Advisories · Weakness

Privilege escalation.

Gaining rights a user or process shouldn’t have. Every Advisory and CVE whose weakness (CWE) is one of these, newest first.

CVE-2026-61121 CVE record

CVSS 8.8 High

Missing authentication in Oracle Corporation Oracle HRMS (UK)
- Oracle Corporation Oracle HRMS (UK)
- Privilege escalation
- Broken access control
Not analysed yet 21 Jul 2026
CVE-2026-61120 CVE record

CVSS 7.0 High

Improper privilege management in Oracle Corporation Oracle HRMS (US)
- Oracle Corporation Oracle HRMS (US)
- Privilege escalation
Not analysed yet 21 Jul 2026
CVE-2026-61114 CVE record

CVSS 7.5 High

Improper privilege management in Oracle Corporation Oracle Application Object Library
- Oracle Corporation Oracle Application Object Library
- Privilege escalation
Not analysed yet 21 Jul 2026
CVE-2026-61110 CVE record

CVSS 8.8 High

Missing authentication in Oracle Corporation Oracle Applications DBA
- Oracle Corporation Oracle Applications DBA
- Privilege escalation
- Authentication bypass
Not analysed yet 21 Jul 2026
CVE-2026-61107 CVE record

CVSS 7.2 High

Improper privilege management in Oracle Corporation Oracle Applications DBA
- Oracle Corporation Oracle Applications DBA
- Privilege escalation
Not analysed yet 21 Jul 2026
CVE-2026-61099 CVE record

CVSS 8.8 High

Missing authentication in Oracle Corporation Oracle WebCenter Enterprise Capture
- Oracle Corporation Oracle WebCenter Enterprise Capture
- Privilege escalation
- Broken access control
Not analysed yet 21 Jul 2026
CVE-2026-61098 CVE record

CVSS 8.8 High

Missing authentication in Oracle Corporation Oracle WebCenter Enterprise Capture
- Oracle Corporation Oracle WebCenter Enterprise Capture
- Privilege escalation
- Broken access control
Not analysed yet 21 Jul 2026
CVE-2026-61094 CVE record

CVSS 7.2 High

Improper privilege management in Oracle Corporation MySQL Server and others
- Oracle Corporation MySQL Server
- Oracle Corporation MySQL Cluster
- Privilege escalation
- Broken access control
Not analysed yet 21 Jul 2026
CVE-2026-61091 CVE record

CVSS 7.8 High

Improper privilege management in Oracle Corporation Oracle Communications Billing and Revenue Management
- Oracle Corporation Oracle Communications Billing and Revenue Management
- Privilege escalation
Not analysed yet 21 Jul 2026
CVE-2026-61090 CVE record

CVSS 7.8 High

Improper privilege management in Oracle Corporation Oracle Project Foundation
- Oracle Corporation Oracle Project Foundation
- Privilege escalation
Not analysed yet 21 Jul 2026
CVE-2026-61076 CVE record

CVSS 9.9 CriticalCritical · CVSS 9+

Improper privilege management in Oracle Corporation PeopleSoft Enterprise HCM Talent Acquisition Manager
- Oracle Corporation PeopleSoft Enterprise HCM Talent Acquisition Manager
- Privilege escalation
Not analysed yet 21 Jul 2026
CVE-2026-61064 CVE record

CVSS 5.4 Medium

Improper privilege management in Oracle Corporation Oracle iRecruitment
- Oracle Corporation Oracle iRecruitment
- Privilege escalation
Not analysed yet 21 Jul 2026
CVE-2026-61063 CVE record

CVSS 8.8 High

Improper privilege management in Oracle Corporation PeopleSoft Enterprise SCM Supplier Contract Management
- Oracle Corporation PeopleSoft Enterprise SCM Supplier Contract Management
- Privilege escalation
Not analysed yet 21 Jul 2026
CVE-2026-61062 CVE record

CVSS 8.8 High

Improper privilege management in Oracle Corporation PeopleSoft Enterprise FIN Cash Management
- Oracle Corporation PeopleSoft Enterprise FIN Cash Management
- Privilege escalation
- Broken access control
Not analysed yet 21 Jul 2026
CVE-2026-61061 CVE record

CVSS 7.0 High

Improper privilege management in Oracle Corporation Oracle JDeveloper
- Oracle Corporation Oracle JDeveloper
- Privilege escalation
Not analysed yet 21 Jul 2026
CVE-2026-61055 CVE record

CVSS 7.8 High

Improper privilege management in Oracle Corporation PeopleSoft Enterprise SCM Order Management
- Oracle Corporation PeopleSoft Enterprise SCM Order Management
- Privilege escalation
- Broken access control
Not analysed yet 21 Jul 2026
CVE-2026-61053 CVE record

CVSS 7.8 High

Improper privilege management in Oracle Corporation Oracle Communications BRM - Elastic Charging Engine
- Oracle Corporation Oracle Communications BRM - Elastic Charging Engine
- Privilege escalation
Not analysed yet 21 Jul 2026
CVE-2026-61023 CVE record

CVSS 6.4 Medium

Improper privilege management in Oracle Corporation Oracle Inventory Management
- Oracle Corporation Oracle Inventory Management
- Privilege escalation
Not analysed yet 21 Jul 2026
CVE-2026-61013 CVE record

CVSS 6.6 Medium

Improper access control in Oracle Corporation Oracle Time and Labor
- Oracle Corporation Oracle Time and Labor
- Privilege escalation
- Broken access control
Not analysed yet 21 Jul 2026
CVE-2026-61010 CVE record

CVSS 8.8 High

Missing authentication in Oracle Corporation Oracle Process Manufacturing Systems
- Oracle Corporation Oracle Process Manufacturing Systems
- Privilege escalation
- Broken access control
Not analysed yet 21 Jul 2026
CVE-2026-61006 CVE record

CVSS 7.2 High

Improper privilege management in Oracle Corporation Oracle Process Manufacturing Logistics
- Oracle Corporation Oracle Process Manufacturing Logistics
- Privilege escalation
Not analysed yet 21 Jul 2026
CVE-2026-60989 CVE record

CVSS 8.8 High

Missing authentication in Oracle Corporation Oracle Advanced Collections
- Oracle Corporation Oracle Advanced Collections
- Privilege escalation
- Broken access control
Not analysed yet 21 Jul 2026
CVE-2026-60988 CVE record

CVSS 7.5 High

Missing authentication in Oracle Corporation Oracle Project Portfolio Analysis
- Oracle Corporation Oracle Project Portfolio Analysis
- Privilege escalation
- Broken access control
Not analysed yet 21 Jul 2026
CVE-2026-60973 CVE record

CVSS 7.8 High

Improper privilege management in Oracle Corporation Oracle E-Business Tax
- Oracle Corporation Oracle E-Business Tax
- Privilege escalation
Not analysed yet 21 Jul 2026
CVE-2026-60957 CVE record

CVSS 5.4 Medium

Open redirect in Oracle Corporation Oracle Transportation Execution
- Oracle Corporation Oracle Transportation Execution
- Privilege escalation
- Broken access control
Not analysed yet 21 Jul 2026
CVE-2026-60952 CVE record

CVSS 8.8 High

Missing authentication in Oracle Corporation Oracle Transportation Execution
- Oracle Corporation Oracle Transportation Execution
- Privilege escalation
- Authentication bypass
Not analysed yet 21 Jul 2026
CVE-2026-60943 CVE record

CVSS 7.5 High

Improper privilege management in Oracle Corporation Oracle Service Fulfillment Manager
- Oracle Corporation Oracle Service Fulfillment Manager
- Privilege escalation
Not analysed yet 21 Jul 2026
CVE-2026-60941 CVE record

CVSS 8.7 High

Improper access control in Oracle Corporation Oracle Service Fulfillment Manager
- Oracle Corporation Oracle Service Fulfillment Manager
- Privilege escalation
- Broken access control
Not analysed yet 21 Jul 2026
CVE-2026-60938 CVE record

CVSS 4.1 Medium

Improper privilege management in Oracle Corporation Oracle Labor Distribution
- Oracle Corporation Oracle Labor Distribution
- Privilege escalation
Not analysed yet 21 Jul 2026
CVE-2026-60932 CVE record

CVSS 8.8 High

Missing authentication in Oracle Corporation Oracle Labor Distribution
- Oracle Corporation Oracle Labor Distribution
- Privilege escalation
- Authentication bypass
Not analysed yet 21 Jul 2026
CVE-2026-60931 CVE record

CVSS 7.5 High

Missing authentication in Oracle Corporation Oracle Public Sector Financials
- Oracle Corporation Oracle Public Sector Financials
- Privilege escalation
- Broken access control
Not analysed yet 21 Jul 2026
CVE-2026-60927 CVE record

CVSS 7.5 High

Missing authentication in Oracle Corporation Oracle Public Sector Financials
- Oracle Corporation Oracle Public Sector Financials
- Privilege escalation
- Broken access control
Not analysed yet 21 Jul 2026
CVE-2026-60925 CVE record

CVSS 7.2 High

Missing authentication in Oracle Corporation Oracle Public Sector Payroll
- Oracle Corporation Oracle Public Sector Payroll
- Privilege escalation
- Broken access control
Not analysed yet 21 Jul 2026
CVE-2026-60924 CVE record

CVSS 8.8 High

Missing authentication in Oracle Corporation Oracle Public Sector Payroll
- Oracle Corporation Oracle Public Sector Payroll
- Privilege escalation
- Authentication bypass
Not analysed yet 21 Jul 2026
CVE-2026-60920 CVE record

CVSS 8.8 High

Missing authentication in Oracle Corporation Oracle Customer Care
- Oracle Corporation Oracle Customer Care
- Privilege escalation
- Authentication bypass
Not analysed yet 21 Jul 2026
CVE-2026-60918 CVE record

CVSS 7.2 High

Missing authentication in Oracle Corporation Oracle Shipping Execution
- Oracle Corporation Oracle Shipping Execution
- Privilege escalation
- Broken access control
Not analysed yet 21 Jul 2026
CVE-2026-60901 CVE record

CVSS 8.8 High

Missing authentication in Oracle Corporation Oracle Project Intelligence
- Oracle Corporation Oracle Project Intelligence
- Privilege escalation
- Broken access control
Not analysed yet 21 Jul 2026
CVE-2026-60900 CVE record

CVSS 7.2 High

Improper privilege management in Oracle Corporation Oracle HCM Configuration Workbench
- Oracle Corporation Oracle HCM Configuration Workbench
- Privilege escalation
Not analysed yet 21 Jul 2026
CVE-2026-60898 CVE record

CVSS 8.8 High

Missing authentication in Oracle Corporation Oracle Warehouse Management
- Oracle Corporation Oracle Warehouse Management
- Privilege escalation
- Broken access control
Not analysed yet 21 Jul 2026
CVE-2026-60897 CVE record

CVSS 8.8 High

Missing authentication in Oracle Corporation Oracle Payroll
- Oracle Corporation Oracle Payroll
- Privilege escalation
- Broken access control
Not analysed yet 21 Jul 2026
CVE-2026-60894 CVE record

CVSS 7.5 High

Missing authentication in Oracle Corporation Oracle Payroll
- Oracle Corporation Oracle Payroll
- Privilege escalation
- Broken access control
Not analysed yet 21 Jul 2026
CVE-2026-60890 CVE record

CVSS 8.8 High

Missing authentication in Oracle Corporation Oracle Payroll
- Oracle Corporation Oracle Payroll
- Privilege escalation
- Broken access control
Not analysed yet 21 Jul 2026
CVE-2026-60886 CVE record

CVSS 7.6 High

Improper authorization in Oracle Corporation Oracle Work in Process
- Oracle Corporation Oracle Work in Process
- Information disclosure
- Privilege escalation
Not analysed yet 21 Jul 2026
CVE-2026-60872 CVE record

CVSS 8.8 High

Missing authentication in Oracle Corporation Oracle Order Management
- Oracle Corporation Oracle Order Management
- Privilege escalation
- Broken access control
Not analysed yet 21 Jul 2026
CVE-2026-60863 CVE record

CVSS 8.8 High

Missing authentication in Oracle Corporation Oracle Advanced Pricing
- Oracle Corporation Oracle Advanced Pricing
- Privilege escalation
- Broken access control
Not analysed yet 21 Jul 2026
CVE-2026-60859 CVE record

CVSS 7.5 High

Missing authentication in Oracle Corporation Oracle Quoting
- Oracle Corporation Oracle Quoting
- Privilege escalation
- Broken access control
Not analysed yet 21 Jul 2026
CVE-2026-60855 CVE record

CVSS 7.5 High

Missing authentication in Oracle Corporation Oracle Quality
- Oracle Corporation Oracle Quality
- Privilege escalation
- Broken access control
Not analysed yet 21 Jul 2026
CVE-2026-60854 CVE record

CVSS 8.2 High

Improper access control in Oracle Corporation Oracle Quality
- Oracle Corporation Oracle Quality
- Privilege escalation
- Broken access control
Not analysed yet 21 Jul 2026
CVE-2026-60847 CVE record

CVSS 3.4 Low

Improper access control in Oracle Corporation Oracle Order Entry
- Oracle Corporation Oracle Order Entry
- Privilege escalation
- Broken access control
Not analysed yet 21 Jul 2026
CVE-2026-60837 CVE record

CVSS 8.4 High

Improper access control in Oracle Corporation Oracle Price Protection
- Oracle Corporation Oracle Price Protection
- Privilege escalation
- Broken access control
Not analysed yet 21 Jul 2026
CVE-2026-60836 CVE record

CVSS 7.2 High

Improper privilege management in Oracle Corporation Oracle HCM Common Architecture
- Oracle Corporation Oracle HCM Common Architecture
- Privilege escalation
Not analysed yet 21 Jul 2026
CVE-2026-60833 CVE record

CVSS 7.0 High

Improper privilege management in Oracle Corporation Oracle Solaris
- Oracle Corporation Oracle Solaris
- Privilege escalation
Not analysed yet 21 Jul 2026
CVE-2026-60719 CVE record

CVSS 9.9 CriticalCritical · CVSS 9+

Improper access control in Oracle Corporation Oracle BI Publisher
- Oracle Corporation Oracle BI Publisher
- Privilege escalation
- Broken access control
Not analysed yet 21 Jul 2026
CVE-2026-60678 CVE record

CVSS 8.8 High

Missing authentication in Oracle Corporation Oracle General Ledger
- Oracle Corporation Oracle General Ledger
- Privilege escalation
- Authentication bypass
Not analysed yet 21 Jul 2026
CVE-2026-60663 CVE record

CVSS 9.9 CriticalCritical · CVSS 9+

Improper access control in Oracle Corporation Oracle WebCenter Content
- Oracle Corporation Oracle WebCenter Content
- Privilege escalation
- Broken access control
Not analysed yet 21 Jul 2026
CVE-2026-60661 CVE record

CVSS 7.8 High

Improper privilege management in Oracle Corporation Oracle Solaris
- Oracle Corporation Oracle Solaris
- Privilege escalation
Not analysed yet 21 Jul 2026
CVE-2026-60654 CVE record

CVSS 8.8 High

Missing authentication in Oracle Corporation Oracle WebCenter Content
- Oracle Corporation Oracle WebCenter Content
- Privilege escalation
- Broken access control
Not analysed yet 21 Jul 2026
CVE-2026-60625 CVE record

CVSS 7.8 High

Improper privilege management in Oracle Corporation Oracle Data Integrator
- Oracle Corporation Oracle Data Integrator
- Privilege escalation
Not analysed yet 21 Jul 2026
CVE-2026-60619 CVE record

CVSS 7.5 High

Missing authentication in Oracle Corporation JD Edwards EnterpriseOne HCM Foundation
- Oracle Corporation JD Edwards EnterpriseOne HCM Foundation
- Privilege escalation
- Broken access control
Not analysed yet 21 Jul 2026
CVE-2026-60583 CVE record

CVSS 8.8 High

Missing authentication in Oracle Corporation Oracle Transportation Management
- Oracle Corporation Oracle Transportation Management
- Privilege escalation
- Broken access control
Not analysed yet 21 Jul 2026