Vulnerabilidades — Alertas SI

O Alto vulnerabilidad

21/07/2026

[CVE-2026-60654] Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Web Co…

Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Web Content Management). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle WebCenter Content. Successful attacks of this vulnerability can result in takeover of Oracle Web…

O Crítico vulnerabilidad

21/07/2026

[CVE-2026-60644] Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Web Co…

Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Web Content Management). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Content. While the vulnerability is in Oracle WebCenter Content, attacks may signific…

M Crítico vulnerabilidad

21/07/2026

[CVE-2026-60627] Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Install…

Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security). The supported version that is affected is 9.2.26.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise JD Edwards EnterpriseOne Tools. While the vulnerability is in JD Edwards EnterpriseOne Tools, attacks may significantly i…

M Alto vulnerabilidad

21/07/2026

[CVE-2026-60618] Vulnerability in the JD Edwards EnterpriseOne Procurement and Subcontract Management product of Orac…

Vulnerability in the JD Edwards EnterpriseOne Procurement and Subcontract Management product of Oracle JD Edwards (component: Procurement). The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise JD Edwards EnterpriseOne Procurement and Subcontract Management. Successful attacks of this vulnerabili…

M Alto vulnerabilidad

21/07/2026

[CVE-2026-60619] Vulnerability in the JD Edwards EnterpriseOne HCM Foundation product of Oracle JD Edwards (component…

Vulnerability in the JD Edwards EnterpriseOne HCM Foundation product of Oracle JD Edwards (component: Time Accounting and HRM Base). The supported version that is affected is 9.2. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise JD Edwards EnterpriseOne HCM Foundation. Successful attacks of this vulnerability can result in takeover of …

M Alto vulnerabilidad

21/07/2026

[CVE-2026-60621] Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Run…

Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime Security). The supported version that is affected is 9.2.26.3. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise JD Edwards EnterpriseOne Tools. Successful attacks of this vulnerability can result in takeover of JD Edwards Enterpris…

M Alto vulnerabilidad

21/07/2026

[CVE-2026-60623] Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/J). Supported v…

Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/J). Supported versions that are affected are 9.7.0-9.7.1. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Connectors. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to c…

M Alto vulnerabilidad

21/07/2026

[CVE-2026-60600] Vulnerability in the PeopleSoft Enterprise FIN Project Costing product of Oracle PeopleSoft (compone…

Vulnerability in the PeopleSoft Enterprise FIN Project Costing product of Oracle PeopleSoft (component: Projects). The supported version that is affected is 9.2. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where PeopleSoft Enterprise FIN Project Costing executes to compromise PeopleSoft Enterprise FIN Project Costing. Successful attacks requ…

M Alto vulnerabilidad

21/07/2026

[CVE-2026-60602] Vulnerability in the PeopleSoft Enterprise CS Student Financials product of Oracle PeopleSoft (compo…

Vulnerability in the PeopleSoft Enterprise CS Student Financials product of Oracle PeopleSoft (component: Billing). The supported version that is affected is 9.2.38. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise CS Student Financials. Successful attacks of this vulnerability can result in takeover of PeopleSoft E…

O Alto vulnerabilidad

21/07/2026

[CVE-2026-60604] Vulnerability in the PeopleSoft Enterprise CS Campus Community product of Oracle PeopleSoft (compone…

Vulnerability in the PeopleSoft Enterprise CS Campus Community product of Oracle PeopleSoft (component: Security). The supported version that is affected is 9.2.38. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise CS Campus Community. Successful attacks of this vulnerability can result in takeover of PeopleSoft En…

O Alto vulnerabilidad

21/07/2026

[CVE-2026-60605] Vulnerability in the PeopleSoft Enterprise CS Student Records product of Oracle PeopleSoft (componen…

Vulnerability in the PeopleSoft Enterprise CS Student Records product of Oracle PeopleSoft (component: Higher Ed Statistics Agency - UK HESA). The supported version that is affected is 9.2.38. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise CS Student Records. Successful attacks of this vulnerability can result in…

M Alto vulnerabilidad

21/07/2026

[CVE-2026-60586] Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/J). Supported v…

Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/J). Supported versions that are affected are 9.7.0-9.7.1. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Connectors. While the vulnerability is in MySQL Connectors, attacks may significantly impact additional products (scope change). …

M Alto vulnerabilidad

21/07/2026

[CVE-2026-60580] Vulnerability in the Oracle Enterprise Command Center Framework product of Oracle E-Business Suite (…

Vulnerability in the Oracle Enterprise Command Center Framework product of Oracle E-Business Suite (component: Core). The supported version that is affected is V16. Easily exploitable vulnerability allows unauthenticated attacker with access to the physical communication segment attached to the hardware where the Oracle Enterprise Command Center Framework executes to compromise Oracle Enterprise…

M Alto vulnerabilidad

21/07/2026

[CVE-2026-60583] Vulnerability in the Oracle Transportation Management product of Oracle Supply Chain (component: Ins…

Vulnerability in the Oracle Transportation Management product of Oracle Supply Chain (component: Install). The supported version that is affected is 6.5.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Transportation Management. Successful attacks of this vulnerability can result in takeover of Oracle Transportation Management.…

O Crítico vulnerabilidad

21/07/2026

[CVE-2026-60551] Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCente…

Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Sites. Successful attacks of this vulnerability can result in takeover of Oracle WebCenter Sit…

O Alto vulnerabilidad

21/07/2026

[CVE-2026-60543] Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: B2B Engine). …

Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: B2B Engine). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle SOA Suite. Successful attacks of this vulnerability can result in takeover of Oracle SOA Suite. CVSS 3.1 Base Sco…

O Alto vulnerabilidad

21/07/2026

[CVE-2026-60544] Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: B2B Engine). …

Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: B2B Engine). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle SOA Suite. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete…

O Alto vulnerabilidad

21/07/2026

[CVE-2026-60545] Vulnerability in the Oracle Managed File Transfer product of Oracle Fusion Middleware (component: MF…

Vulnerability in the Oracle Managed File Transfer product of Oracle Fusion Middleware (component: MFT Runtime Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Managed File Transfer. Successful attacks of this vulnerability can result in takeover of Oracle…

O Alto vulnerabilidad

21/07/2026

[CVE-2026-60549] Vulnerability in the Oracle Managed File Transfer product of Oracle Fusion Middleware (component: MF…

Vulnerability in the Oracle Managed File Transfer product of Oracle Fusion Middleware (component: MFT Runtime Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Managed File Transfer. Successful attacks of this vulnerability can result in takeover of Oracle…

O Crítico vulnerabilidad

21/07/2026

[CVE-2026-60535] Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (componen…

Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: PeopleSoft Applications). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Identity Manager Connector. Successful attacks of this vulnerability can result in ta…

Alertas de Seguridad de la Información

📬 Alertas semanales SI directo en tu email

🛡 ¿Estás expuesto a alguna de estas vulnerabilidades?