Approved changes feed: RSS · Atom

cpe:2.3:a:oracle_corporation:oracle_platform_security_for_java:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorOracle Corporation (5277d41a-eb16-5c58-a20b-58d92ce4ed28)
ProductOracle Platform Security For Java (f325e0c2-949b-5af2-b85b-6533d47ea132)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-61246 vulnerable 2026-07-29 01:06:18.628316 Details available
HIGH (8.8)
Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (component: Centralized Thirdparty Jars). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Platform Security for Java. Successful attacks of this vulnerability can result in takeover of Oracle Platform Security for Java. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).
Published: 2026-07-22T22:24:27.765Z
Updated: 2026-07-23T14:30:34.222Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-60455 vulnerable 2026-07-29 01:03:24.073162 Details available
HIGH (8.8)
Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (component: Centralized Thirdparty Jars). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Platform Security for Java. Successful attacks of this vulnerability can result in takeover of Oracle Platform Security for Java. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).
Published: 2026-07-22T22:24:27.427Z
Updated: 2026-07-23T15:07:51.270Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-60439 vulnerable 2026-07-29 01:03:24.066592 Details available
HIGH (8.8)
Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (component: Centralized Thirdparty Jars). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Platform Security for Java. Successful attacks of this vulnerability can result in takeover of Oracle Platform Security for Java. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).
Published: 2026-07-22T22:24:27.087Z
Updated: 2026-07-23T14:31:19.102Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-60373 vulnerable 2026-07-29 01:03:24.036808 Details available
HIGH (8.8)
Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (component: Centralized Thirdparty Jars). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Platform Security for Java. Successful attacks of this vulnerability can result in takeover of Oracle Platform Security for Java. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).
Published: 2026-07-22T22:24:26.756Z
Updated: 2026-07-23T14:32:06.647Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-60372 vulnerable 2026-07-29 01:03:24.036534 Details available
CRITICAL (9.8)
Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (component: Centralized Thirdparty Jars). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Platform Security for Java. Successful attacks of this vulnerability can result in takeover of Oracle Platform Security for Java. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).
Published: 2026-07-22T22:24:26.428Z
Updated: 2026-07-23T14:32:58.133Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-60371 vulnerable 2026-07-29 01:03:24.036370 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-60370 vulnerable 2026-07-29 01:03:24.035929 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-60369 vulnerable 2026-07-29 01:03:24.035674 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-60368 vulnerable 2026-07-29 01:03:24.035252 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-60367 vulnerable 2026-07-29 01:03:24.034814 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-60366 vulnerable 2026-07-29 01:03:24.031014 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.