Vulnerabilidades — Alertas SI

O Crítico vulnerabilidad

21/07/2026

[CVE-2026-60537] Vulnerability in the Oracle Managed File Transfer product of Oracle Fusion Middleware (component: MF…

Vulnerability in the Oracle Managed File Transfer product of Oracle Fusion Middleware (component: MFT Runtime Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Managed File Transfer. While the vulnerability is in Oracle Managed File Transfer, attacks may s…

O Crítico vulnerabilidad

21/07/2026

[CVE-2026-60538] Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Enterprise Sch…

Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Enterprise Scheduling System). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle SOA Suite. Successful attacks of this vulnerability can result in takeover of Oracle SOA Suite. C…

O Alto vulnerabilidad

21/07/2026

[CVE-2026-60539] Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Integration Bu…

Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Integration Business Insight). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle SOA Suite. Successful attacks of this vulnerability can result in takeover of Oracle SOA Suite. CV…

O Crítico vulnerabilidad

21/07/2026

[CVE-2026-60531] Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (componen…

Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Identity Manager Connector. While the vulnerability is in Oracle Identity Manager Connector, attacks may …

M Alto vulnerabilidad

21/07/2026

[CVE-2026-60499] Vulnerability in the JD Edwards EnterpriseOne Solution Advisor product of Oracle JD Edwards (compone…

Vulnerability in the JD Edwards EnterpriseOne Solution Advisor product of Oracle JD Edwards (component: Solution Advisor). The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise JD Edwards EnterpriseOne Solution Advisor. Successful attacks of this vulnerability can result in takeover of JD Edwards…

M Alto vulnerabilidad

21/07/2026

[CVE-2026-60493] Vulnerability in the JD Edwards EnterpriseOne Human Resources Management product of Oracle JD Edward…

Vulnerability in the JD Edwards EnterpriseOne Human Resources Management product of Oracle JD Edwards (component: Human Resources). The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise JD Edwards EnterpriseOne Human Resources Management. Successful attacks of this vulnerability can result in tak…

M Alto vulnerabilidad

21/07/2026

[CVE-2026-60495] Vulnerability in the JD Edwards EnterpriseOne Requirements Planning product of Oracle JD Edwards (co…

Vulnerability in the JD Edwards EnterpriseOne Requirements Planning product of Oracle JD Edwards (component: Requirements Planning). The supported version that is affected is 9.2. Difficult to exploit vulnerability allows low privileged attacker with network access via JDENET to compromise JD Edwards EnterpriseOne Requirements Planning. Successful attacks of this vulnerability can result in tak…

M Alto vulnerabilidad

21/07/2026

[CVE-2026-60496] Vulnerability in the JD Edwards EnterpriseOne Advanced Pricing - Procurement product of Oracle JD Ed…

Vulnerability in the JD Edwards EnterpriseOne Advanced Pricing - Procurement product of Oracle JD Edwards (component: Advanced Pricing). The supported version that is affected is 9.2. Difficult to exploit vulnerability allows low privileged attacker with network access via JDENET to compromise JD Edwards EnterpriseOne Advanced Pricing - Procurement. Successful attacks of this vulnerability can …

M Alto vulnerabilidad

21/07/2026

[CVE-2026-60497] Vulnerability in the JD Edwards EnterpriseOne CRM Foundation product of Oracle JD Edwards (component…

Vulnerability in the JD Edwards EnterpriseOne CRM Foundation product of Oracle JD Edwards (component: CRM Foundation). The supported version that is affected is 9.2. Difficult to exploit vulnerability allows low privileged attacker with network access via JDENET to compromise JD Edwards EnterpriseOne CRM Foundation. Successful attacks of this vulnerability can result in takeover of JD Edwards E…

M Alto vulnerabilidad

21/07/2026

[CVE-2026-60498] Vulnerability in the JD Edwards EnterpriseOne Human Resources Management product of Oracle JD Edward…

Vulnerability in the JD Edwards EnterpriseOne Human Resources Management product of Oracle JD Edwards (component: Human Resources). The supported version that is affected is 9.2. Difficult to exploit vulnerability allows low privileged attacker with network access via JDENET to compromise JD Edwards EnterpriseOne Human Resources Management. Successful attacks of this vulnerability can result in…

M Alto vulnerabilidad

21/07/2026

[CVE-2026-60489] Vulnerability in the JD Edwards EnterpriseOne CRM Foundation product of Oracle JD Edwards (component…

Vulnerability in the JD Edwards EnterpriseOne CRM Foundation product of Oracle JD Edwards (component: CRM Foundation). The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise JD Edwards EnterpriseOne CRM Foundation. Successful attacks of this vulnerability can result in takeover of JD Edwards Enter…

O Crítico vulnerabilidad

21/07/2026

[CVE-2026-60458] Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (compon…

Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via T3, IIOP to compromise Oracle WebCenter Enterprise Capture. While the vulnerability is in Oracle WebCenter Enterprise Ca…

O Crítico vulnerabilidad

21/07/2026

[CVE-2026-60460] Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (compon…

Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3, IIOP to compromise Oracle WebCenter Enterprise Capture. Successful attacks of this vulnerability can result in take…

O Crítico vulnerabilidad

21/07/2026

[CVE-2026-60461] Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (compon…

Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via T3, IIOP to compromise Oracle WebCenter Enterprise Capture. While the vulnerability is in Oracle WebCenter Enterprise Ca…

O Alto vulnerabilidad

21/07/2026

[CVE-2026-60462] Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Conten…

Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Content. Successful attacks of this vulnerability can result in takeover of Oracle WebCente…

O Crítico vulnerabilidad

21/07/2026

[CVE-2026-60463] Vulnerability in the WebCenter Content: Imaging product of Oracle Fusion Middleware (component: Core…

Vulnerability in the WebCenter Content: Imaging product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3, IIOP to compromise WebCenter Content: Imaging. Successful attacks of this vulnerability can result in takeover of WebCenter Content: …

O Crítico vulnerabilidad

21/07/2026

[CVE-2026-60446] Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (compon…

Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3, IIOP to compromise Oracle WebCenter Enterprise Capture. Successful attacks of this vulnerability can result in take…

O Alto vulnerabilidad

21/07/2026

[CVE-2026-60450] Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Conten…

Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle WebCenter Content. Successful attacks of this vulnerability can result in takeover of Oracle WebCent…

M Crítico vulnerabilidad

21/07/2026

[CVE-2026-60441] Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messa…

Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabler). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3, IIOP to compromise Service Delivery Platform. Successful attacks of this vulnerability can result in takeover of Service …

M Crítico vulnerabilidad

21/07/2026

[CVE-2026-60442] Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messa…

Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabler). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3, IIOP to compromise Service Delivery Platform. Successful attacks of this vulnerability can result in takeover of Service …

Alertas de Seguridad de la Información

📬 Alertas semanales SI directo en tu email

🛡 ¿Estás expuesto a alguna de estas vulnerabilidades?