap data - including library function pointers sufficient to defeat AS…

M Alto vulnerabilidad

21/07/2026

[CVE-2026-52474] An issue in aiflowy <= 2.1.2 allows a remote attacker to obtain sensitive information via the JobUti…

An issue in aiflowy

Alertas de Seguridad de la Información

📬 Alertas semanales SI directo en tu email

🛡 ¿Estás expuesto a alguna de estas vulnerabilidades?