{"schema_version":1,"title":"Oracle Corporation vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 19 vulnerabilities in Oracle Corporation: 0 in the last 7 days and 13 in the last 90 days, 2 of them critical and 0 exploited in the wild. The most recent, CVE-2026-62476, was published on 21 July 2026. 1 technology has a page of its own.","url":"https://junglewise.ai/threats/vendors/oracle-corporation","json_url":"https://junglewise.ai/threats/vendors/oracle-corporation.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/vendors/oracle-corporation","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"vendor","counts":{"high":8,"all_time":19,"critical":2,"exploited":0,"last_7_days":0,"last_30_days":0,"last_90_days":13,"last_365_days":19},"latest":[{"cve":"CVE-2026-62476","cvss":8.8,"slug":"cve-2026-62476-oracle-public-sector-payroll-full-compromise-in-internal","title":"Oracle Public Sector Payroll full compromise in Internal Operations","severity":"high","exploited":false,"published_at":"2026-07-21T22:19:03.913+00:00","url":"https://junglewise.ai/threats/cve-2026-62476-oracle-public-sector-payroll-full-compromise-in-internal"},{"cve":"CVE-2026-61280","cvss":6.3,"slug":"cve-2026-61280-oracle-sales-for-handhelds-data-manipulation-in-outlook-sync-win","title":"Oracle Sales for Handhelds data manipulation in Outlook Sync Win 32","severity":"medium","exploited":false,"published_at":"2026-07-21T22:18:58.19+00:00","url":"https://junglewise.ai/threats/cve-2026-61280-oracle-sales-for-handhelds-data-manipulation-in-outlook-sync-win"},{"cve":"CVE-2026-61256","cvss":6.3,"slug":"cve-2026-61256-oracle-advanced-inbound-telephony-unauthorized-data-access-in","title":"Oracle Advanced Inbound Telephony unauthorized data access in Servers","severity":"medium","exploited":false,"published_at":"2026-07-21T22:18:56.36+00:00","url":"https://junglewise.ai/threats/cve-2026-61256-oracle-advanced-inbound-telephony-unauthorized-data-access-in"},{"cve":"CVE-2026-61048","cvss":3.1,"slug":"cve-2026-61048-oracle-inventory-optimization-partial-denial-of-service-in-user","title":"Oracle Inventory Optimization partial denial of service in User Interface","severity":"low","exploited":false,"published_at":"2026-07-21T22:18:35.617+00:00","url":"https://junglewise.ai/threats/cve-2026-61048-oracle-inventory-optimization-partial-denial-of-service-in-user"},{"cve":"CVE-2026-61028","cvss":1.9,"slug":"cve-2026-61028-oracle-inventory-management-partial-denial-of-service-in-internal","title":"Oracle Inventory Management partial denial of service in Internal Operations","severity":"low","exploited":false,"published_at":"2026-07-21T22:18:34.257+00:00","url":"https://junglewise.ai/threats/cve-2026-61028-oracle-inventory-management-partial-denial-of-service-in-internal"},{"cve":"CVE-2026-61023","cvss":6.4,"slug":"cve-2026-61023-oracle-inventory-management-takeover-via-internal-operations","title":"Oracle Inventory Management takeover via Internal Operations component","severity":"medium","exploited":false,"published_at":"2026-07-21T22:18:33.69+00:00","url":"https://junglewise.ai/threats/cve-2026-61023-oracle-inventory-management-takeover-via-internal-operations"},{"cve":"CVE-2026-61014","cvss":7.7,"slug":"cve-2026-61014-oracle-e-business-suite-information-disclosure-in-inventory","title":"Oracle E-Business Suite information disclosure in Inventory Management","severity":"high","exploited":false,"published_at":"2026-07-21T22:18:33.243+00:00","url":"https://junglewise.ai/threats/cve-2026-61014-oracle-e-business-suite-information-disclosure-in-inventory"},{"cve":"CVE-2026-61004","cvss":8.1,"slug":"cve-2026-61004-oracle-landed-cost-management-data-compromise-in-internal","title":"Oracle Landed Cost Management data compromise in Internal Operations","severity":"high","exploited":false,"published_at":"2026-07-21T22:18:32.46+00:00","url":"https://junglewise.ai/threats/cve-2026-61004-oracle-landed-cost-management-data-compromise-in-internal"},{"cve":"CVE-2026-60917","cvss":8.1,"slug":"cve-2026-60917-oracle-inventory-management-data-compromise-in-core-receiving","title":"Oracle Inventory Management data compromise in Core Receiving","severity":"high","exploited":false,"published_at":"2026-07-21T22:18:26.817+00:00","url":"https://junglewise.ai/threats/cve-2026-60917-oracle-inventory-management-data-compromise-in-core-receiving"},{"cve":"CVE-2026-60846","cvss":6.7,"slug":"cve-2026-60846-oracle-e-business-suite-data-compromise-in-mobile-application","title":"Oracle E-Business Suite data compromise in Mobile Application Server","severity":"medium","exploited":false,"published_at":"2026-07-21T22:18:22.423+00:00","url":"https://junglewise.ai/threats/cve-2026-60846-oracle-e-business-suite-data-compromise-in-mobile-application"},{"cve":"CVE-2026-60843","cvss":6.5,"slug":"cve-2026-60843-oracle-citizen-interaction-center-data-compromise-in-internal","title":"Oracle Citizen Interaction Center data compromise in Internal Operations","severity":"medium","exploited":false,"published_at":"2026-07-21T22:18:22.09+00:00","url":"https://junglewise.ai/threats/cve-2026-60843-oracle-citizen-interaction-center-data-compromise-in-internal"},{"cve":"CVE-2026-60521","cvss":6.5,"slug":"cve-2026-60521-oracle-advanced-pricing-unauthorized-data-access-in-price-list","title":"Oracle Advanced Pricing unauthorized data access in Price List","severity":"medium","exploited":false,"published_at":"2026-07-21T22:17:51.723+00:00","url":"https://junglewise.ai/threats/cve-2026-60521-oracle-advanced-pricing-unauthorized-data-access-in-price-list"},{"cve":"CVE-2026-60491","cvss":6.3,"slug":"cve-2026-60491-oracle-e-business-suite-data-manipulation-in-advanced-inbound","title":"Oracle E-Business Suite data manipulation in Advanced Inbound Telephony","severity":"medium","exploited":false,"published_at":"2026-07-21T22:17:50.097+00:00","url":"https://junglewise.ai/threats/cve-2026-60491-oracle-e-business-suite-data-manipulation-in-advanced-inbound"},{"cve":"CVE-2026-46976","cvss":7.2,"epss":0.0047,"slug":"cve-2026-46976-oracle-public-sector-payroll-improper-access-control-in-internal","title":"Oracle Public Sector Payroll improper access control in Internal Operations","severity":"high","exploited":false,"published_at":"2026-06-17T10:54:16.597+00:00","url":"https://junglewise.ai/threats/cve-2026-46976-oracle-public-sector-payroll-improper-access-control-in-internal"},{"cve":"CVE-2026-46969","cvss":7.2,"epss":0.0047,"slug":"cve-2026-46969-oracle-financials-for-emea-improper-access-control-in-internal","title":"Oracle Financials for EMEA improper access control in Internal Operations","severity":"high","exploited":false,"published_at":"2026-06-17T10:54:15.98+00:00","url":"https://junglewise.ai/threats/cve-2026-46969-oracle-financials-for-emea-improper-access-control-in-internal"},{"cve":"CVE-2026-46861","cvss":9.6,"epss":0.0039,"slug":"cve-2026-46861-oracle-mysql-ndb-cluster-improper-access-control-in-ndb-operator","title":"Oracle MySQL NDB Cluster improper access control in NDB Operator","severity":"critical","exploited":false,"published_at":"2026-06-17T10:54:03.76+00:00","url":"https://junglewise.ai/threats/cve-2026-46861-oracle-mysql-ndb-cluster-improper-access-control-in-ndb-operator"},{"cve":"CVE-2026-46848","cvss":7.9,"epss":0.0015,"slug":"cve-2026-46848-oracle-weblogic-server-data-compromise-in-console","title":"Oracle WebLogic Server data compromise in Console","severity":"high","exploited":false,"published_at":"2026-06-17T10:54:02.383+00:00","url":"https://junglewise.ai/threats/cve-2026-46848-oracle-weblogic-server-data-compromise-in-console"},{"cve":"CVE-2026-46794","cvss":9.9,"epss":0.0048,"slug":"cve-2026-46794-oracle-identity-manager-connector-privilege-escalation-in-generic","title":"Oracle Identity Manager Connector privilege escalation in Generic Unix Connector","severity":"critical","exploited":false,"published_at":"2026-06-17T10:53:57.003+00:00","url":"https://junglewise.ai/threats/cve-2026-46794-oracle-identity-manager-connector-privilege-escalation-in-generic"},{"cve":"CVE-2026-35259","cvss":8.8,"epss":0.0043,"slug":"cve-2026-35259-oracle-weblogic-server-open-redirect-in-console","title":"Oracle WebLogic Server open redirect in Console","severity":"high","exploited":false,"published_at":"2026-06-17T10:40:18.28+00:00","url":"https://junglewise.ai/threats/cve-2026-35259-oracle-weblogic-server-open-redirect-in-console"}],"vendor":{"hub":true,"name":"Oracle Corporation","slug":"oracle-corporation","homepage":"https://www.oracle.com/","description":"An American multinational computer technology corporation that provides software, cloud systems, and hardware products.","url":"https://junglewise.ai/threats/vendors/oracle-corporation"},"weekly":[{"week":"2026-06-29","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-06","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-13","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-20","critical":0,"exploited":0,"vulnerabilities":13},{"week":"2026-07-27","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-03","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-10","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0}],"most_severe":[{"cve":"CVE-2026-46794","cvss":9.9,"epss":0.0048,"slug":"cve-2026-46794-oracle-identity-manager-connector-privilege-escalation-in-generic","title":"Oracle Identity Manager Connector privilege escalation in Generic Unix Connector","severity":"critical","exploited":false,"published_at":"2026-06-17T10:53:57.003+00:00","url":"https://junglewise.ai/threats/cve-2026-46794-oracle-identity-manager-connector-privilege-escalation-in-generic"},{"cve":"CVE-2026-46861","cvss":9.6,"epss":0.0039,"slug":"cve-2026-46861-oracle-mysql-ndb-cluster-improper-access-control-in-ndb-operator","title":"Oracle MySQL NDB Cluster improper access control in NDB Operator","severity":"critical","exploited":false,"published_at":"2026-06-17T10:54:03.76+00:00","url":"https://junglewise.ai/threats/cve-2026-46861-oracle-mysql-ndb-cluster-improper-access-control-in-ndb-operator"},{"cve":"CVE-2026-35259","cvss":8.8,"epss":0.0043,"slug":"cve-2026-35259-oracle-weblogic-server-open-redirect-in-console","title":"Oracle WebLogic Server open redirect in Console","severity":"high","exploited":false,"published_at":"2026-06-17T10:40:18.28+00:00","url":"https://junglewise.ai/threats/cve-2026-35259-oracle-weblogic-server-open-redirect-in-console"},{"cve":"CVE-2026-62476","cvss":8.8,"slug":"cve-2026-62476-oracle-public-sector-payroll-full-compromise-in-internal","title":"Oracle Public Sector Payroll full compromise in Internal Operations","severity":"high","exploited":false,"published_at":"2026-07-21T22:19:03.913+00:00","url":"https://junglewise.ai/threats/cve-2026-62476-oracle-public-sector-payroll-full-compromise-in-internal"},{"cve":"CVE-2026-61004","cvss":8.1,"slug":"cve-2026-61004-oracle-landed-cost-management-data-compromise-in-internal","title":"Oracle Landed Cost Management data compromise in Internal Operations","severity":"high","exploited":false,"published_at":"2026-07-21T22:18:32.46+00:00","url":"https://junglewise.ai/threats/cve-2026-61004-oracle-landed-cost-management-data-compromise-in-internal"},{"cve":"CVE-2026-60917","cvss":8.1,"slug":"cve-2026-60917-oracle-inventory-management-data-compromise-in-core-receiving","title":"Oracle Inventory Management data compromise in Core Receiving","severity":"high","exploited":false,"published_at":"2026-07-21T22:18:26.817+00:00","url":"https://junglewise.ai/threats/cve-2026-60917-oracle-inventory-management-data-compromise-in-core-receiving"},{"cve":"CVE-2026-46848","cvss":7.9,"epss":0.0015,"slug":"cve-2026-46848-oracle-weblogic-server-data-compromise-in-console","title":"Oracle WebLogic Server data compromise in Console","severity":"high","exploited":false,"published_at":"2026-06-17T10:54:02.383+00:00","url":"https://junglewise.ai/threats/cve-2026-46848-oracle-weblogic-server-data-compromise-in-console"},{"cve":"CVE-2026-61014","cvss":7.7,"slug":"cve-2026-61014-oracle-e-business-suite-information-disclosure-in-inventory","title":"Oracle E-Business Suite information disclosure in Inventory Management","severity":"high","exploited":false,"published_at":"2026-07-21T22:18:33.243+00:00","url":"https://junglewise.ai/threats/cve-2026-61014-oracle-e-business-suite-information-disclosure-in-inventory"},{"cve":"CVE-2026-46976","cvss":7.2,"epss":0.0047,"slug":"cve-2026-46976-oracle-public-sector-payroll-improper-access-control-in-internal","title":"Oracle Public Sector Payroll improper access control in Internal Operations","severity":"high","exploited":false,"published_at":"2026-06-17T10:54:16.597+00:00","url":"https://junglewise.ai/threats/cve-2026-46976-oracle-public-sector-payroll-improper-access-control-in-internal"},{"cve":"CVE-2026-46969","cvss":7.2,"epss":0.0047,"slug":"cve-2026-46969-oracle-financials-for-emea-improper-access-control-in-internal","title":"Oracle Financials for EMEA improper access control in Internal Operations","severity":"high","exploited":false,"published_at":"2026-06-17T10:54:15.98+00:00","url":"https://junglewise.ai/threats/cve-2026-46969-oracle-financials-for-emea-improper-access-control-in-internal"}],"generated_at":"2026-09-26T09:11:00.170868+00:00","technologies":[{"name":"Oracle Corporation Inventory Management","slug":"inventory-management","vulnerabilities":4,"url":"https://junglewise.ai/threats/technologies/inventory-management"}]}