Alertas de Seguridad de la Información

O Crítico vulnerabilidad

21/07/2026

[CVE-2026-61171] Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Security). The su…

Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Security). The supported version that is affected is 9.3.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Agile PLM. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or…

nvdcriticovulnerabilidad CVSS 9.1 NVD

O Alto vulnerabilidad

21/07/2026

[CVE-2026-61172] Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Security). The su…

Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Security). The supported version that is affected is 9.3.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Agile PLM. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Agil…

nvdaltovulnerabilidad CVSS 7.5 NVD

M Crítico vulnerabilidad

21/07/2026

[CVE-2026-61156] Vulnerability in the Oracle Commerce Guided Search Platform Services product of Oracle Commerce (com…

Vulnerability in the Oracle Commerce Guided Search Platform Services product of Oracle Commerce (component: Forge). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle Commerce Guided Search Platform Services. Successful attacks of this vulnerability can result in unauthorized crea…

nvdcriticovulnerabilidad CVSS 9.1 NVD

O Alto vulnerabilidad

21/07/2026

[CVE-2026-61157] Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of O…

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Manager). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Commerce Guided Search / Oracle Commerce Experience Manager. Successful attacks of t…

nvdaltovulnerabilidad CVSS 7.5 NVD

O Alto vulnerabilidad

21/07/2026

[CVE-2026-61158] Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of O…

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Manager). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via RMI to compromise Oracle Commerce Guided Search / Oracle Commerce Experience Manager. Successful attacks of th…

nvdaltovulnerabilidad CVSS 7.5 NVD

O Alto vulnerabilidad

21/07/2026

[CVE-2026-61160] Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of O…

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Manager). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Commerce Guided Search / Oracle Commerce Experience Manager. Successful attacks of th…

nvdaltovulnerabilidad CVSS 8.1 NVD

O Crítico vulnerabilidad

21/07/2026

[CVE-2026-61161] Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of O…

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Application Controller). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Commerce Guided Search / Oracle Commerce Experience Manager. Successful a…

nvdcriticovulnerabilidad CVSS 9.8 NVD

O Alto vulnerabilidad

21/07/2026

[CVE-2026-61162] Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of O…

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Application Controller). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Commerce Guided Search / Oracle Commerce Experience Manager executes to comprom…

nvdaltovulnerabilidad CVSS 7.1 NVD

O Alto vulnerabilidad

21/07/2026

[CVE-2026-61148] Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of O…

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Manager). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Commerce Guided Search / Oracle Commerce Experience Manager. Successful attacks of th…

nvdaltovulnerabilidad CVSS 8.8 NVD

O Alto vulnerabilidad

21/07/2026

[CVE-2026-61149] Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of O…

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Manager). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Commerce Guided Search / Oracle Commerce Experience Manager. Successful attacks of th…

nvdaltovulnerabilidad CVSS 8.8 NVD

O Alto vulnerabilidad

21/07/2026

[CVE-2026-61150] Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of O…

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Manager). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Commerce Guided Search / Oracle Commerce Experience Manager. Successful attacks of th…

nvdaltovulnerabilidad CVSS 8.1 NVD

O Alto vulnerabilidad

21/07/2026

[CVE-2026-61151] Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of O…

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Manager). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Commerce Guided Search / Oracle Commerce Experience Manager. Successful attacks of th…

nvdaltovulnerabilidad CVSS 7.1 NVD

O Crítico vulnerabilidad

21/07/2026

[CVE-2026-61153] Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of O…

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Manager). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Commerce Guided Search / Oracle Commerce Experience Manager. Successful attacks of t…

nvdcriticovulnerabilidad CVSS 9.1 NVD

M Crítico vulnerabilidad

21/07/2026

[CVE-2026-61155] Vulnerability in the Oracle Commerce Guided Search Platform Services product of Oracle Commerce (com…

Vulnerability in the Oracle Commerce Guided Search Platform Services product of Oracle Commerce (component: Forge). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Commerce Guided Search Platform Services. Successful attacks of this vulnerability can result in unauthorized acces…

nvdcriticovulnerabilidad CVSS 9.1 NVD

M Alto vulnerabilidad

21/07/2026

[CVE-2026-61138] Vulnerability in the Oracle Complex Maintenance, Repair and Overhaul product of Oracle E-Business Su…

Vulnerability in the Oracle Complex Maintenance, Repair and Overhaul product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Complex Maintenance, Repair and Overhaul. While the vulnerability is in Oracle Complex…

nvdaltovulnerabilidad CVSS 7.5 NVD

O Crítico vulnerabilidad

21/07/2026

[CVE-2026-61140] Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCente…

Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). The supported version that is affected is 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Sites. Successful attacks of this vulnerability can result in takeover of Oracle WebCenter Sites. CVSS 3.1 B…

nvdcriticovulnerabilidad CVSS 9.8 NVD

M Alto vulnerabilidad

21/07/2026

[CVE-2026-61141] Vulnerability in the Oracle Advanced Benefits product of Oracle E-Business Suite (component: Afforda…

Vulnerability in the Oracle Advanced Benefits product of Oracle E-Business Suite (component: Affordable Care Act). Supported versions that are affected are 12.2.7-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Advanced Benefits. Successful attacks of this vulnerability can result in takeover of Oracle Advanced Benefits…

nvdaltovulnerabilidad CVSS 7.5 NVD

O Alto vulnerabilidad

21/07/2026

[CVE-2026-61142] Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Internal Operatio…

Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Payroll. While the vulnerability is in Oracle Payroll, attacks may significantly impact additional products (scope change)…

nvdaltovulnerabilidad CVSS 7.7 NVD

O Crítico vulnerabilidad

21/07/2026

[CVE-2026-61145] Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of O…

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acquisition System). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Commerce Guided Search / Oracle Commerce Experience Manager. Successful atta…

nvdcriticovulnerabilidad CVSS 9.8 NVD

O Crítico vulnerabilidad

21/07/2026

[CVE-2026-61146] Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of O…

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acquisition System). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Commerce Guided Search / Oracle Commerce Experience Manager. While the vulner…

nvdcriticovulnerabilidad CVSS 9.9 NVD