Vulnerabilidades — Alertas SI

O Alto vulnerabilidad

21/07/2026

[CVE-2026-61121] Vulnerability in the Oracle HRMS (UK) product of Oracle E-Business Suite (component: UK Payroll). S…

Vulnerability in the Oracle HRMS (UK) product of Oracle E-Business Suite (component: UK Payroll). Supported versions that are affected are 12.2.8-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle HRMS (UK). Successful attacks of this vulnerability can result in takeover of Oracle HRMS (UK). CVSS 3.1 Base Score 8.8 (Confiden…

M Alto vulnerabilidad

21/07/2026

[CVE-2026-61126] Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communic…

Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications (component: Platform). Supported versions that are affected are 15.0.0.0.0-15.0.1.0.0 and 15.1.0.0.0-15.2.0.0.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Communications Billing and Revenue Management executes to compromise…

M Alto vulnerabilidad

21/07/2026

[CVE-2026-61127] Vulnerability in the Oracle Communications Service Catalog and Design product of Oracle Communicatio…

Vulnerability in the Oracle Communications Service Catalog and Design product of Oracle Communications (component: Solution Designer). Supported versions that are affected are 8.0.0.7.0-8.3.0.2.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Communications Service Catalog and Design. Successful attacks of this vulnerability can…

O Alto vulnerabilidad

21/07/2026

[CVE-2026-61110] Vulnerability in the Oracle Applications DBA product of Oracle E-Business Suite (component: ADPatch)…

Vulnerability in the Oracle Applications DBA product of Oracle E-Business Suite (component: ADPatch). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Applications DBA. Successful attacks of this vulnerability can result in takeover of Oracle Applications DBA. CVSS 3.1 Base S…

O Alto vulnerabilidad

21/07/2026

[CVE-2026-61114] Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component…

Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: DB Privileges). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Application Object Library. Successful attacks of this vulnerability can result in takeover of Oracle Appli…

O Alto vulnerabilidad

21/07/2026

[CVE-2026-61099] Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (compon…

Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle WebCenter Enterprise Capture. Successful attacks of this vulnerability can result in takeover …

O Alto vulnerabilidad

21/07/2026

[CVE-2026-61107] Vulnerability in the Oracle Applications DBA product of Oracle E-Business Suite (component: Internal…

Vulnerability in the Oracle Applications DBA product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Applications DBA. Successful attacks of this vulnerability can result in takeover of Oracle Applications DBA. CV…

M Alto vulnerabilidad

21/07/2026

[CVE-2026-61091] Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communic…

Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications (component: BRM Server). Supported versions that are affected are 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0 and 15.2.0.0.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Communications Billing and Revenue Management executes to compro…

O Alto vulnerabilidad

21/07/2026

[CVE-2026-61094] Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Replica…

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Replication). Supported versions that are affected are MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster: 8.0.0-8.0.47, 8.4.0-8.4.10 and 9.7.0-9.7.1. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server, MySQL Cluster.…

O Alto vulnerabilidad

21/07/2026

[CVE-2026-61098] Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (compon…

Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle WebCenter Enterprise Capture. Successful attacks of this vulnerability can result in takeover …

M Alto vulnerabilidad

21/07/2026

[CVE-2026-61090] Vulnerability in the Oracle Project Foundation product of Oracle E-Business Suite (component: Miscel…

Vulnerability in the Oracle Project Foundation product of Oracle E-Business Suite (component: Miscellaneous). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Project Foundation executes to compromise Oracle Project Foundation. Successful attacks of this vulnerability can result …

M Crítico vulnerabilidad

21/07/2026

[CVE-2026-61076] Vulnerability in the PeopleSoft Enterprise HCM Talent Acquisition Manager product of Oracle PeopleSo…

Vulnerability in the PeopleSoft Enterprise HCM Talent Acquisition Manager product of Oracle PeopleSoft (component: Job Opening). The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise HCM Talent Acquisition Manager. While the vulnerability is in PeopleSoft Enterprise HCM Tale…

M Alto vulnerabilidad

21/07/2026

[CVE-2026-61063] Vulnerability in the PeopleSoft Enterprise SCM Supplier Contract Management product of Oracle People…

Vulnerability in the PeopleSoft Enterprise SCM Supplier Contract Management product of Oracle PeopleSoft (component: Security). The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where PeopleSoft Enterprise SCM Supplier Contract Management executes to compromise PeopleSoft Enterprise SCM Supplier Contrac…

M Alto vulnerabilidad

21/07/2026

[CVE-2026-61053] Vulnerability in the Oracle Communications BRM - Elastic Charging Engine product of Oracle Communica…

Vulnerability in the Oracle Communications BRM - Elastic Charging Engine product of Oracle Communications (component: Diameter Gateway and SDK). Supported versions that are affected are 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0 and 15.2.0.0.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Communications BRM - Elastic Charging Engine execut…

M Alto vulnerabilidad

21/07/2026

[CVE-2026-61055] Vulnerability in the PeopleSoft Enterprise SCM Order Management product of Oracle PeopleSoft (compon…

Vulnerability in the PeopleSoft Enterprise SCM Order Management product of Oracle PeopleSoft (component: Security). The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where PeopleSoft Enterprise SCM Order Management executes to compromise PeopleSoft Enterprise SCM Order Management. Successful attacks of…

M Alto vulnerabilidad

21/07/2026

[CVE-2026-61061] Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware (component: Security Fram…

Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware (component: Security Framework). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle JDeveloper executes to compromise Oracle JDeveloper. Successful attacks of this vulnerability can result in t…

M Alto vulnerabilidad

21/07/2026

[CVE-2026-61062] Vulnerability in the PeopleSoft Enterprise FIN Cash Management product of Oracle PeopleSoft (compone…

Vulnerability in the PeopleSoft Enterprise FIN Cash Management product of Oracle PeopleSoft (component: Cash Management). The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where PeopleSoft Enterprise FIN Cash Management executes to compromise PeopleSoft Enterprise FIN Cash Management. While the vulnera…

M Alto vulnerabilidad

21/07/2026

[CVE-2026-60989] Vulnerability in the Oracle Advanced Collections product of Oracle E-Business Suite (component: Inte…

Vulnerability in the Oracle Advanced Collections product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Advanced Collections. Successful attacks of this vulnerability can result in takeover of Oracle Advanced Coll…

M Alto vulnerabilidad

21/07/2026

[CVE-2026-61006] Vulnerability in the Oracle Process Manufacturing Logistics product of Oracle E-Business Suite (comp…

Vulnerability in the Oracle Process Manufacturing Logistics product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Process Manufacturing Logistics. Successful attacks of this vulnerability can result in takeover …

M Alto vulnerabilidad

21/07/2026

[CVE-2026-61010] Vulnerability in the Oracle Process Manufacturing Systems product of Oracle E-Business Suite (compon…

Vulnerability in the Oracle Process Manufacturing Systems product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Process Manufacturing Systems. Successful attacks of this vulnerability can result in takeover of Or…

Alertas de Seguridad de la Información

📬 Alertas semanales SI directo en tu email

🛡 ¿Estás expuesto a alguna de estas vulnerabilidades?