Alertas de Seguridad de la Información

O Crítico vulnerabilidad

21/07/2026

[CVE-2026-61145] Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of O…

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acquisition System). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Commerce Guided Search / Oracle Commerce Experience Manager. Successful atta…

nvdcriticovulnerabilidad CVSS 9.8 NVD

O Crítico vulnerabilidad

21/07/2026

[CVE-2026-61146] Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of O…

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acquisition System). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Commerce Guided Search / Oracle Commerce Experience Manager. While the vulner…

nvdcriticovulnerabilidad CVSS 9.9 NVD

O Crítico vulnerabilidad

21/07/2026

[CVE-2026-61129] Vulnerability in the Oracle Commerce Platform product of Oracle Commerce (component: ATG Portals). …

Vulnerability in the Oracle Commerce Platform product of Oracle Commerce (component: ATG Portals). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Commerce Platform. Successful attacks of this vulnerability can result in takeover of Oracle Commerce Platform. CVSS 3.1 Base Score 9…

nvdcriticovulnerabilidad CVSS 9.8 NVD

O Crítico vulnerabilidad

21/07/2026

[CVE-2026-61130] Vulnerability in the Oracle Commerce Platform product of Oracle Commerce (component: Dynamo Applicat…

Vulnerability in the Oracle Commerce Platform product of Oracle Commerce (component: Dynamo Application Framework). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Commerce Platform. Successful attacks of this vulnerability can result in unauthorized access to critical data or c…

nvdcriticovulnerabilidad CVSS 9.1 NVD

O Crítico vulnerabilidad

21/07/2026

[CVE-2026-61131] Vulnerability in the Oracle Commerce Platform product of Oracle Commerce (component: Dynamo Applicat…

Vulnerability in the Oracle Commerce Platform product of Oracle Commerce (component: Dynamo Application Framework). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Commerce Platform. Successful attacks of this vulnerability can result in takeover of Oracle Commerce Platform. CVSS…

nvdcriticovulnerabilidad CVSS 9.8 NVD

O Alto vulnerabilidad

21/07/2026

[CVE-2026-61132] Vulnerability in the Oracle Commerce Platform product of Oracle Commerce (component: Dynamo Applicat…

Vulnerability in the Oracle Commerce Platform product of Oracle Commerce (component: Dynamo Application Framework). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Commerce Platform. Successful attacks require human interaction from a person other than the attacker and while the v…

nvdaltovulnerabilidad CVSS 7.6 NVD

O Alto vulnerabilidad

21/07/2026

[CVE-2026-61133] Vulnerability in the Oracle Commerce Platform product of Oracle Commerce (component: Dynamo Applicat…

Vulnerability in the Oracle Commerce Platform product of Oracle Commerce (component: Dynamo Application Framework). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via LDAP to compromise Oracle Commerce Platform. Successful attacks of this vulnerability can result in unauthorized access to critical data or c…

nvdaltovulnerabilidad CVSS 7.5 NVD

O Alto vulnerabilidad

21/07/2026

[CVE-2026-61135] Vulnerability in the Oracle Commerce Platform product of Oracle Commerce (component: Dynamo Applicat…

Vulnerability in the Oracle Commerce Platform product of Oracle Commerce (component: Dynamo Application Framework). The supported version that is affected is 11.4.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Commerce Platform. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modi…

nvdaltovulnerabilidad CVSS 7.4 NVD

O Alto vulnerabilidad

21/07/2026

[CVE-2026-61136] Vulnerability in the Oracle Commerce Platform product of Oracle Commerce (component: Dynamo Applicat…

Vulnerability in the Oracle Commerce Platform product of Oracle Commerce (component: Dynamo Application Framework). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Commerce Platform. Successful attacks of this vulnerability can result in unauthorized update, insert or delete acc…

nvdaltovulnerabilidad CVSS 7.3 NVD

O Alto vulnerabilidad

21/07/2026

[CVE-2026-61119] Vulnerability in the Oracle HRMS (UK) product of Oracle E-Business Suite (component: UK Payroll). S…

Vulnerability in the Oracle HRMS (UK) product of Oracle E-Business Suite (component: UK Payroll). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle HRMS (UK). Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to crit…

nvdaltovulnerabilidad CVSS 7.1 NVD

O Alto vulnerabilidad

21/07/2026

[CVE-2026-61120] Vulnerability in the Oracle HRMS (US) product of Oracle E-Business Suite (component: Internal Operat…

Vulnerability in the Oracle HRMS (US) product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle HRMS (US) executes to compromise Oracle HRMS (US). Successful attacks of this vulnerability can result in takeover of Orac…

nvdaltovulnerabilidad CVSS 7.0 NVD

O Alto vulnerabilidad

21/07/2026

[CVE-2026-61121] Vulnerability in the Oracle HRMS (UK) product of Oracle E-Business Suite (component: UK Payroll). S…

Vulnerability in the Oracle HRMS (UK) product of Oracle E-Business Suite (component: UK Payroll). Supported versions that are affected are 12.2.8-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle HRMS (UK). Successful attacks of this vulnerability can result in takeover of Oracle HRMS (UK). CVSS 3.1 Base Score 8.8 (Confiden…

nvdaltovulnerabilidad CVSS 8.8 NVD

O Alto vulnerabilidad

21/07/2026

[CVE-2026-61122] Vulnerability in the Oracle HRMS (UK) product of Oracle E-Business Suite (component: UK Payroll). S…

Vulnerability in the Oracle HRMS (UK) product of Oracle E-Business Suite (component: UK Payroll). Supported versions that are affected are 12.2.9-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle HRMS (UK). Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to crit…

nvdaltovulnerabilidad CVSS 8.1 NVD

O Alto vulnerabilidad

21/07/2026

[CVE-2026-61110] Vulnerability in the Oracle Applications DBA product of Oracle E-Business Suite (component: ADPatch)…

Vulnerability in the Oracle Applications DBA product of Oracle E-Business Suite (component: ADPatch). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Applications DBA. Successful attacks of this vulnerability can result in takeover of Oracle Applications DBA. CVSS 3.1 Base S…

nvdaltovulnerabilidad CVSS 8.8 NVD

O Alto vulnerabilidad

21/07/2026

[CVE-2026-61113] Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component…

Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Core). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Application Object Library. Successful attacks of this vulnerability can result in unauthorized creation, deletion…

nvdaltovulnerabilidad CVSS 7.4 NVD

O Alto vulnerabilidad

21/07/2026

[CVE-2026-61114] Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component…

Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: DB Privileges). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Application Object Library. Successful attacks of this vulnerability can result in takeover of Oracle Appli…

nvdaltovulnerabilidad CVSS 7.5 NVD

O Alto vulnerabilidad

21/07/2026

[CVE-2026-61115] Vulnerability in the Oracle Order Management product of Oracle E-Business Suite (component: Product …

Vulnerability in the Oracle Order Management product of Oracle E-Business Suite (component: Product Diagnostic Tools). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Order Management. Successful attacks of this vulnerability can result in takeover of Oracle Order Managemen…

nvdaltovulnerabilidad CVSS 7.2 NVD

O Alto vulnerabilidad

21/07/2026

[CVE-2026-61116] Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component…

Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Core). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Application Object Library. Successful attacks of this vulnerability can result in unauthorized access to critical d…

nvdaltovulnerabilidad CVSS 7.5 NVD

O Alto vulnerabilidad

21/07/2026

[CVE-2026-61099] Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (compon…

Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle WebCenter Enterprise Capture. Successful attacks of this vulnerability can result in takeover …

nvdaltovulnerabilidad CVSS 8.8 NVD

O Crítico vulnerabilidad

21/07/2026

[CVE-2026-61100] Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (compon…

Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Enterprise Capture. Successful attacks of this vulnerability can result in takeover…

nvdcriticovulnerabilidad CVSS 9.8 NVD