Search
Find a vulnerability
Search criteria
657 vulnerabilities by Oracle
CERTFR-2026-AVI-1186
Vulnerability from certfr_avis - Published: 2026-09-16 - Updated: 2026-09-16
De multiples vulnérabilités ont été découvertes dans Oracle Weblogic. Elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance.
Solutions
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
Impacted products
References
| Title | Publication Time | Tags | |||
|---|---|---|---|---|---|
|
|||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Oracle WebLogic Server version 14.1.2.0.0",
"product": {
"name": "Weblogic",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "Oracle WebLogic Server version 12.2.1.4.0",
"product": {
"name": "Weblogic",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "Oracle WebLogic Server version 15.1.1.0.0",
"product": {
"name": "Weblogic",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "Oracle WebLogic Server version 14.1.1.0.0",
"product": {
"name": "Weblogic",
"vendor": {
"name": "Oracle",
"scada": false
}
}
}
],
"affected_systems_content": "",
"content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
"cves": [
{
"name": "CVE-2026-83021",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-83021"
},
{
"name": "CVE-2026-70756",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-70756"
},
{
"name": "CVE-2026-70757",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-70757"
},
{
"name": "CVE-2026-83038",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-83038"
},
{
"name": "CVE-2026-70748",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-70748"
}
],
"initial_release_date": "2026-09-16T00:00:00",
"last_revision_date": "2026-09-16T00:00:00",
"links": [],
"reference": "CERTFR-2026-AVI-1186",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2026-09-16T00:00:00.000000"
}
],
"risks": [
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans Oracle Weblogic. Elles permettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire \u00e0 distance.",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans Oracle Weblogic",
"vendor_advisories": [
{
"published_at": "2026-09-15",
"title": "Bulletin de s\u00e9curit\u00e9 Oracle Weblogic cspusep2026",
"url": "https://www.oracle.com/security-alerts/cspusep2026.html"
}
]
}
CERTFR-2026-AVI-1185
Vulnerability from certfr_avis - Published: 2026-09-16 - Updated: 2026-09-16
De multiples vulnérabilités ont été découvertes dans Oracle Java SE. Elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance et un déni de service à distance.
Solutions
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
Impacted products
References
| Title | Publication Time | Tags | |||
|---|---|---|---|---|---|
|
|||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Oracle GraalVM version 25.0.4.1",
"product": {
"name": "Java SE",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "Oracle GraalVM Enterprise Edition version 21.3.19.1",
"product": {
"name": "Java SE",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "Oracle GraalVM pour JDK 17 version 23.0.13.1",
"product": {
"name": "Java SE",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "Oracle GraalVM pour JDK 21 version 23.1.12.1",
"product": {
"name": "Java SE",
"vendor": {
"name": "Oracle",
"scada": false
}
}
}
],
"affected_systems_content": "",
"content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
"cves": [
{
"name": "CVE-2026-83408",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-83408"
},
{
"name": "CVE-2026-83357",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-83357"
},
{
"name": "CVE-2026-83368",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-83368"
}
],
"initial_release_date": "2026-09-16T00:00:00",
"last_revision_date": "2026-09-16T00:00:00",
"links": [],
"reference": "CERTFR-2026-AVI-1185",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2026-09-16T00:00:00.000000"
}
],
"risks": [
{
"description": "D\u00e9ni de service \u00e0 distance"
},
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans Oracle Java SE. Elles permettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire \u00e0 distance et un d\u00e9ni de service \u00e0 distance.",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans Oracle Java SE",
"vendor_advisories": [
{
"published_at": "2026-09-15",
"title": "Bulletin de s\u00e9curit\u00e9 Oracle Java SE cspusep2026",
"url": "https://www.oracle.com/security-alerts/cspusep2026.html"
}
]
}
CERTFR-2026-AVI-1188
Vulnerability from certfr_avis - Published: 2026-09-16 - Updated: 2026-09-16
De multiples vulnérabilités ont été découvertes dans Oracle Virtualization. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, un déni de service à distance et une atteinte à la confidentialité des données.
Solutions
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
Impacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| Oracle | Virtualization | Oracle VM VirtualBox version 7.2.16 |
References
| Title | Publication Time | Tags | |||
|---|---|---|---|---|---|
|
|||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Oracle VM VirtualBox version 7.2.16",
"product": {
"name": "Virtualization",
"vendor": {
"name": "Oracle",
"scada": false
}
}
}
],
"affected_systems_content": "",
"content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
"cves": [
{
"name": "CVE-2026-87285",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87285"
},
{
"name": "CVE-2026-87276",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87276"
},
{
"name": "CVE-2026-87270",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87270"
},
{
"name": "CVE-2026-87272",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87272"
},
{
"name": "CVE-2026-87282",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87282"
},
{
"name": "CVE-2026-87281",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87281"
},
{
"name": "CVE-2026-87271",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87271"
},
{
"name": "CVE-2026-87275",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87275"
},
{
"name": "CVE-2026-87273",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87273"
},
{
"name": "CVE-2026-87268",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87268"
},
{
"name": "CVE-2026-87280",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87280"
},
{
"name": "CVE-2026-87277",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87277"
},
{
"name": "CVE-2026-87269",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87269"
},
{
"name": "CVE-2026-87279",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87279"
},
{
"name": "CVE-2026-87278",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87278"
},
{
"name": "CVE-2026-87284",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87284"
},
{
"name": "CVE-2026-87274",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87274"
},
{
"name": "CVE-2026-87283",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87283"
},
{
"name": "CVE-2026-87267",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87267"
}
],
"initial_release_date": "2026-09-16T00:00:00",
"last_revision_date": "2026-09-16T00:00:00",
"links": [],
"reference": "CERTFR-2026-AVI-1188",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2026-09-16T00:00:00.000000"
}
],
"risks": [
{
"description": "D\u00e9ni de service \u00e0 distance"
},
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
},
{
"description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans Oracle Virtualization. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire \u00e0 distance, un d\u00e9ni de service \u00e0 distance et une atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es.",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans Oracle Virtualization",
"vendor_advisories": [
{
"published_at": "2026-09-15",
"title": "Bulletin de s\u00e9curit\u00e9 Oracle Virtualization cspusep2026",
"url": "https://www.oracle.com/security-alerts/cspusep2026.html"
}
]
}
CERTFR-2026-AVI-1187
Vulnerability from certfr_avis - Published: 2026-09-16 - Updated: 2026-09-16
De multiples vulnérabilités ont été découvertes dans Oracle PeopleSoft. Elles permettent à un attaquant de provoquer un déni de service à distance, une atteinte à la confidentialité des données et une atteinte à l'intégrité des données.
Solutions
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
Impacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| Oracle | PeopleSoft | PeopleSoft Enterprise CC Common Application Objects version 9.2 | ||
| Oracle | PeopleSoft | PeopleSoft Enterprise PRTL Interaction Hub version 9.1 | ||
| Oracle | PeopleSoft | PeopleSoft Enterprise PeopleTools versions 8.61 à 8.63 | ||
| Oracle | PeopleSoft | PeopleSoft Enterprise FIN Engineering Brazil version 9.1 | ||
| Oracle | PeopleSoft | PeopleSoft Enterprise FIN Inventory Brazil version 9.1 |
References
| Title | Publication Time | Tags | |||
|---|---|---|---|---|---|
|
|||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "PeopleSoft Enterprise CC Common Application Objects version 9.2",
"product": {
"name": "PeopleSoft",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "PeopleSoft Enterprise PRTL Interaction Hub version 9.1",
"product": {
"name": "PeopleSoft",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "PeopleSoft Enterprise PeopleTools versions 8.61 \u00e0 8.63",
"product": {
"name": "PeopleSoft",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "PeopleSoft Enterprise FIN Engineering Brazil version 9.1",
"product": {
"name": "PeopleSoft",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "PeopleSoft Enterprise FIN Inventory Brazil version 9.1",
"product": {
"name": "PeopleSoft",
"vendor": {
"name": "Oracle",
"scada": false
}
}
}
],
"affected_systems_content": "",
"content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
"cves": [
{
"name": "CVE-2026-83147",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-83147"
},
{
"name": "CVE-2026-83019",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-83019"
},
{
"name": "CVE-2026-73954",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-73954"
},
{
"name": "CVE-2026-82993",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-82993"
},
{
"name": "CVE-2026-87264",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87264"
},
{
"name": "CVE-2023-48795",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-48795"
},
{
"name": "CVE-2026-83016",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-83016"
},
{
"name": "CVE-2023-6918",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-6918"
},
{
"name": "CVE-2026-83014",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-83014"
},
{
"name": "CVE-2026-83015",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-83015"
},
{
"name": "CVE-2026-73960",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-73960"
},
{
"name": "CVE-2026-83070",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-83070"
},
{
"name": "CVE-2026-25639",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-25639"
},
{
"name": "CVE-2026-83420",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-83420"
},
{
"name": "CVE-2026-83017",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-83017"
},
{
"name": "CVE-2026-7598",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-7598"
},
{
"name": "CVE-2026-73955",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-73955"
},
{
"name": "CVE-2026-83018",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-83018"
}
],
"initial_release_date": "2026-09-16T00:00:00",
"last_revision_date": "2026-09-16T00:00:00",
"links": [],
"reference": "CERTFR-2026-AVI-1187",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2026-09-16T00:00:00.000000"
}
],
"risks": [
{
"description": "D\u00e9ni de service \u00e0 distance"
},
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
},
{
"description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans Oracle PeopleSoft. Elles permettent \u00e0 un attaquant de provoquer un d\u00e9ni de service \u00e0 distance, une atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es et une atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es.",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans Oracle PeopleSoft",
"vendor_advisories": [
{
"published_at": "2026-09-15",
"title": "Bulletin de s\u00e9curit\u00e9 Oracle PeopleSoft cspusep2026",
"url": "https://www.oracle.com/security-alerts/cspusep2026.html"
}
]
}
CERTFR-2026-AVI-1184
Vulnerability from certfr_avis - Published: 2026-09-16 - Updated: 2026-09-16
De multiples vulnérabilités ont été découvertes dans Oracle Database Server. Elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance et un déni de service à distance.
Solutions
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
Impacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| Oracle | Database Server | Oracle Database Server versions 19.3 à 19.32 | ||
| Oracle | Database Server | Oracle Database Server versions 23.4.0 à 23.26.3 | ||
| Oracle | Database Server | Oracle Database Server versions 21.3 à 21.23 |
References
| Title | Publication Time | Tags | |||
|---|---|---|---|---|---|
|
|||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Oracle Database Server versions 19.3 \u00e0 19.32",
"product": {
"name": "Database Server",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "Oracle Database Server versions 23.4.0 \u00e0 23.26.3",
"product": {
"name": "Database Server",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "Oracle Database Server versions 21.3 \u00e0 21.23",
"product": {
"name": "Database Server",
"vendor": {
"name": "Oracle",
"scada": false
}
}
}
],
"affected_systems_content": "",
"content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
"cves": [
{
"name": "CVE-2026-83350",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-83350"
},
{
"name": "CVE-2026-83272",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-83272"
},
{
"name": "CVE-2026-83347",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-83347"
},
{
"name": "CVE-2026-83088",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-83088"
},
{
"name": "CVE-2026-83271",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-83271"
},
{
"name": "CVE-2026-83349",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-83349"
},
{
"name": "CVE-2026-83160",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-83160"
},
{
"name": "CVE-2026-83351",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-83351"
},
{
"name": "CVE-2026-83348",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-83348"
},
{
"name": "CVE-2026-83156",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-83156"
},
{
"name": "CVE-2026-83333",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-83333"
}
],
"initial_release_date": "2026-09-16T00:00:00",
"last_revision_date": "2026-09-16T00:00:00",
"links": [],
"reference": "CERTFR-2026-AVI-1184",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2026-09-16T00:00:00.000000"
}
],
"risks": [
{
"description": "D\u00e9ni de service \u00e0 distance"
},
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans Oracle Database Server. Elles permettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire \u00e0 distance et un d\u00e9ni de service \u00e0 distance.",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans Oracle Database Server",
"vendor_advisories": [
{
"published_at": "2026-09-15",
"title": "Bulletin de s\u00e9curit\u00e9 Oracle Database Server cspusep2026",
"url": "https://www.oracle.com/security-alerts/cspusep2026.html"
}
]
}
CERTFR-2026-AVI-1051
Vulnerability from certfr_avis - Published: 2026-08-19 - Updated: 2026-08-19
De multiples vulnérabilités ont été découvertes dans Oracle Systems. Elles permettent à un attaquant de provoquer une atteinte à la confidentialité des données et une atteinte à l'intégrité des données.
Solutions
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
Impacted products
References
| Title | Publication Time | Tags | |||
|---|---|---|---|---|---|
|
|||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Oracle Enterprise Manager for Systems Infrastructure version 13.5",
"product": {
"name": "Systems",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "Oracle Enterprise Manager for Systems Infrastructure version 24.1",
"product": {
"name": "Systems",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "Oracle Process Manufacturing Systems versions 12.2.3 \u00e0 12.2.15",
"product": {
"name": "Systems",
"vendor": {
"name": "Oracle",
"scada": false
}
}
}
],
"affected_systems_content": "",
"content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
"cves": [
{
"name": "CVE-2026-70737",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-70737"
},
{
"name": "CVE-2026-70830",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-70830"
},
{
"name": "CVE-2026-70829",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-70829"
},
{
"name": "CVE-2026-60822",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-60822"
}
],
"initial_release_date": "2026-08-19T00:00:00",
"last_revision_date": "2026-08-19T00:00:00",
"links": [],
"reference": "CERTFR-2026-AVI-1051",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2026-08-19T00:00:00.000000"
}
],
"risks": [
{
"description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans Oracle Systems. Elles permettent \u00e0 un attaquant de provoquer une atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es et une atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es.",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans Oracle Systems",
"vendor_advisories": [
{
"published_at": "2026-08-18",
"title": "Bulletin de s\u00e9curit\u00e9 Oracle Systems cspuaug2026",
"url": "https://www.oracle.com/security-alerts/cspuaug2026.html"
}
]
}
CERTFR-2026-AVI-1047
Vulnerability from certfr_avis - Published: 2026-08-19 - Updated: 2026-08-19
De multiples vulnérabilités ont été découvertes dans Oracle Database Server. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, un déni de service à distance et une atteinte à la confidentialité des données.
Solutions
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
Impacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| Oracle | Database Server | Oracle Database Server versions 19.3 à 19.32 | ||
| Oracle | Database Server | Oracle Database Server versions 23.4.0 à 23.26.3 | ||
| Oracle | Database Server | Oracle Database Server versions 21.3 à 21.23 |
References
| Title | Publication Time | Tags | |||
|---|---|---|---|---|---|
|
|||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Oracle Database Server versions 19.3 \u00e0 19.32",
"product": {
"name": "Database Server",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "Oracle Database Server versions 23.4.0 \u00e0 23.26.3",
"product": {
"name": "Database Server",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "Oracle Database Server versions 21.3 \u00e0 21.23",
"product": {
"name": "Database Server",
"vendor": {
"name": "Oracle",
"scada": false
}
}
}
],
"affected_systems_content": "",
"content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
"cves": [
{
"name": "CVE-2026-71064",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-71064"
},
{
"name": "CVE-2026-71062",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-71062"
},
{
"name": "CVE-2026-71063",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-71063"
},
{
"name": "CVE-2026-71100",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-71100"
},
{
"name": "CVE-2026-71102",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-71102"
},
{
"name": "CVE-2026-59889",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-59889"
}
],
"initial_release_date": "2026-08-19T00:00:00",
"last_revision_date": "2026-08-19T00:00:00",
"links": [],
"reference": "CERTFR-2026-AVI-1047",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2026-08-19T00:00:00.000000"
}
],
"risks": [
{
"description": "D\u00e9ni de service \u00e0 distance"
},
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
},
{
"description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans Oracle Database Server. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire \u00e0 distance, un d\u00e9ni de service \u00e0 distance et une atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es.",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans Oracle Database Server",
"vendor_advisories": [
{
"published_at": "2026-08-18",
"title": "Bulletin de s\u00e9curit\u00e9 Oracle Database Server cspuaug2026",
"url": "https://www.oracle.com/security-alerts/cspuaug2026.html"
}
]
}
CERTFR-2026-AVI-1053
Vulnerability from certfr_avis - Published: 2026-08-19 - Updated: 2026-08-19
De multiples vulnérabilités ont été découvertes dans Oracle Weblogic. Elles permettent à un attaquant de provoquer un déni de service à distance, une atteinte à la confidentialité des données et une atteinte à l'intégrité des données.
Solutions
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
Impacted products
References
| Title | Publication Time | Tags | |||
|---|---|---|---|---|---|
|
|||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Oracle WebLogic Server version 14.1.2.0.0",
"product": {
"name": "Weblogic",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "Oracle WebLogic Server version 12.2.1.4.0",
"product": {
"name": "Weblogic",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "Oracle WebLogic Server version 15.1.1.0.0",
"product": {
"name": "Weblogic",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "Oracle WebLogic Server version 14.1.1.0.0",
"product": {
"name": "Weblogic",
"vendor": {
"name": "Oracle",
"scada": false
}
}
}
],
"affected_systems_content": "",
"content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
"cves": [
{
"name": "CVE-2026-60696",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-60696"
},
{
"name": "CVE-2026-60672",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-60672"
},
{
"name": "CVE-2026-60699",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-60699"
},
{
"name": "CVE-2024-20931",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-20931"
},
{
"name": "CVE-2026-60698",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-60698"
},
{
"name": "CVE-2026-60977",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-60977"
},
{
"name": "CVE-2023-21839",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-21839"
},
{
"name": "CVE-2026-60415",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-60415"
},
{
"name": "CVE-2026-60702",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-60702"
},
{
"name": "CVE-2026-60679",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-60679"
},
{
"name": "CVE-2026-60680",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-60680"
}
],
"initial_release_date": "2026-08-19T00:00:00",
"last_revision_date": "2026-08-19T00:00:00",
"links": [],
"reference": "CERTFR-2026-AVI-1053",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2026-08-19T00:00:00.000000"
}
],
"risks": [
{
"description": "D\u00e9ni de service \u00e0 distance"
},
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
},
{
"description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans Oracle Weblogic. Elles permettent \u00e0 un attaquant de provoquer un d\u00e9ni de service \u00e0 distance, une atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es et une atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es.",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans Oracle Weblogic",
"vendor_advisories": [
{
"published_at": "2026-08-18",
"title": "Bulletin de s\u00e9curit\u00e9 Oracle Weblogic cspuaug2026",
"url": "https://www.oracle.com/security-alerts/cspuaug2026.html"
}
]
}
CERTFR-2026-AVI-1050
Vulnerability from certfr_avis - Published: 2026-08-19 - Updated: 2026-08-19
De multiples vulnérabilités ont été découvertes dans Oracle PeopleSoft. Elles permettent à un attaquant de provoquer une atteinte à la confidentialité des données, une atteinte à l'intégrité des données et un déni de service.
Solutions
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
Impacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| Oracle | PeopleSoft | PeopleSoft Enterprise CC Common Application Objects version 9.2 | ||
| Oracle | PeopleSoft | PeopleSoft Enterprise PeopleTools version 8.61 | ||
| Oracle | PeopleSoft | PeopleSoft Enterprise FIN Common Objects Brazil version 9.1 | ||
| Oracle | PeopleSoft | PeopleSoft Enterprise PeopleTools version 8.62 | ||
| Oracle | PeopleSoft | PeopleSoft Enterprise PeopleTools versions 8.61 à 8.63 | ||
| Oracle | PeopleSoft | PeopleSoft Enterprise FIN Common Objects version 9.2 | ||
| Oracle | PeopleSoft | PeopleSoft Enterprise FIN Lease Administration version 9.2 |
References
| Title | Publication Time | Tags | |||
|---|---|---|---|---|---|
|
|||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "PeopleSoft Enterprise CC Common Application Objects version 9.2",
"product": {
"name": "PeopleSoft",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "PeopleSoft Enterprise PeopleTools version 8.61",
"product": {
"name": "PeopleSoft",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "PeopleSoft Enterprise FIN Common Objects Brazil version 9.1",
"product": {
"name": "PeopleSoft",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "PeopleSoft Enterprise PeopleTools version 8.62",
"product": {
"name": "PeopleSoft",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "PeopleSoft Enterprise PeopleTools versions 8.61 \u00e0 8.63",
"product": {
"name": "PeopleSoft",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "PeopleSoft Enterprise FIN Common Objects version 9.2",
"product": {
"name": "PeopleSoft",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "PeopleSoft Enterprise FIN Lease Administration version 9.2",
"product": {
"name": "PeopleSoft",
"vendor": {
"name": "Oracle",
"scada": false
}
}
}
],
"affected_systems_content": "",
"content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
"cves": [
{
"name": "CVE-2026-70861",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-70861"
},
{
"name": "CVE-2026-60884",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-60884"
},
{
"name": "CVE-2026-60975",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-60975"
},
{
"name": "CVE-2026-60879",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-60879"
},
{
"name": "CVE-2026-71112",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-71112"
},
{
"name": "CVE-2026-60902",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-60902"
},
{
"name": "CVE-2026-61307",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-61307"
},
{
"name": "CVE-2026-60883",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-60883"
},
{
"name": "CVE-2026-60821",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-60821"
},
{
"name": "CVE-2026-60742",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-60742"
},
{
"name": "CVE-2026-60967",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-60967"
},
{
"name": "CVE-2026-71092",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-71092"
},
{
"name": "CVE-2026-60831",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-60831"
},
{
"name": "CVE-2026-60856",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-60856"
},
{
"name": "CVE-2026-60873",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-60873"
}
],
"initial_release_date": "2026-08-19T00:00:00",
"last_revision_date": "2026-08-19T00:00:00",
"links": [],
"reference": "CERTFR-2026-AVI-1050",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2026-08-19T00:00:00.000000"
}
],
"risks": [
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
},
{
"description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
},
{
"description": "D\u00e9ni de service"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans Oracle PeopleSoft. Elles permettent \u00e0 un attaquant de provoquer une atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es, une atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es et un d\u00e9ni de service.",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans Oracle PeopleSoft",
"vendor_advisories": [
{
"published_at": "2026-08-18",
"title": "Bulletin de s\u00e9curit\u00e9 Oracle PeopleSoft cspuaug2026",
"url": "https://www.oracle.com/security-alerts/cspuaug2026.html"
}
]
}
CERTFR-2026-AVI-1052
Vulnerability from certfr_avis - Published: 2026-08-19 - Updated: 2026-08-19
De multiples vulnérabilités ont été découvertes dans Oracle Virtualization. Elles permettent à un attaquant de provoquer un déni de service à distance, une atteinte à la confidentialité des données et une atteinte à l'intégrité des données.
Solutions
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
Impacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| Oracle | Virtualization | Oracle VM VirtualBox version 7.2.14 |
References
| Title | Publication Time | Tags | |||
|---|---|---|---|---|---|
|
|||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Oracle VM VirtualBox version 7.2.14",
"product": {
"name": "Virtualization",
"vendor": {
"name": "Oracle",
"scada": false
}
}
}
],
"affected_systems_content": "",
"content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
"cves": [
{
"name": "CVE-2026-71139",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-71139"
},
{
"name": "CVE-2026-71114",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-71114"
},
{
"name": "CVE-2026-71141",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-71141"
},
{
"name": "CVE-2026-71137",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-71137"
},
{
"name": "CVE-2026-71127",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-71127"
},
{
"name": "CVE-2026-71151",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-71151"
},
{
"name": "CVE-2026-71135",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-71135"
},
{
"name": "CVE-2026-71125",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-71125"
},
{
"name": "CVE-2026-71130",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-71130"
},
{
"name": "CVE-2026-71131",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-71131"
},
{
"name": "CVE-2026-71129",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-71129"
},
{
"name": "CVE-2026-71136",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-71136"
},
{
"name": "CVE-2026-71140",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-71140"
},
{
"name": "CVE-2026-71116",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-71116"
},
{
"name": "CVE-2026-71128",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-71128"
},
{
"name": "CVE-2026-71115",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-71115"
},
{
"name": "CVE-2026-71113",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-71113"
},
{
"name": "CVE-2026-71138",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-71138"
},
{
"name": "CVE-2026-71132",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-71132"
},
{
"name": "CVE-2026-71126",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-71126"
},
{
"name": "CVE-2026-71134",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-71134"
}
],
"initial_release_date": "2026-08-19T00:00:00",
"last_revision_date": "2026-08-19T00:00:00",
"links": [],
"reference": "CERTFR-2026-AVI-1052",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2026-08-19T00:00:00.000000"
}
],
"risks": [
{
"description": "D\u00e9ni de service \u00e0 distance"
},
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
},
{
"description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans Oracle Virtualization. Elles permettent \u00e0 un attaquant de provoquer un d\u00e9ni de service \u00e0 distance, une atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es et une atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es.",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans Oracle Virtualization",
"vendor_advisories": [
{
"published_at": "2026-08-18",
"title": "Bulletin de s\u00e9curit\u00e9 Oracle Virtualization cspuaug2026",
"url": "https://www.oracle.com/security-alerts/cspuaug2026.html"
}
]
}
CERTFR-2026-AVI-1048
Vulnerability from certfr_avis - Published: 2026-08-19 - Updated: 2026-08-19
De multiples vulnérabilités ont été découvertes dans Oracle Java SE. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, un déni de service à distance et une atteinte à la confidentialité des données.
Solutions
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
Impacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| Oracle | Java SE | Oracle Java SE version 17.0.20 | ||
| Oracle | Java SE | Oracle Java SE version 26.0.2 | ||
| Oracle | Java SE | Oracle GraalVM pour JDK version 21.0.12 | ||
| Oracle | Java SE | Oracle Java SE version 8u501 | ||
| Oracle | Java SE | Oracle Java SE version 25.0.4 | ||
| Oracle | Java SE | Oracle Java SE version 21.0.12 | ||
| Oracle | Java SE | Oracle GraalVM pour JDK version 17.0.20 | ||
| Oracle | Java SE | Oracle GraalVM Enterprise Edition version 21.3.19 | ||
| Oracle | Java SE | Oracle Java SE version 11.0.32 |
References
| Title | Publication Time | Tags | |||
|---|---|---|---|---|---|
|
|||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Oracle Java SE version 17.0.20",
"product": {
"name": "Java SE",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "Oracle Java SE version 26.0.2",
"product": {
"name": "Java SE",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "Oracle GraalVM pour JDK version 21.0.12",
"product": {
"name": "Java SE",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "Oracle Java SE version 8u501",
"product": {
"name": "Java SE",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "Oracle Java SE version 25.0.4",
"product": {
"name": "Java SE",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "Oracle Java SE version 21.0.12",
"product": {
"name": "Java SE",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "Oracle GraalVM pour JDK version 17.0.20",
"product": {
"name": "Java SE",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "Oracle GraalVM Enterprise Edition version 21.3.19",
"product": {
"name": "Java SE",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "Oracle Java SE version 11.0.32",
"product": {
"name": "Java SE",
"vendor": {
"name": "Oracle",
"scada": false
}
}
}
],
"affected_systems_content": "",
"content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
"cves": [
{
"name": "CVE-2026-62574",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-62574"
},
{
"name": "CVE-2026-70907",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-70907"
},
{
"name": "CVE-2026-61308",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-61308"
},
{
"name": "CVE-2026-60589",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-60589"
},
{
"name": "CVE-2026-70906",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-70906"
}
],
"initial_release_date": "2026-08-19T00:00:00",
"last_revision_date": "2026-08-19T00:00:00",
"links": [],
"reference": "CERTFR-2026-AVI-1048",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2026-08-19T00:00:00.000000"
}
],
"risks": [
{
"description": "D\u00e9ni de service \u00e0 distance"
},
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
},
{
"description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans Oracle Java SE. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire \u00e0 distance, un d\u00e9ni de service \u00e0 distance et une atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es.",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans Oracle Java SE",
"vendor_advisories": [
{
"published_at": "2026-08-18",
"title": "Bulletin de s\u00e9curit\u00e9 Oracle Java SE cspuaug2026",
"url": "https://www.oracle.com/security-alerts/cspuaug2026.html"
}
]
}
CERTFR-2026-AVI-1049
Vulnerability from certfr_avis - Published: 2026-08-19 - Updated: 2026-08-19
De multiples vulnérabilités ont été découvertes dans Oracle MySQL. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, un déni de service à distance et une atteinte à la confidentialité des données.
Solutions
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
Impacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| Oracle | MySQL | MySQL AI versions 9.4.0 à 9.7.2 | ||
| Oracle | MySQL | MySQL Cluster versions à 8.0.0 à 8.0.48 | ||
| Oracle | MySQL | MySQL AI version 26.7.0 | ||
| Oracle | MySQL | MySQL Shell (_Shell: Core Client) version 26.7.0 | ||
| Oracle | MySQL | MySQL Cluster versions 8.4.0 à 8.4.11 | ||
| Oracle | MySQL | MySQL Cluster versions 9.7.0 à 9.7.2 | ||
| Oracle | MySQL | MySQL Connectors (_Connector/ODBC) version 26.7.0 | ||
| Oracle | MySQL | Enterprise Manager for MySQL Database versions 13.5.1.0.0 à 13.5.6.0.0 |
References
| Title | Publication Time | Tags | |||
|---|---|---|---|---|---|
|
|||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "MySQL AI versions 9.4.0 \u00e0 9.7.2",
"product": {
"name": "MySQL",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "MySQL Cluster versions \u00e0 8.0.0 \u00e0 8.0.48",
"product": {
"name": "MySQL",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "MySQL AI version 26.7.0",
"product": {
"name": "MySQL",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "MySQL Shell (_Shell: Core Client) version 26.7.0",
"product": {
"name": "MySQL",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "MySQL Cluster versions 8.4.0 \u00e0 8.4.11",
"product": {
"name": "MySQL",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "MySQL Cluster versions 9.7.0 \u00e0 9.7.2",
"product": {
"name": "MySQL",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "MySQL Connectors (_Connector/ODBC) version 26.7.0",
"product": {
"name": "MySQL",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "Enterprise Manager for MySQL Database versions 13.5.1.0.0 \u00e0 13.5.6.0.0",
"product": {
"name": "MySQL",
"vendor": {
"name": "Oracle",
"scada": false
}
}
}
],
"affected_systems_content": "",
"content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
"cves": [
{
"name": "CVE-2026-49978",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-49978"
},
{
"name": "CVE-2025-14821",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-14821"
},
{
"name": "CVE-2026-71073",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-71073"
},
{
"name": "CVE-2026-41239",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-41239"
},
{
"name": "CVE-2026-71079",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-71079"
},
{
"name": "CVE-2026-65901",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-65901"
},
{
"name": "CVE-2026-65903",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-65903"
},
{
"name": "CVE-2026-65900",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-65900"
},
{
"name": "CVE-2026-60592",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-60592"
},
{
"name": "CVE-2026-70724",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-70724"
},
{
"name": "CVE-2026-49458",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-49458"
},
{
"name": "CVE-2026-65914",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-65914"
},
{
"name": "CVE-2026-65913",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-65913"
},
{
"name": "CVE-2026-0540",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-0540"
},
{
"name": "CVE-2026-0966",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-0966"
},
{
"name": "CVE-2026-65912",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-65912"
},
{
"name": "CVE-2026-34478",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-34478"
},
{
"name": "CVE-2026-34480",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-34480"
},
{
"name": "CVE-2026-71084",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-71084"
},
{
"name": "CVE-2025-13151",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-13151"
},
{
"name": "CVE-2026-49459",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-49459"
},
{
"name": "CVE-2025-68161",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-68161"
},
{
"name": "CVE-2026-41240",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-41240"
},
{
"name": "CVE-2026-34479",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-34479"
},
{
"name": "CVE-2026-0964",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-0964"
},
{
"name": "CVE-2026-65899",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-65899"
},
{
"name": "CVE-2026-0965",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-0965"
},
{
"name": "CVE-2026-0967",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-0967"
},
{
"name": "CVE-2026-0968",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-0968"
},
{
"name": "CVE-2026-41238",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-41238"
},
{
"name": "CVE-2026-34477",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-34477"
},
{
"name": "CVE-2026-65902",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-65902"
},
{
"name": "CVE-2026-34481",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-34481"
},
{
"name": "CVE-2026-65898",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-65898"
}
],
"initial_release_date": "2026-08-19T00:00:00",
"last_revision_date": "2026-08-19T00:00:00",
"links": [],
"reference": "CERTFR-2026-AVI-1049",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2026-08-19T00:00:00.000000"
}
],
"risks": [
{
"description": "D\u00e9ni de service \u00e0 distance"
},
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
},
{
"description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans Oracle MySQL. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire \u00e0 distance, un d\u00e9ni de service \u00e0 distance et une atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es.",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans Oracle MySQL",
"vendor_advisories": [
{
"published_at": "2026-08-18",
"title": "Bulletin de s\u00e9curit\u00e9 Oracle MySQL cspuaug2026",
"url": "https://www.oracle.com/security-alerts/cspuaug2026.html"
}
]
}
CERTFR-2026-AVI-0918
Vulnerability from certfr_avis - Published: 2026-07-23 - Updated: 2026-07-23
De multiples vulnérabilités ont été découvertes dans Oracle Systems. Elles permettent à un attaquant de provoquer une atteinte à la confidentialité des données, une atteinte à l'intégrité des données et un déni de service.
Solutions
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
Impacted products
References
| Title | Publication Time | Tags | |||
|---|---|---|---|---|---|
|
|||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Oracle Process Manufacturing Systems versions 12.2.3 \u00e0 12.2.15",
"product": {
"name": "Systems",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "Oracle Solaris version 11.4",
"product": {
"name": "Systems",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "Oracle Solaris version 11.3",
"product": {
"name": "Systems",
"vendor": {
"name": "Oracle",
"scada": false
}
}
}
],
"affected_systems_content": "",
"content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
"cves": [
{
"name": "CVE-2026-61010",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-61010"
},
{
"name": "CVE-2026-60659",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-60659"
},
{
"name": "CVE-2026-60661",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-60661"
},
{
"name": "CVE-2026-61052",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-61052"
},
{
"name": "CVE-2026-60833",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-60833"
},
{
"name": "CVE-2026-61285",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-61285"
},
{
"name": "CVE-2026-60834",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-60834"
},
{
"name": "CVE-2026-61202",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-61202"
},
{
"name": "CVE-2026-61000",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-61000"
},
{
"name": "CVE-2026-61287",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-61287"
}
],
"initial_release_date": "2026-07-23T00:00:00",
"last_revision_date": "2026-07-23T00:00:00",
"links": [],
"reference": "CERTFR-2026-AVI-0918",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2026-07-23T00:00:00.000000"
}
],
"risks": [
{
"description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
},
{
"description": "D\u00e9ni de service"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans Oracle Systems. Elles permettent \u00e0 un attaquant de provoquer une atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es, une atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es et un d\u00e9ni de service.",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans Oracle Systems",
"vendor_advisories": [
{
"published_at": "2026-07-21",
"title": "Bulletin de s\u00e9curit\u00e9 Oracle Systems cpujul2026",
"url": "https://www.oracle.com/security-alerts/cpujul2026.html"
}
]
}
CERTFR-2026-AVI-0915
Vulnerability from certfr_avis - Published: 2026-07-23 - Updated: 2026-07-23
De multiples vulnérabilités ont été découvertes dans Oracle Java SE. Elles permettent à un attaquant de provoquer un déni de service à distance, une atteinte à la confidentialité des données et une atteinte à l'intégrité des données.
Solutions
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
Impacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| Oracle | Java SE | Oracle Java SE version 25.0.3 | ||
| Oracle | Java SE | Oracle Java SE version 8u491 | ||
| Oracle | Java SE | Oracle Java SE version 21.0.11 | ||
| Oracle | Java SE | Oracle Java SE version 8u491-perf | ||
| Oracle | Java SE | Oracle Java SE version 17.0.19 | ||
| Oracle | Java SE | Oracle GraalVM for JDK version 21.0.11 | ||
| Oracle | Java SE | Oracle Java SE version 11.0.31 | ||
| Oracle | Java SE | Oracle GraalVM for JDK version 17.0.19 | ||
| Oracle | Java SE | Oracle GraalVM Enterprise Edition version 21.3.18 | ||
| Oracle | Java SE | Oracle Java SE version 26.0.1 |
References
| Title | Publication Time | Tags | |||
|---|---|---|---|---|---|
|
|||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Oracle Java SE version 25.0.3",
"product": {
"name": "Java SE",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "Oracle Java SE version 8u491",
"product": {
"name": "Java SE",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "Oracle Java SE version 21.0.11",
"product": {
"name": "Java SE",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "Oracle Java SE version 8u491-perf",
"product": {
"name": "Java SE",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "Oracle Java SE version 17.0.19",
"product": {
"name": "Java SE",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "Oracle GraalVM for JDK version 21.0.11",
"product": {
"name": "Java SE",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "Oracle Java SE version 11.0.31",
"product": {
"name": "Java SE",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "Oracle GraalVM for JDK version 17.0.19",
"product": {
"name": "Java SE",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "Oracle GraalVM Enterprise Edition version 21.3.18",
"product": {
"name": "Java SE",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "Oracle Java SE version 26.0.1",
"product": {
"name": "Java SE",
"vendor": {
"name": "Oracle",
"scada": false
}
}
}
],
"affected_systems_content": "",
"content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
"cves": [
{
"name": "CVE-2026-41254",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-41254"
},
{
"name": "CVE-2026-47010",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-47010"
},
{
"name": "CVE-2026-47057",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-47057"
},
{
"name": "CVE-2026-62574",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-62574"
},
{
"name": "CVE-2026-47013",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-47013"
},
{
"name": "CVE-2026-47034",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-47034"
},
{
"name": "CVE-2026-47027",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-47027"
},
{
"name": "CVE-2026-47058",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-47058"
},
{
"name": "CVE-2026-47035",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-47035"
},
{
"name": "CVE-2026-60526",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-60526"
},
{
"name": "CVE-2026-47030",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-47030"
},
{
"name": "CVE-2026-47063",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-47063"
},
{
"name": "CVE-2026-47021",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-47021"
},
{
"name": "CVE-2026-60164",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-60164"
},
{
"name": "CVE-2026-46968",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-46968"
},
{
"name": "CVE-2026-60166",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-60166"
},
{
"name": "CVE-2026-46917",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-46917"
},
{
"name": "CVE-2026-60147",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-60147"
},
{
"name": "CVE-2026-47059",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-47059"
}
],
"initial_release_date": "2026-07-23T00:00:00",
"last_revision_date": "2026-07-23T00:00:00",
"links": [],
"reference": "CERTFR-2026-AVI-0915",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2026-07-23T00:00:00.000000"
}
],
"risks": [
{
"description": "D\u00e9ni de service \u00e0 distance"
},
{
"description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans Oracle Java SE. Elles permettent \u00e0 un attaquant de provoquer un d\u00e9ni de service \u00e0 distance, une atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es et une atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es.",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans Oracle Java SE",
"vendor_advisories": [
{
"published_at": "2026-07-21",
"title": "Bulletin de s\u00e9curit\u00e9 Oracle Java SE cpujul2026",
"url": "https://www.oracle.com/security-alerts/cpujul2026.html"
}
]
}
CERTFR-2026-AVI-0917
Vulnerability from certfr_avis - Published: 2026-07-23 - Updated: 2026-07-23
De multiples vulnérabilités ont été découvertes dans Oracle PeopleSoft. Elles permettent à un attaquant de provoquer un déni de service à distance, une atteinte à la confidentialité des données et une atteinte à l'intégrité des données.
Solutions
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
NoneImpacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| Oracle | PeopleSoft | PeopleSoft Enterprise SCM Inventory version 9.2 | ||
| Oracle | PeopleSoft | PeopleSoft Enterprise SCM Mobile Inventory Management version 9.2 | ||
| Oracle | PeopleSoft | PeopleSoft Enterprise SCM Order Management version 9.2 | ||
| Oracle | PeopleSoft | PeopleSoft Enterprise SCM eProcurement version 9.2 | ||
| Oracle | PeopleSoft | PeopleSoft Enterprise CC Common Application Objects version 9.2 | ||
| Oracle | PeopleSoft | PeopleSoft Enterprise CS Financial Aid version 9.2.38 | ||
| Oracle | PeopleSoft | PeopleSoft Enterprise HCM Global Payroll Mexico version 9.2 | ||
| Oracle | PeopleSoft | PeopleSoft Enterprise HCM Human Resources version 9.2 | ||
| Oracle | PeopleSoft | PeopleSoft Enterprise FIN Manufacturing Argentina version 9.1 | ||
| Oracle | PeopleSoft | PeopleSoft Enterprise PeopleTools version 8.61 | ||
| Oracle | PeopleSoft | PeopleSoft Enterprise SCM Manufacturing version 9.2 | ||
| Oracle | PeopleSoft | PeopleSoft Enterprise CRM Common Objects version 9.2.23 | ||
| Oracle | PeopleSoft | PeopleSoft Enterprise CS Student Financials version 9.2.38 | ||
| Oracle | PeopleSoft | PeopleSoft Enterprise FIN Common Objects Brazil version 9.1 | ||
| Oracle | PeopleSoft | PeopleSoft Enterprise PeopleTools version 8.62 | ||
| Oracle | PeopleSoft | PeopleSoft Enterprise FIN Engineering Argentina version 9.1 | ||
| Oracle | PeopleSoft | PeopleSoft Enterprise FIN General Ledger Argentina version 9.1 | ||
| Oracle | PeopleSoft | PeopleSoft Enterprise FIN Staffing Front Office version 9.2 | ||
| Oracle | PeopleSoft | PeopleSoft Enterprise FIN Project Costing version 9.2 | ||
| Oracle | PeopleSoft | PeopleSoft Enterprise FIN Common Objects version 9.2 | ||
| Oracle | PeopleSoft | PeopleSoft Enterprise SCM Supplier Contract Management version 9.2 | ||
| Oracle | PeopleSoft | PeopleSoft Enterprise FIN Staffing Front Office Brazil version 9.1 | ||
| Oracle | PeopleSoft | PeopleSoft Enterprise FIN Common Objects Argentina version 9.1 | ||
| Oracle | PeopleSoft | PeopleSoft Enterprise FIN Manufacturing Brazil version 9.1 | ||
| Oracle | PeopleSoft | PeopleSoft Enterprise FIN Payables version 9.2 | ||
| Oracle | PeopleSoft | PeopleSoft Enterprise HCM Global Payroll Switzerland version 9.2 | ||
| Oracle | PeopleSoft | PeopleSoft Enterprise CS Campus Community version 9.2.38 | ||
| Oracle | PeopleSoft | PeopleSoft Enterprise FIN Program Management version 9.2 | ||
| Oracle | PeopleSoft | PeopleSoft Enterprise FIN Grants version 9.2 | ||
| Oracle | PeopleSoft | PeopleSoft Enterprise FIN Billing Argentina version 9.1 | ||
| Oracle | PeopleSoft | PeopleSoft In-Memory Project Discovery version 9.2 | ||
| Oracle | PeopleSoft | PeopleSoft Enterprise SCM Purchasing version 9.2 | ||
| Oracle | PeopleSoft | PeopleSoft Enterprise HCM Talent Acquisition Manager version 9.2 | ||
| Oracle | PeopleSoft | PeopleSoft Enterprise FIN Pay/Bill Management version 9.2 | ||
| Oracle | PeopleSoft | PeopleSoft Enterprise CS Student Records version 9.2.38 | ||
| Oracle | PeopleSoft | PeopleSoft Enterprise FIN Cash Management version 9.2 | ||
| Oracle | PeopleSoft | PeopleSoft Enterprise FIN Expenses version 9.2 | ||
| Oracle | PeopleSoft | PeopleSoft Enterprise FIN eSettlements version 9.2 |
References
| Title | Publication Time | Tags | |||
|---|---|---|---|---|---|
|
|||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "PeopleSoft Enterprise SCM Inventory version 9.2",
"product": {
"name": "PeopleSoft",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "PeopleSoft Enterprise SCM Mobile Inventory Management version 9.2",
"product": {
"name": "PeopleSoft",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "PeopleSoft Enterprise SCM Order Management version 9.2",
"product": {
"name": "PeopleSoft",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "PeopleSoft Enterprise SCM eProcurement version 9.2",
"product": {
"name": "PeopleSoft",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "PeopleSoft Enterprise CC Common Application Objects version 9.2",
"product": {
"name": "PeopleSoft",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "PeopleSoft Enterprise CS Financial Aid version 9.2.38",
"product": {
"name": "PeopleSoft",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "PeopleSoft Enterprise HCM Global Payroll Mexico version 9.2",
"product": {
"name": "PeopleSoft",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "PeopleSoft Enterprise HCM Human Resources version 9.2",
"product": {
"name": "PeopleSoft",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "PeopleSoft Enterprise FIN Manufacturing Argentina version 9.1",
"product": {
"name": "PeopleSoft",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "PeopleSoft Enterprise PeopleTools version 8.61",
"product": {
"name": "PeopleSoft",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "PeopleSoft Enterprise SCM Manufacturing version 9.2",
"product": {
"name": "PeopleSoft",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "PeopleSoft Enterprise CRM Common Objects version 9.2.23",
"product": {
"name": "PeopleSoft",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "PeopleSoft Enterprise CS Student Financials version 9.2.38",
"product": {
"name": "PeopleSoft",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "PeopleSoft Enterprise FIN Common Objects Brazil version 9.1",
"product": {
"name": "PeopleSoft",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "PeopleSoft Enterprise PeopleTools version 8.62",
"product": {
"name": "PeopleSoft",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "PeopleSoft Enterprise FIN Engineering Argentina version 9.1",
"product": {
"name": "PeopleSoft",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "PeopleSoft Enterprise FIN General Ledger Argentina version 9.1",
"product": {
"name": "PeopleSoft",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "PeopleSoft Enterprise FIN Staffing Front Office version 9.2",
"product": {
"name": "PeopleSoft",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "PeopleSoft Enterprise FIN Project Costing version 9.2",
"product": {
"name": "PeopleSoft",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "PeopleSoft Enterprise FIN Common Objects version 9.2",
"product": {
"name": "PeopleSoft",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "PeopleSoft Enterprise SCM Supplier Contract Management version 9.2",
"product": {
"name": "PeopleSoft",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "PeopleSoft Enterprise FIN Staffing Front Office Brazil version 9.1",
"product": {
"name": "PeopleSoft",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "PeopleSoft Enterprise FIN Common Objects Argentina version 9.1",
"product": {
"name": "PeopleSoft",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "PeopleSoft Enterprise FIN Manufacturing Brazil version 9.1",
"product": {
"name": "PeopleSoft",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "PeopleSoft Enterprise FIN Payables version 9.2",
"product": {
"name": "PeopleSoft",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "PeopleSoft Enterprise HCM Global Payroll Switzerland version 9.2",
"product": {
"name": "PeopleSoft",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "PeopleSoft Enterprise CS Campus Community version 9.2.38",
"product": {
"name": "PeopleSoft",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "PeopleSoft Enterprise FIN Program Management version 9.2",
"product": {
"name": "PeopleSoft",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "PeopleSoft Enterprise FIN Grants version 9.2",
"product": {
"name": "PeopleSoft",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "PeopleSoft Enterprise FIN Billing Argentina version 9.1",
"product": {
"name": "PeopleSoft",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "PeopleSoft In-Memory Project Discovery version 9.2",
"product": {
"name": "PeopleSoft",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "PeopleSoft Enterprise SCM Purchasing version 9.2",
"product": {
"name": "PeopleSoft",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "PeopleSoft Enterprise HCM Talent Acquisition Manager version 9.2",
"product": {
"name": "PeopleSoft",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "PeopleSoft Enterprise FIN Pay/Bill Management version 9.2",
"product": {
"name": "PeopleSoft",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "PeopleSoft Enterprise CS Student Records version 9.2.38",
"product": {
"name": "PeopleSoft",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "PeopleSoft Enterprise FIN Cash Management version 9.2",
"product": {
"name": "PeopleSoft",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "PeopleSoft Enterprise FIN Expenses version 9.2",
"product": {
"name": "PeopleSoft",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "PeopleSoft Enterprise FIN eSettlements version 9.2",
"product": {
"name": "PeopleSoft",
"vendor": {
"name": "Oracle",
"scada": false
}
}
}
],
"affected_systems_content": null,
"content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
"cves": [
{
"name": "CVE-2026-60604",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-60604"
},
{
"name": "CVE-2026-61077",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-61077"
},
{
"name": "CVE-2026-21637",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-21637"
},
{
"name": "CVE-2026-61234",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-61234"
},
{
"name": "CVE-2026-60598",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-60598"
},
{
"name": "CVE-2026-60593",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-60593"
},
{
"name": "CVE-2026-61233",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-61233"
},
{
"name": "CVE-2026-61063",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-61063"
},
{
"name": "CVE-2026-61210",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-61210"
},
{
"name": "CVE-2026-61242",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-61242"
},
{
"name": "CVE-2026-60607",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-60607"
},
{
"name": "CVE-2026-61204",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-61204"
},
{
"name": "CVE-2026-47048",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-47048"
},
{
"name": "CVE-2026-61238",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-61238"
},
{
"name": "CVE-2026-61103",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-61103"
},
{
"name": "CVE-2026-61062",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-61062"
},
{
"name": "CVE-2026-60602",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-60602"
},
{
"name": "CVE-2025-55130",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-55130"
},
{
"name": "CVE-2025-55131",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-55131"
},
{
"name": "CVE-2026-61059",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-61059"
},
{
"name": "CVE-2026-61089",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-61089"
},
{
"name": "CVE-2026-61209",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-61209"
},
{
"name": "CVE-2025-59465",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-59465"
},
{
"name": "CVE-2026-61104",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-61104"
},
{
"name": "CVE-2026-60610",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-60610"
},
{
"name": "CVE-2026-60612",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-60612"
},
{
"name": "CVE-2026-61239",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-61239"
},
{
"name": "CVE-2026-61070",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-61070"
},
{
"name": "CVE-2026-61085",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-61085"
},
{
"name": "CVE-2026-47024",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-47024"
},
{
"name": "CVE-2026-60599",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-60599"
},
{
"name": "CVE-2025-68431",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-68431"
},
{
"name": "CVE-2026-61069",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-61069"
},
{
"name": "CVE-2026-61072",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-61072"
},
{
"name": "CVE-2026-60611",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-60611"
},
{
"name": "CVE-2026-61071",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-61071"
},
{
"name": "CVE-2026-60609",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-60609"
},
{
"name": "CVE-2026-60615",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-60615"
},
{
"name": "CVE-2026-61086",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-61086"
},
{
"name": "CVE-2026-61207",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-61207"
},
{
"name": "CVE-2026-60597",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-60597"
},
{
"name": "CVE-2026-61201",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-61201"
},
{
"name": "CVE-2026-61237",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-61237"
},
{
"name": "CVE-2026-21636",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-21636"
},
{
"name": "CVE-2026-60152",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-60152"
},
{
"name": "CVE-2026-60666",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-60666"
},
{
"name": "CVE-2025-55132",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-55132"
},
{
"name": "CVE-2026-61236",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-61236"
},
{
"name": "CVE-2026-47015",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-47015"
},
{
"name": "CVE-2026-47051",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-47051"
},
{
"name": "CVE-2026-47017",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-47017"
},
{
"name": "CVE-2026-61074",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-61074"
},
{
"name": "CVE-2026-60600",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-60600"
},
{
"name": "CVE-2026-60606",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-60606"
},
{
"name": "CVE-2026-60617",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-60617"
},
{
"name": "CVE-2026-60669",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-60669"
},
{
"name": "CVE-2026-60614",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-60614"
},
{
"name": "CVE-2026-47049",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-47049"
},
{
"name": "CVE-2026-61073",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-61073"
},
{
"name": "CVE-2026-60605",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-60605"
},
{
"name": "CVE-2026-60594",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-60594"
},
{
"name": "CVE-2026-60668",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-60668"
},
{
"name": "CVE-2026-61088",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-61088"
},
{
"name": "CVE-2026-61057",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-61057"
},
{
"name": "CVE-2026-61076",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-61076"
},
{
"name": "CVE-2026-61232",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-61232"
},
{
"name": "CVE-2025-59466",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-59466"
},
{
"name": "CVE-2026-61068",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-61068"
},
{
"name": "CVE-2026-61244",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-61244"
},
{
"name": "CVE-2026-60613",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-60613"
},
{
"name": "CVE-2026-61087",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-61087"
},
{
"name": "CVE-2026-60667",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-60667"
},
{
"name": "CVE-2026-61235",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-61235"
},
{
"name": "CVE-2026-60601",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-60601"
},
{
"name": "CVE-2025-66021",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-66021"
},
{
"name": "CVE-2026-61243",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-61243"
},
{
"name": "CVE-2026-61056",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-61056"
},
{
"name": "CVE-2026-60608",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-60608"
},
{
"name": "CVE-2026-61055",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-61055"
},
{
"name": "CVE-2026-60603",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-60603"
},
{
"name": "CVE-2026-61078",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-61078"
},
{
"name": "CVE-2026-60596",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-60596"
},
{
"name": "CVE-2026-60665",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-60665"
},
{
"name": "CVE-2026-47026",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-47026"
},
{
"name": "CVE-2026-60595",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-60595"
},
{
"name": "CVE-2026-61205",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-61205"
},
{
"name": "CVE-2026-60616",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-60616"
},
{
"name": "CVE-2026-61203",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-61203"
},
{
"name": "CVE-2026-61240",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-61240"
},
{
"name": "CVE-2026-61245",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-61245"
},
{
"name": "CVE-2026-21710",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-21710"
}
],
"initial_release_date": "2026-07-23T00:00:00",
"last_revision_date": "2026-07-23T00:00:00",
"links": [],
"reference": "CERTFR-2026-AVI-0917",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2026-07-23T00:00:00.000000"
}
],
"risks": [
{
"description": "D\u00e9ni de service \u00e0 distance"
},
{
"description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans Oracle PeopleSoft. Elles permettent \u00e0 un attaquant de provoquer un d\u00e9ni de service \u00e0 distance, une atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es et une atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es.",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans Oracle PeopleSoft",
"vendor_advisories": [
{
"published_at": "2026-07-21",
"title": "Bulletin de s\u00e9curit\u00e9 Oracle PeopleSoft cpujul2026",
"url": "https://www.oracle.com/security-alerts/cpujul2026.html"
}
]
}
CERTFR-2026-AVI-0919
Vulnerability from certfr_avis - Published: 2026-07-23 - Updated: 2026-07-23
De multiples vulnérabilités ont été découvertes dans Oracle Virtualization. Elles permettent à un attaquant de provoquer une atteinte à la confidentialité des données, une atteinte à l'intégrité des données et un déni de service.
Solutions
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
NoneImpacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| Oracle | Virtualization | Oracle VM VirtualBox version 7.2.8 | ||
| Oracle | Virtualization | Oracle VM VirtualBox version 7.2.12 |
References
| Title | Publication Time | Tags | |||
|---|---|---|---|---|---|
|
|||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Oracle VM VirtualBox version 7.2.8",
"product": {
"name": "Virtualization",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "Oracle VM VirtualBox version 7.2.12",
"product": {
"name": "Virtualization",
"vendor": {
"name": "Oracle",
"scada": false
}
}
}
],
"affected_systems_content": null,
"content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
"cves": [
{
"name": "CVE-2026-60161",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-60161"
},
{
"name": "CVE-2026-60159",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-60159"
},
{
"name": "CVE-2026-47055",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-47055"
},
{
"name": "CVE-2026-60162",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-60162"
},
{
"name": "CVE-2026-47043",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-47043"
},
{
"name": "CVE-2026-60150",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-60150"
},
{
"name": "CVE-2026-47054",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-47054"
},
{
"name": "CVE-2026-47062",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-47062"
},
{
"name": "CVE-2026-47047",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-47047"
},
{
"name": "CVE-2026-47041",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-47041"
},
{
"name": "CVE-2026-60158",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-60158"
},
{
"name": "CVE-2026-47053",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-47053"
},
{
"name": "CVE-2026-60155",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-60155"
},
{
"name": "CVE-2026-60160",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-60160"
},
{
"name": "CVE-2026-47050",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-47050"
},
{
"name": "CVE-2026-47044",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-47044"
}
],
"initial_release_date": "2026-07-23T00:00:00",
"last_revision_date": "2026-07-23T00:00:00",
"links": [],
"reference": "CERTFR-2026-AVI-0919",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2026-07-23T00:00:00.000000"
}
],
"risks": [
{
"description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
},
{
"description": "D\u00e9ni de service"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans Oracle Virtualization. Elles permettent \u00e0 un attaquant de provoquer une atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es, une atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es et un d\u00e9ni de service.",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans Oracle Virtualization",
"vendor_advisories": [
{
"published_at": "2026-07-21",
"title": "Bulletin de s\u00e9curit\u00e9 Oracle Virtualization cpujul2026",
"url": "https://www.oracle.com/security-alerts/cpujul2026.html"
}
]
}
CERTFR-2026-AVI-0920
Vulnerability from certfr_avis - Published: 2026-07-23 - Updated: 2026-07-23
De multiples vulnérabilités ont été découvertes dans Oracle Weblogic. Elles permettent à un attaquant de provoquer une atteinte à la confidentialité des données et une atteinte à l'intégrité des données.
Solutions
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
Impacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| Oracle | Weblogic | Oracle WebLogic Server version 14.1.2.0.0 | ||
| Oracle | Weblogic | Oracle Weblogic Server Proxy Plug-in version 15.1.1.0.0 | ||
| Oracle | Weblogic | Oracle WebLogic Server version 12.2.1.4.0 | ||
| Oracle | Weblogic | Oracle Weblogic Server Proxy Plug-in version 14.1.2.0.0 | ||
| Oracle | Weblogic | Oracle Weblogic Server Proxy Plug-in version 12.2.1.4.0 | ||
| Oracle | Weblogic | Oracle WebLogic Server version 15.1.1.0.0 | ||
| Oracle | Weblogic | Oracle WebLogic Server version 14.1.1.0.0 |
References
| Title | Publication Time | Tags | |||
|---|---|---|---|---|---|
|
|||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Oracle WebLogic Server version 14.1.2.0.0",
"product": {
"name": "Weblogic",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "Oracle Weblogic Server Proxy Plug-in version 15.1.1.0.0",
"product": {
"name": "Weblogic",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "Oracle WebLogic Server version 12.2.1.4.0",
"product": {
"name": "Weblogic",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "Oracle Weblogic Server Proxy Plug-in version 14.1.2.0.0",
"product": {
"name": "Weblogic",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "Oracle Weblogic Server Proxy Plug-in version 12.2.1.4.0",
"product": {
"name": "Weblogic",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "Oracle WebLogic Server version 15.1.1.0.0",
"product": {
"name": "Weblogic",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "Oracle WebLogic Server version 14.1.1.0.0",
"product": {
"name": "Weblogic",
"vendor": {
"name": "Oracle",
"scada": false
}
}
}
],
"affected_systems_content": "",
"content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
"cves": [
{
"name": "CVE-2026-60312",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-60312"
},
{
"name": "CVE-2026-60198",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-60198"
},
{
"name": "CVE-2026-60293",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-60293"
},
{
"name": "CVE-2026-60208",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-60208"
},
{
"name": "CVE-2026-60201",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-60201"
},
{
"name": "CVE-2026-60292",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-60292"
},
{
"name": "CVE-2026-60199",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-60199"
},
{
"name": "CVE-2026-60205",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-60205"
},
{
"name": "CVE-2026-60529",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-60529"
},
{
"name": "CVE-2026-60204",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-60204"
},
{
"name": "CVE-2026-60343",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-60343"
},
{
"name": "CVE-2026-60196",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-60196"
},
{
"name": "CVE-2026-5598",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-5598"
},
{
"name": "CVE-2026-34478",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-34478"
},
{
"name": "CVE-2026-34480",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-34480"
},
{
"name": "CVE-2026-60206",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-60206"
},
{
"name": "CVE-2025-68161",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-68161"
},
{
"name": "CVE-2026-34479",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-34479"
},
{
"name": "CVE-2026-60291",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-60291"
},
{
"name": "CVE-2026-60153",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-60153"
},
{
"name": "CVE-2026-60365",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-60365"
},
{
"name": "CVE-2026-60202",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-60202"
},
{
"name": "CVE-2026-60364",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-60364"
},
{
"name": "CVE-2026-60527",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-60527"
},
{
"name": "CVE-2026-60294",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-60294"
},
{
"name": "CVE-2026-60203",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-60203"
},
{
"name": "CVE-2026-60528",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-60528"
},
{
"name": "CVE-2026-60313",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-60313"
},
{
"name": "CVE-2026-60200",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-60200"
},
{
"name": "CVE-2026-34477",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-34477"
},
{
"name": "CVE-2026-34481",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-34481"
},
{
"name": "CVE-2026-60207",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-60207"
}
],
"initial_release_date": "2026-07-23T00:00:00",
"last_revision_date": "2026-07-23T00:00:00",
"links": [],
"reference": "CERTFR-2026-AVI-0920",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2026-07-23T00:00:00.000000"
}
],
"risks": [
{
"description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans Oracle Weblogic. Elles permettent \u00e0 un attaquant de provoquer une atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es et une atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es.",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans Oracle Weblogic",
"vendor_advisories": [
{
"published_at": "2026-07-21",
"title": "Bulletin de s\u00e9curit\u00e9 Oracle Weblogic cpujul2026",
"url": "https://www.oracle.com/security-alerts/cpujul2026.html"
}
]
}
CERTFR-2026-AVI-0916
Vulnerability from certfr_avis - Published: 2026-07-23 - Updated: 2026-07-23
De multiples vulnérabilités ont été découvertes dans Oracle MySQL. Elles permettent à un attaquant de provoquer un déni de service à distance, une atteinte à la confidentialité des données et une atteinte à l'intégrité des données.
Solutions
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
Impacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| Oracle | MySQL | MySQL Connectors versions 9.7.0 à 9.7.1 | ||
| Oracle | MySQL | MySQL Router versions 8.4.0 à 8.4.10 | ||
| Oracle | MySQL | MySQL Server versions 9.7.0 à 9.7.1 | ||
| Oracle | MySQL | MySQL Cluster versions 9.7.0 à 9.7.1 | ||
| Oracle | MySQL | MySQL Cluster versions 8.0.0 à 8.0.47 | ||
| Oracle | MySQL | MySQL Cluster versions 8.4.0 à 8.4.10 | ||
| Oracle | MySQL | MySQL Router versions 9.7.0 à 9.7.1 | ||
| Oracle | MySQL | Oracle Enterprise Manager for MySQL Database versions 13.5.4.0.0 à 13.5.5.0.0 | ||
| Oracle | MySQL | MySQL Server versions 8.4.0 à 8.4.10 |
References
| Title | Publication Time | Tags | |||
|---|---|---|---|---|---|
|
|||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "MySQL Connectors versions 9.7.0 \u00e0 9.7.1",
"product": {
"name": "MySQL",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "MySQL Router versions 8.4.0 \u00e0 8.4.10",
"product": {
"name": "MySQL",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "MySQL Server versions 9.7.0 \u00e0 9.7.1",
"product": {
"name": "MySQL",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "MySQL Cluster versions 9.7.0 \u00e0 9.7.1",
"product": {
"name": "MySQL",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "MySQL Cluster versions 8.0.0 \u00e0 8.0.47",
"product": {
"name": "MySQL",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "MySQL Cluster versions 8.4.0 \u00e0 8.4.10",
"product": {
"name": "MySQL",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "MySQL Router versions 9.7.0 \u00e0 9.7.1",
"product": {
"name": "MySQL",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "Oracle Enterprise Manager for MySQL Database versions 13.5.4.0.0 \u00e0 13.5.5.0.0",
"product": {
"name": "MySQL",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "MySQL Server versions 8.4.0 \u00e0 8.4.10",
"product": {
"name": "MySQL",
"vendor": {
"name": "Oracle",
"scada": false
}
}
}
],
"affected_systems_content": "",
"content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
"cves": [
{
"name": "CVE-2026-60315",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-60315"
},
{
"name": "CVE-2026-61093",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-61093"
},
{
"name": "CVE-2026-60718",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-60718"
},
{
"name": "CVE-2026-60314",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-60314"
},
{
"name": "CVE-2026-60190",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-60190"
},
{
"name": "CVE-2026-60187",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-60187"
},
{
"name": "CVE-2026-60179",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-60179"
},
{
"name": "CVE-2026-61081",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-61081"
},
{
"name": "CVE-2026-60332",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-60332"
},
{
"name": "CVE-2026-60586",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-60586"
},
{
"name": "CVE-2026-60174",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-60174"
},
{
"name": "CVE-2026-60193",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-60193"
},
{
"name": "CVE-2026-60624",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-60624"
},
{
"name": "CVE-2026-47052",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-47052"
},
{
"name": "CVE-2026-60191",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-60191"
},
{
"name": "CVE-2026-46936",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-46936"
},
{
"name": "CVE-2026-60163",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-60163"
},
{
"name": "CVE-2026-47008",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-47008"
},
{
"name": "CVE-2026-60178",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-60178"
},
{
"name": "CVE-2026-60569",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-60569"
},
{
"name": "CVE-2026-60195",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-60195"
},
{
"name": "CVE-2025-68161",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-68161"
},
{
"name": "CVE-2026-60747",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-60747"
},
{
"name": "CVE-2026-60184",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-60184"
},
{
"name": "CVE-2026-60183",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-60183"
},
{
"name": "CVE-2026-60188",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-60188"
},
{
"name": "CVE-2026-61108",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-61108"
},
{
"name": "CVE-2026-60181",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-60181"
},
{
"name": "CVE-2026-60331",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-60331"
},
{
"name": "CVE-2026-60725",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-60725"
},
{
"name": "CVE-2026-60317",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-60317"
},
{
"name": "CVE-2026-60189",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-60189"
},
{
"name": "CVE-2026-60623",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-60623"
},
{
"name": "CVE-2026-61094",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-61094"
},
{
"name": "CVE-2026-60180",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-60180"
},
{
"name": "CVE-2026-60324",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-60324"
},
{
"name": "CVE-2026-60311",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-60311"
},
{
"name": "CVE-2026-61109",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-61109"
},
{
"name": "CVE-2026-60182",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-60182"
},
{
"name": "CVE-2026-47023",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-47023"
},
{
"name": "CVE-2026-60316",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-60316"
},
{
"name": "CVE-2026-47012",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-47012"
},
{
"name": "CVE-2026-61128",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-61128"
},
{
"name": "CVE-2026-60145",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-60145"
},
{
"name": "CVE-2026-61082",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-61082"
},
{
"name": "CVE-2026-60171",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-60171"
},
{
"name": "CVE-2026-60192",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-60192"
},
{
"name": "CVE-2026-60186",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-60186"
},
{
"name": "CVE-2026-47064",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-47064"
},
{
"name": "CVE-2026-61096",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-61096"
},
{
"name": "CVE-2026-60194",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-60194"
},
{
"name": "CVE-2026-61144",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-61144"
},
{
"name": "CVE-2026-60185",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-60185"
},
{
"name": "CVE-2026-60177",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-60177"
},
{
"name": "CVE-2026-60585",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-60585"
}
],
"initial_release_date": "2026-07-23T00:00:00",
"last_revision_date": "2026-07-23T00:00:00",
"links": [],
"reference": "CERTFR-2026-AVI-0916",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2026-07-23T00:00:00.000000"
}
],
"risks": [
{
"description": "D\u00e9ni de service \u00e0 distance"
},
{
"description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans Oracle MySQL. Elles permettent \u00e0 un attaquant de provoquer un d\u00e9ni de service \u00e0 distance, une atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es et une atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es.",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans Oracle MySQL",
"vendor_advisories": [
{
"published_at": "2026-07-21",
"title": "Bulletin de s\u00e9curit\u00e9 Oracle MySQL cpujul2026",
"url": "https://www.oracle.com/security-alerts/cpujul2026.html"
}
]
}
CERTFR-2026-AVI-0914
Vulnerability from certfr_avis - Published: 2026-07-23 - Updated: 2026-07-23
De multiples vulnérabilités ont été découvertes dans Oracle Database Server. Elles permettent à un attaquant de provoquer un déni de service à distance, une atteinte à la confidentialité des données et une atteinte à l'intégrité des données.
Solutions
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
Impacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| Oracle | Database Server | Oracle Database Server versions 23.4.0 à 23.26.2 | ||
| Oracle | Database Server | Oracle Database Server versions 19.3 à 19.31 | ||
| Oracle | Database Server | Oracle Net Services versions 23.4.0 à 23.26.2 | ||
| Oracle | Database Server | Oracle Database Server versions 21.3 à 21.22 | ||
| Oracle | Database Server | Oracle Net Services versions 19.3 à 19.31 | ||
| Oracle | Database Server | Oracle Net Services versions 21.3 à 21.22 |
References
| Title | Publication Time | Tags | |||
|---|---|---|---|---|---|
|
|||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Oracle Database Server versions 23.4.0 \u00e0 23.26.2",
"product": {
"name": "Database Server",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "Oracle Database Server versions 19.3 \u00e0 19.31",
"product": {
"name": "Database Server",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "Oracle Net Services versions 23.4.0 \u00e0 23.26.2",
"product": {
"name": "Database Server",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "Oracle Database Server versions 21.3 \u00e0 21.22",
"product": {
"name": "Database Server",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "Oracle Net Services versions 19.3 \u00e0 19.31",
"product": {
"name": "Database Server",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "Oracle Net Services versions 21.3 \u00e0 21.22",
"product": {
"name": "Database Server",
"vendor": {
"name": "Oracle",
"scada": false
}
}
}
],
"affected_systems_content": "",
"content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
"cves": [
{
"name": "CVE-2026-46975",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-46975"
},
{
"name": "CVE-2026-47061",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-47061"
},
{
"name": "CVE-2026-34180",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-34180"
},
{
"name": "CVE-2026-42766",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42766"
},
{
"name": "CVE-2026-9076",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-9076"
},
{
"name": "CVE-2026-54514",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-54514"
},
{
"name": "CVE-2026-34181",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-34181"
},
{
"name": "CVE-2026-42770",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42770"
},
{
"name": "CVE-2026-45445",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-45445"
},
{
"name": "CVE-2026-47040",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-47040"
},
{
"name": "CVE-2026-54516",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-54516"
},
{
"name": "CVE-2025-7962",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-7962"
},
{
"name": "CVE-2026-54515",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-54515"
},
{
"name": "CVE-2026-7383",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-7383"
},
{
"name": "CVE-2026-4738",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-4738"
},
{
"name": "CVE-2026-28389",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-28389"
},
{
"name": "CVE-2026-42769",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42769"
},
{
"name": "CVE-2026-47046",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-47046"
},
{
"name": "CVE-2026-47045",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-47045"
},
{
"name": "CVE-2026-45447",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-45447"
},
{
"name": "CVE-2026-47038",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-47038"
},
{
"name": "CVE-2026-47039",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-47039"
},
{
"name": "CVE-2026-28387",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-28387"
},
{
"name": "CVE-2026-28388",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-28388"
},
{
"name": "CVE-2026-54512",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-54512"
},
{
"name": "CVE-2026-45446",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-45446"
},
{
"name": "CVE-2026-34183",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-34183"
},
{
"name": "CVE-2026-28390",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-28390"
},
{
"name": "CVE-2026-42767",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42767"
},
{
"name": "CVE-2026-54517",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-54517"
},
{
"name": "CVE-2026-42764",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42764"
},
{
"name": "CVE-2026-31789",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-31789"
},
{
"name": "CVE-2026-54513",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-54513"
},
{
"name": "CVE-2026-54518",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-54518"
},
{
"name": "CVE-2026-42768",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42768"
},
{
"name": "CVE-2026-60175",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-60175"
},
{
"name": "CVE-2026-47060",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-47060"
},
{
"name": "CVE-2026-34182",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-34182"
},
{
"name": "CVE-2026-61211",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-61211"
},
{
"name": "CVE-2026-31790",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-31790"
}
],
"initial_release_date": "2026-07-23T00:00:00",
"last_revision_date": "2026-07-23T00:00:00",
"links": [],
"reference": "CERTFR-2026-AVI-0914",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2026-07-23T00:00:00.000000"
}
],
"risks": [
{
"description": "D\u00e9ni de service \u00e0 distance"
},
{
"description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans Oracle Database Server. Elles permettent \u00e0 un attaquant de provoquer un d\u00e9ni de service \u00e0 distance, une atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es et une atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es.",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans Oracle Database Server",
"vendor_advisories": [
{
"published_at": "2026-07-21",
"title": "Bulletin de s\u00e9curit\u00e9 Oracle Database Server cpujul2026",
"url": "https://www.oracle.com/security-alerts/cpujul2026.html"
}
]
}
CERTFR-2026-AVI-0766
Vulnerability from certfr_avis - Published: 2026-06-17 - Updated: 2026-06-17
De multiples vulnérabilités ont été découvertes dans Oracle PeopleSoft. Elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, une atteinte à la confidentialité des données et une atteinte à l'intégrité des données.
Solutions
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
Impacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| Oracle | PeopleSoft | PeopleSoft Enterprise CS Student Financials version 9.2.38 | ||
| Oracle | PeopleSoft | PeopleSoft Enterprise CS Campus Community version 9.2.38 | ||
| Oracle | PeopleSoft | PeopleSoft Enterprise PT PeopleTools version 8.62 | ||
| Oracle | PeopleSoft | PeopleSoft Enterprise PT PeopleTools version 8.61 |
References
| Title | Publication Time | Tags | |||
|---|---|---|---|---|---|
|
|||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "PeopleSoft Enterprise CS Student Financials version 9.2.38",
"product": {
"name": "PeopleSoft",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "PeopleSoft Enterprise CS Campus Community version 9.2.38",
"product": {
"name": "PeopleSoft",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "PeopleSoft Enterprise PT PeopleTools version 8.62",
"product": {
"name": "PeopleSoft",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "PeopleSoft Enterprise PT PeopleTools version 8.61",
"product": {
"name": "PeopleSoft",
"vendor": {
"name": "Oracle",
"scada": false
}
}
}
],
"affected_systems_content": "",
"content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
"cves": [
{
"name": "CVE-2026-46979",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-46979"
},
{
"name": "CVE-2026-46851",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-46851"
},
{
"name": "CVE-2026-35288",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-35288"
},
{
"name": "CVE-2026-46849",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-46849"
},
{
"name": "CVE-2026-35276",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-35276"
},
{
"name": "CVE-2026-35289",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-35289"
},
{
"name": "CVE-2026-35272",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-35272"
},
{
"name": "CVE-2026-35271",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-35271"
},
{
"name": "CVE-2026-35274",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-35274"
},
{
"name": "CVE-2026-35278",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-35278"
},
{
"name": "CVE-2026-35279",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-35279"
}
],
"initial_release_date": "2026-06-17T00:00:00",
"last_revision_date": "2026-06-17T00:00:00",
"links": [],
"reference": "CERTFR-2026-AVI-0766",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2026-06-17T00:00:00.000000"
}
],
"risks": [
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
},
{
"description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans Oracle PeopleSoft. Elles permettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire \u00e0 distance, une atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es et une atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es.",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans Oracle PeopleSoft",
"vendor_advisories": [
{
"published_at": "2026-06-16",
"title": "Bulletin de s\u00e9curit\u00e9 Oracle PeopleSoft cspujun2026",
"url": "https://www.oracle.com/security-alerts/cspujun2026.html"
}
]
}
CERTFR-2026-AVI-0767
Vulnerability from certfr_avis - Published: 2026-06-17 - Updated: 2026-06-17
De multiples vulnérabilités ont été découvertes dans Oracle Systems. Elles permettent à un attaquant de provoquer un déni de service à distance, une atteinte à la confidentialité des données et une atteinte à l'intégrité des données.
Solutions
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
References
| Title | Publication Time | Tags | |||
|---|---|---|---|---|---|
|
|||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Oracle Solaris version 11.4",
"product": {
"name": "Systems",
"vendor": {
"name": "Oracle",
"scada": false
}
}
}
],
"affected_systems_content": "",
"content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
"cves": [
{
"name": "CVE-2026-35233",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-35233"
},
{
"name": "CVE-2026-46914",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-46914"
},
{
"name": "CVE-2026-46978",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-46978"
}
],
"initial_release_date": "2026-06-17T00:00:00",
"last_revision_date": "2026-06-17T00:00:00",
"links": [],
"reference": "CERTFR-2026-AVI-0767",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2026-06-17T00:00:00.000000"
}
],
"risks": [
{
"description": "D\u00e9ni de service \u00e0 distance"
},
{
"description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans Oracle Systems. Elles permettent \u00e0 un attaquant de provoquer un d\u00e9ni de service \u00e0 distance, une atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es et une atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es.",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans Oracle Systems",
"vendor_advisories": [
{
"published_at": "2026-06-16",
"title": "Bulletin de s\u00e9curit\u00e9 Oracle Systems cspujun2026",
"url": "https://www.oracle.com/security-alerts/cspujun2026.html"
}
]
}
CERTFR-2026-AVI-0765
Vulnerability from certfr_avis - Published: 2026-06-17 - Updated: 2026-06-17
De multiples vulnérabilités ont été découvertes dans Oracle MySQL. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, un déni de service à distance et une atteinte à la confidentialité des données.
Solutions
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
Impacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| Oracle | MySQL | MySQL NDB Cluster versions 9.0.0 à 9.7.0 | ||
| Oracle | MySQL | MySQL Router versions 9.0.0 à 9.7.0 | ||
| Oracle | MySQL | MySQL Cluster ( Server: Connection Handling) versions 9.0.0 à 9.7.0 | ||
| Oracle | MySQL | MySQL NDB Cluster versions 8.0.11 à 8.0.46 | ||
| Oracle | MySQL | MySQL Cluster ( Server: Connection Handling) versions 8.0.11 à 8.0.46 | ||
| Oracle | MySQL | MySQL Shell (Shell for VS Code) version 2026.2.0+9.6.1 | ||
| Oracle | MySQL | MySQL Server ( Server: Connection Handling) versions 8.4.0 à 8.4.9 | ||
| Oracle | MySQL | MySQL Shell (Shell: Dump and Load) versions 9.0.0 à 9.7.0 | ||
| Oracle | MySQL | MySQL NDB Cluster versions 8.4.0 à 8.4.9 | ||
| Oracle | MySQL | MySQL Shell (Shell: Dump and Load) versions 8.4.0 à 8.4.9 | ||
| Oracle | MySQL | MySQL Router versions 8.4.0 à 8.4.9 | ||
| Oracle | MySQL | MySQL Cluster ( Server: Connection Handling) versions 8.4.0 à 8.4.9 | ||
| Oracle | MySQL | MySQL Server ( Server: Connection Handling) versions 9.0.0 à 9.7.0 |
References
| Title | Publication Time | Tags | |||
|---|---|---|---|---|---|
|
|||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "MySQL NDB Cluster versions 9.0.0 \u00e0 9.7.0",
"product": {
"name": "MySQL",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "MySQL Router versions 9.0.0 \u00e0 9.7.0",
"product": {
"name": "MySQL",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "MySQL Cluster ( Server: Connection Handling) versions 9.0.0 \u00e0 9.7.0",
"product": {
"name": "MySQL",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "MySQL NDB Cluster versions 8.0.11 \u00e0 8.0.46",
"product": {
"name": "MySQL",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "MySQL Cluster ( Server: Connection Handling) versions 8.0.11 \u00e0 8.0.46",
"product": {
"name": "MySQL",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "MySQL Shell (Shell for VS Code) version 2026.2.0+9.6.1",
"product": {
"name": "MySQL",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "MySQL Server ( Server: Connection Handling) versions 8.4.0 \u00e0 8.4.9",
"product": {
"name": "MySQL",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "MySQL Shell (Shell: Dump and Load) versions 9.0.0 \u00e0 9.7.0",
"product": {
"name": "MySQL",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "MySQL NDB Cluster versions 8.4.0 \u00e0 8.4.9",
"product": {
"name": "MySQL",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "MySQL Shell (Shell: Dump and Load) versions 8.4.0 \u00e0 8.4.9",
"product": {
"name": "MySQL",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "MySQL Router versions 8.4.0 \u00e0 8.4.9",
"product": {
"name": "MySQL",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "MySQL Cluster ( Server: Connection Handling) versions 8.4.0 \u00e0 8.4.9",
"product": {
"name": "MySQL",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "MySQL Server ( Server: Connection Handling) versions 9.0.0 \u00e0 9.7.0",
"product": {
"name": "MySQL",
"vendor": {
"name": "Oracle",
"scada": false
}
}
}
],
"affected_systems_content": "",
"content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
"cves": [
{
"name": "CVE-2026-46862",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-46862"
},
{
"name": "CVE-2026-46860",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-46860"
},
{
"name": "CVE-2026-46869",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-46869"
},
{
"name": "CVE-2026-46863",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-46863"
},
{
"name": "CVE-2026-46870",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-46870"
},
{
"name": "CVE-2026-46861",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-46861"
},
{
"name": "CVE-2026-46871",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-46871"
},
{
"name": "CVE-2026-46850",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-46850"
}
],
"initial_release_date": "2026-06-17T00:00:00",
"last_revision_date": "2026-06-17T00:00:00",
"links": [],
"reference": "CERTFR-2026-AVI-0765",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2026-06-17T00:00:00.000000"
}
],
"risks": [
{
"description": "D\u00e9ni de service \u00e0 distance"
},
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
},
{
"description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans Oracle MySQL. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire \u00e0 distance, un d\u00e9ni de service \u00e0 distance et une atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es.",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans Oracle MySQL",
"vendor_advisories": [
{
"published_at": "2026-06-16",
"title": "Bulletin de s\u00e9curit\u00e9 Oracle MySQL cspujun2026",
"url": "https://www.oracle.com/security-alerts/cspujun2026.html"
}
]
}
CERTFR-2026-AVI-0769
Vulnerability from certfr_avis - Published: 2026-06-17 - Updated: 2026-06-17
De multiples vulnérabilités ont été découvertes dans Oracle Weblogic. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, un déni de service à distance et une atteinte à la confidentialité des données.
Solutions
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
Impacted products
References
| Title | Publication Time | Tags | |||
|---|---|---|---|---|---|
|
|||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "WebLogic Server version 14.1.2.0.0",
"product": {
"name": "Weblogic",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "WebLogic Server version 14.1.1.0.0",
"product": {
"name": "Weblogic",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "WebLogic Server version 15.1.1.0.0",
"product": {
"name": "Weblogic",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "WebLogic Server version 12.2.1.4.0",
"product": {
"name": "Weblogic",
"vendor": {
"name": "Oracle",
"scada": false
}
}
}
],
"affected_systems_content": "",
"content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
"cves": [
{
"name": "CVE-2026-35300",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-35300"
},
{
"name": "CVE-2026-35302",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-35302"
},
{
"name": "CVE-2026-35298",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-35298"
},
{
"name": "CVE-2026-46848",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-46848"
},
{
"name": "CVE-2026-35303",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-35303"
},
{
"name": "CVE-2026-35291",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-35291"
},
{
"name": "CVE-2026-35299",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-35299"
},
{
"name": "CVE-2026-35258",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-35258"
},
{
"name": "CVE-2026-35301",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-35301"
},
{
"name": "CVE-2026-35292",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-35292"
},
{
"name": "CVE-2026-35263",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-35263"
},
{
"name": "CVE-2026-35259",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-35259"
},
{
"name": "CVE-2026-35311",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-35311"
}
],
"initial_release_date": "2026-06-17T00:00:00",
"last_revision_date": "2026-06-17T00:00:00",
"links": [],
"reference": "CERTFR-2026-AVI-0769",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2026-06-17T00:00:00.000000"
}
],
"risks": [
{
"description": "D\u00e9ni de service \u00e0 distance"
},
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
},
{
"description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans Oracle Weblogic. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire \u00e0 distance, un d\u00e9ni de service \u00e0 distance et une atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es.",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans Oracle Weblogic",
"vendor_advisories": [
{
"published_at": "2026-06-16",
"title": "Bulletin de s\u00e9curit\u00e9 Oracle Weblogic cspujun2026",
"url": "https://www.oracle.com/security-alerts/cspujun2026.html"
}
]
}
CERTFR-2026-AVI-0768
Vulnerability from certfr_avis - Published: 2026-06-17 - Updated: 2026-06-17
De multiples vulnérabilités ont été découvertes dans Oracle Virtualization. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, un déni de service à distance et une atteinte à la confidentialité des données.
Solutions
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
Impacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| Oracle | Virtualization | Oracle VM VirtualBox version 7.2.8 |
References
| Title | Publication Time | Tags | |||
|---|---|---|---|---|---|
|
|||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Oracle VM VirtualBox version 7.2.8",
"product": {
"name": "Virtualization",
"vendor": {
"name": "Oracle",
"scada": false
}
}
}
],
"affected_systems_content": "",
"content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
"cves": [
{
"name": "CVE-2026-46816",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-46816"
},
{
"name": "CVE-2026-46877",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-46877"
},
{
"name": "CVE-2026-46825",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-46825"
},
{
"name": "CVE-2026-46768",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-46768"
},
{
"name": "CVE-2026-46974",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-46974"
},
{
"name": "CVE-2026-35275",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-35275"
},
{
"name": "CVE-2026-46815",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-46815"
},
{
"name": "CVE-2026-46874",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-46874"
},
{
"name": "CVE-2026-46977",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-46977"
},
{
"name": "CVE-2026-46873",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-46873"
}
],
"initial_release_date": "2026-06-17T00:00:00",
"last_revision_date": "2026-06-17T00:00:00",
"links": [],
"reference": "CERTFR-2026-AVI-0768",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2026-06-17T00:00:00.000000"
}
],
"risks": [
{
"description": "D\u00e9ni de service \u00e0 distance"
},
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
},
{
"description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans Oracle Virtualization. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire \u00e0 distance, un d\u00e9ni de service \u00e0 distance et une atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es.",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans Oracle Virtualization",
"vendor_advisories": [
{
"published_at": "2026-06-16",
"title": "Bulletin de s\u00e9curit\u00e9 Oracle Virtualization cspujun2026",
"url": "https://www.oracle.com/security-alerts/cspujun2026.html"
}
]
}
CERTFR-2026-AVI-0749
Vulnerability from certfr_avis - Published: 2026-06-12 - Updated: 2026-06-12
Une vulnérabilité a été découverte dans Oracle PeopleSoft. Elle permet à un attaquant non authentifié de provoquer une exécution de code arbitraire à distance.
Mandiant indique que la vulnérabilité CVE-2026-35273 est activement exploitée au moins depuis le 27 mai 2026.
Solutions
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
Impacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| Oracle | PeopleSoft | PeopleSoft versions 8.61 et 8.62 |
References
| Title | Publication Time | Tags | ||||||
|---|---|---|---|---|---|---|---|---|
|
||||||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "PeopleSoft versions 8.61 et 8.62",
"product": {
"name": "PeopleSoft",
"vendor": {
"name": "Oracle",
"scada": false
}
}
}
],
"affected_systems_content": "",
"content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
"cves": [
{
"name": "CVE-2026-35273",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-35273"
}
],
"initial_release_date": "2026-06-12T00:00:00",
"last_revision_date": "2026-06-12T00:00:00",
"links": [
{
"title": "Billet de blogue Mandiant",
"url": "https://cloud.google.com/blog/topics/threat-intelligence/shinyhunters-targets-education-sector-oracle-exploit"
}
],
"reference": "CERTFR-2026-AVI-0749",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2026-06-12T00:00:00.000000"
}
],
"risks": [
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
}
],
"summary": "Une vuln\u00e9rabilit\u00e9 a \u00e9t\u00e9 d\u00e9couverte dans Oracle PeopleSoft. Elle permet \u00e0 un attaquant non authentifi\u00e9 de provoquer une ex\u00e9cution de code arbitraire \u00e0 distance.\n\nMandiant indique que la vuln\u00e9rabilit\u00e9 CVE-2026-35273 est activement exploit\u00e9e au moins depuis le 27 mai 2026.",
"title": "Vuln\u00e9rabilit\u00e9 dans Oracle PeopleSoft",
"vendor_advisories": [
{
"published_at": "2026-06-10",
"title": "Bulletin de s\u00e9curit\u00e9 Oracle PeopleSoft cve-2026-35273",
"url": "https://www.oracle.com/security-alerts/alert-cve-2026-35273.html"
}
]
}
CERTFR-2026-AVI-0662
Vulnerability from certfr_avis - Published: 2026-05-29 - Updated: 2026-05-29
De multiples vulnérabilités ont été découvertes dans Oracle Database Server. Elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance et un déni de service à distance.
Solutions
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
Impacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| Oracle | Database Server | Oracle Database Server (Net Service) versions 23.4.0 à 23.26.2 |
References
| Title | Publication Time | Tags | |||
|---|---|---|---|---|---|
|
|||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Oracle Database Server (Net Service) versions 23.4.0 \u00e0 23.26.2",
"product": {
"name": "Database Server",
"vendor": {
"name": "Oracle",
"scada": false
}
}
}
],
"affected_systems_content": "",
"content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
"cves": [
{
"name": "CVE-2026-46834",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-46834"
},
{
"name": "CVE-2026-46835",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-46835"
},
{
"name": "CVE-2026-46833",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-46833"
}
],
"initial_release_date": "2026-05-29T00:00:00",
"last_revision_date": "2026-05-29T00:00:00",
"links": [],
"reference": "CERTFR-2026-AVI-0662",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2026-05-29T00:00:00.000000"
}
],
"risks": [
{
"description": "D\u00e9ni de service \u00e0 distance"
},
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans Oracle Database Server. Elles permettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire \u00e0 distance et un d\u00e9ni de service \u00e0 distance.",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans Oracle Database Server",
"vendor_advisories": [
{
"published_at": "2026-05-28",
"title": "Bulletin de s\u00e9curit\u00e9 Oracle cspumay2026",
"url": "https://www.oracle.com/security-alerts/cspumay2026.html"
}
]
}
CERTFR-2026-AVI-0468
Vulnerability from certfr_avis - Published: 2026-04-22 - Updated: 2026-04-22
De multiples vulnérabilités ont été découvertes dans Oracle Java SE. Elles permettent à un attaquant de provoquer un déni de service à distance, une atteinte à la confidentialité des données et une atteinte à l'intégrité des données.
Solutions
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
Impacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| Oracle | Java SE | Oracle GraalVM Enterprise Edition version 21.3.17 | ||
| Oracle | Java SE | Oracle Java SE version 25.0.1 | ||
| Oracle | Java SE | Oracle Java SE version 17.0.18 | ||
| Oracle | Java SE | Oracle Java SE version 26 | ||
| Oracle | Java SE | Oracle Java SE version 25.0.2 | ||
| Oracle | Java SE | Oracle GraalVM for JDK version 21.0.10 | ||
| Oracle | Java SE | Oracle GraalVM for JDK version 17.0.18 | ||
| Oracle | Java SE | Oracle Java SE version 11.0.30 | ||
| Oracle | Java SE | Oracle Java SE version 8u481-perf | ||
| Oracle | Java SE | Oracle Java SE version 21.0.10 | ||
| Oracle | Java SE | Oracle Java SE version 8u481 | ||
| Oracle | Java SE | Oracle Java SE version 8u481-b50 |
References
| Title | Publication Time | Tags | |||
|---|---|---|---|---|---|
|
|||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Oracle GraalVM Enterprise Edition version 21.3.17",
"product": {
"name": "Java SE",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "Oracle Java SE version 25.0.1",
"product": {
"name": "Java SE",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "Oracle Java SE version 17.0.18",
"product": {
"name": "Java SE",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "Oracle Java SE version 26",
"product": {
"name": "Java SE",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "Oracle Java SE version 25.0.2",
"product": {
"name": "Java SE",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "Oracle GraalVM for JDK version 21.0.10",
"product": {
"name": "Java SE",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "Oracle GraalVM for JDK version 17.0.18",
"product": {
"name": "Java SE",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "Oracle Java SE version 11.0.30",
"product": {
"name": "Java SE",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "Oracle Java SE version 8u481-perf",
"product": {
"name": "Java SE",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "Oracle Java SE version 21.0.10",
"product": {
"name": "Java SE",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "Oracle Java SE version 8u481",
"product": {
"name": "Java SE",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "Oracle Java SE version 8u481-b50",
"product": {
"name": "Java SE",
"vendor": {
"name": "Oracle",
"scada": false
}
}
}
],
"affected_systems_content": "",
"content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
"cves": [
{
"name": "CVE-2026-20652",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-20652"
},
{
"name": "CVE-2026-20676",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-20676"
},
{
"name": "CVE-2026-22013",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-22013"
},
{
"name": "CVE-2026-22018",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-22018"
},
{
"name": "CVE-2026-34282",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-34282"
},
{
"name": "CVE-2026-22003",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-22003"
},
{
"name": "CVE-2026-23865",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-23865"
},
{
"name": "CVE-2026-20608",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-20608"
},
{
"name": "CVE-2026-20636",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-20636"
},
{
"name": "CVE-2026-20635",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-20635"
},
{
"name": "CVE-2026-22016",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-22016"
},
{
"name": "CVE-2026-22021",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-22021"
},
{
"name": "CVE-2026-22007",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-22007"
},
{
"name": "CVE-2026-34268",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-34268"
},
{
"name": "CVE-2026-20644",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-20644"
},
{
"name": "CVE-2025-43457",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-43457"
},
{
"name": "CVE-2026-22008",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-22008"
}
],
"initial_release_date": "2026-04-22T00:00:00",
"last_revision_date": "2026-04-22T00:00:00",
"links": [],
"reference": "CERTFR-2026-AVI-0468",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2026-04-22T00:00:00.000000"
}
],
"risks": [
{
"description": "D\u00e9ni de service \u00e0 distance"
},
{
"description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
},
{
"description": "Non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur"
},
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans Oracle Java SE. Elles permettent \u00e0 un attaquant de provoquer un d\u00e9ni de service \u00e0 distance, une atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es et une atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es.",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans Oracle Java SE",
"vendor_advisories": [
{
"published_at": "2026-04-21",
"title": "Bulletin de s\u00e9curit\u00e9 Oracle Java SE cpuapr2026",
"url": "https://www.oracle.com/security-alerts/cpuapr2026.html"
}
]
}
CERTFR-2026-AVI-0470
Vulnerability from certfr_avis - Published: 2026-04-22 - Updated: 2026-04-22
De multiples vulnérabilités ont été découvertes dans Oracle PeopleSoft. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, un déni de service à distance et une atteinte à la confidentialité des données.
Solutions
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
Impacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| Oracle | PeopleSoft | PeopleSoft Enterprise FIN Contracts version 9.2 | ||
| Oracle | PeopleSoft | PeopleSoft Enterprise HCM Absence Management version 9.2 | ||
| Oracle | PeopleSoft | PeopleSoft Enterprise CC Common Application Objects version 9.2 | ||
| Oracle | PeopleSoft | PeopleSoft Enterprise HCM Human Resources version 9.2 | ||
| Oracle | PeopleSoft | PeopleSoft Enterprise PeopleTools version 8.61 à 8.62 | ||
| Oracle | PeopleSoft | PeopleSoft Enterprise FIN Project Costing version 9.2 | ||
| Oracle | PeopleSoft | PeopleSoft Enterprise SCM Purchasing version 9.2 | ||
| Oracle | PeopleSoft | PeopleSoft Enterprise HCM Shared Components version 9.2 | ||
| Oracle | PeopleSoft | PeopleSoft Enterprise FIN Maintenance Management version 9.2 | ||
| Oracle | PeopleSoft | PeopleSoft Enterprise CS Student Records version 9.2 |
References
| Title | Publication Time | Tags | |||
|---|---|---|---|---|---|
|
|||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "PeopleSoft Enterprise FIN Contracts version 9.2",
"product": {
"name": "PeopleSoft",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "PeopleSoft Enterprise HCM Absence Management version 9.2",
"product": {
"name": "PeopleSoft",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "PeopleSoft Enterprise CC Common Application Objects version 9.2",
"product": {
"name": "PeopleSoft",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "PeopleSoft Enterprise HCM Human Resources version 9.2",
"product": {
"name": "PeopleSoft",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "PeopleSoft Enterprise PeopleTools version 8.61 \u00e0 8.62",
"product": {
"name": "PeopleSoft",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "PeopleSoft Enterprise FIN Project Costing version 9.2",
"product": {
"name": "PeopleSoft",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "PeopleSoft Enterprise SCM Purchasing version 9.2",
"product": {
"name": "PeopleSoft",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "PeopleSoft Enterprise HCM Shared Components version 9.2",
"product": {
"name": "PeopleSoft",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "PeopleSoft Enterprise FIN Maintenance Management version 9.2",
"product": {
"name": "PeopleSoft",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "PeopleSoft Enterprise CS Student Records version 9.2",
"product": {
"name": "PeopleSoft",
"vendor": {
"name": "Oracle",
"scada": false
}
}
}
],
"affected_systems_content": "",
"content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
"cves": [
{
"name": "CVE-2026-34300",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-34300"
},
{
"name": "CVE-2026-34306",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-34306"
},
{
"name": "CVE-2026-34309",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-34309"
},
{
"name": "CVE-2026-34280",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-34280"
},
{
"name": "CVE-2026-34277",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-34277"
},
{
"name": "CVE-2025-6069",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-6069"
},
{
"name": "CVE-2025-69419",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-69419"
},
{
"name": "CVE-2025-15467",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-15467"
},
{
"name": "CVE-2026-22795",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-22795"
},
{
"name": "CVE-2025-43966",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-43966"
},
{
"name": "CVE-2026-22006",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-22006"
},
{
"name": "CVE-2025-8194",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-8194"
},
{
"name": "CVE-2025-43967",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-43967"
},
{
"name": "CVE-2025-69421",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-69421"
},
{
"name": "CVE-2025-68161",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-68161"
},
{
"name": "CVE-2026-22796",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-22796"
},
{
"name": "CVE-2026-35241",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-35241"
},
{
"name": "CVE-2025-66471",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-66471"
},
{
"name": "CVE-2025-14017",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-14017"
},
{
"name": "CVE-2026-34295",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-34295"
},
{
"name": "CVE-2025-68160",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-68160"
},
{
"name": "CVE-2026-34299",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-34299"
},
{
"name": "CVE-2025-13034",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-13034"
},
{
"name": "CVE-2026-34301",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-34301"
},
{
"name": "CVE-2025-14524",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-14524"
},
{
"name": "CVE-2026-34307",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-34307"
},
{
"name": "CVE-2025-69418",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-69418"
},
{
"name": "CVE-2026-34269",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-34269"
},
{
"name": "CVE-2025-15079",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-15079"
},
{
"name": "CVE-2025-14819",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-14819"
},
{
"name": "CVE-2025-29482",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-29482"
},
{
"name": "CVE-2026-34266",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-34266"
},
{
"name": "CVE-2026-22019",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-22019"
},
{
"name": "CVE-2025-58754",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-58754"
},
{
"name": "CVE-2025-69420",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-69420"
},
{
"name": "CVE-2025-15224",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-15224"
},
{
"name": "CVE-2025-66418",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-66418"
}
],
"initial_release_date": "2026-04-22T00:00:00",
"last_revision_date": "2026-04-22T00:00:00",
"links": [],
"reference": "CERTFR-2026-AVI-0470",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2026-04-22T00:00:00.000000"
}
],
"risks": [
{
"description": "D\u00e9ni de service \u00e0 distance"
},
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
},
{
"description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
},
{
"description": "Non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur"
},
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans Oracle PeopleSoft. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire \u00e0 distance, un d\u00e9ni de service \u00e0 distance et une atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es.",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans Oracle PeopleSoft",
"vendor_advisories": [
{
"published_at": "2026-04-21",
"title": "Bulletin de s\u00e9curit\u00e9 Oracle PeopleSoft cpuapr2026",
"url": "https://www.oracle.com/security-alerts/cpuapr2026.html"
}
]
}
CERTFR-2026-AVI-0469
Vulnerability from certfr_avis - Published: 2026-04-22 - Updated: 2026-04-22
De multiples vulnérabilités ont été découvertes dans Oracle MySQL. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, un déni de service à distance et une atteinte à la confidentialité des données.
Solutions
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
Impacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| Oracle | MySQL | MySQL Server (Server: JSON) version 8.0.0 à 8.0.45 | ||
| Oracle | MySQL | MySQL Workbench version 8.0.0 à 8.0.46 | ||
| Oracle | MySQL | MySQL Shell (Shell: Core Client) version 9.0.0 à 9.6.0 | ||
| Oracle | MySQL | MySQL Server (Server: Packaging) version 8.0.0 à 8.0.45 | ||
| Oracle | MySQL | MySQL Server (Server: DML) version 9.0.0 à 9.6.0 | ||
| Oracle | MySQL | MySQL Enterprise Backup version 8.0.0 à 8.0.45 | ||
| Oracle | MySQL | MySQL Enterprise Backup version 9.0.0 à 9.6.0 | ||
| Oracle | MySQL | MySQL Enterprise Backup version 8.4.0 à 8.4.8 | ||
| Oracle | MySQL | MySQL Server (Server: DML) version 8.0.0 à 8.0.45 | ||
| Oracle | MySQL | MySQL Server (Server: Packaging) version 8.4.0 à 8.4.8 | ||
| Oracle | MySQL | MySQL Server (Server: JSON) version 8.4.0 à 8.4.8 | ||
| Oracle | MySQL | MySQL Shell (Shell: Core Client) version 8.0.0 à 8.0.45 | ||
| Oracle | MySQL | MySQL Server (Server: Optimizer) version 8.0.0 à 8.0.45 | ||
| Oracle | MySQL | MySQL Server (Server: Group Replication Plugin) version 8.4.0 à 8.4.8 | ||
| Oracle | MySQL | MySQL Shell (Shell: Core Client) version 8.4.0 à 8.4.8 | ||
| Oracle | MySQL | MySQL Server (Server: Packaging) version 9.0.0 à 9.6.0 | ||
| Oracle | MySQL | MySQL Server (Server: Optimizer) version 9.0.0 à 9.6.0 | ||
| Oracle | MySQL | MySQL Cluster version 9.0.0 à 9.5.0 | ||
| Oracle | MySQL | MySQL Server (Server: Partition) version 9.0.0 à 9.6.0 | ||
| Oracle | MySQL | MySQL Server (Server: Information Schema) version 8.0.0 à 8.0.45 | ||
| Oracle | MySQL | MySQL Server (Server: Group Replication Plugin) version 8.0.0 à 8.0.45 | ||
| Oracle | MySQL | MySQL Server (Server: GIS) version 9.0.0 à 9.6.0 | ||
| Oracle | MySQL | MySQL Cluster version 8.0.0 à 8.0.44 | ||
| Oracle | MySQL | MySQL Cluster version 8.4.0 à 8.4.7 | ||
| Oracle | MySQL | MySQL Server (Server: JSON) version 9.0.0 à 9.6.0 | ||
| Oracle | MySQL | MySQL Server (InnoDB) version 8.4.0 à 8.4.8 | ||
| Oracle | MySQL | MySQL Server (InnoDB) version 8.0.0 à 8.0.45 | ||
| Oracle | MySQL | MySQL Server (Server: Optimizer) version 8.4.0 à 8.4.8 | ||
| Oracle | MySQL | MySQL Server (Server: Group Replication Plugin) version 9.0.0 à 9.6.0 | ||
| Oracle | MySQL | MySQL Server (InnoDB) version 9.0.0 à 9.6.0 | ||
| Oracle | MySQL | MySQL Server (Server: Information Schema) version 8.4.0 à 8.4.8 | ||
| Oracle | MySQL | MySQL Server (Server: Information Schema) version 9.0.0 à 9.6.0 | ||
| Oracle | MySQL | MySQL Server (Server: DML) version 8.4.0 à 8.4.8 |
References
| Title | Publication Time | Tags | |||
|---|---|---|---|---|---|
|
|||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "MySQL Server (Server: JSON) version 8.0.0 \u00e0 8.0.45",
"product": {
"name": "MySQL",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "MySQL Workbench version 8.0.0 \u00e0 8.0.46",
"product": {
"name": "MySQL",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "MySQL Shell (Shell: Core Client) version 9.0.0 \u00e0 9.6.0",
"product": {
"name": "MySQL",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "MySQL Server (Server: Packaging) version 8.0.0 \u00e0 8.0.45",
"product": {
"name": "MySQL",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "MySQL Server (Server: DML) version 9.0.0 \u00e0 9.6.0",
"product": {
"name": "MySQL",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "MySQL Enterprise Backup version 8.0.0 \u00e0 8.0.45",
"product": {
"name": "MySQL",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "MySQL Enterprise Backup version 9.0.0 \u00e0 9.6.0",
"product": {
"name": "MySQL",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "MySQL Enterprise Backup version 8.4.0 \u00e0 8.4.8",
"product": {
"name": "MySQL",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "MySQL Server (Server: DML) version 8.0.0 \u00e0 8.0.45",
"product": {
"name": "MySQL",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "MySQL Server (Server: Packaging) version 8.4.0 \u00e0 8.4.8",
"product": {
"name": "MySQL",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "MySQL Server (Server: JSON) version 8.4.0 \u00e0 8.4.8",
"product": {
"name": "MySQL",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "MySQL Shell (Shell: Core Client) version 8.0.0 \u00e0 8.0.45",
"product": {
"name": "MySQL",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "MySQL Server (Server: Optimizer) version 8.0.0 \u00e0 8.0.45",
"product": {
"name": "MySQL",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "MySQL Server (Server: Group Replication Plugin) version 8.4.0 \u00e0 8.4.8",
"product": {
"name": "MySQL",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "MySQL Shell (Shell: Core Client) version 8.4.0 \u00e0 8.4.8",
"product": {
"name": "MySQL",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "MySQL Server (Server: Packaging) version 9.0.0 \u00e0 9.6.0",
"product": {
"name": "MySQL",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "MySQL Server (Server: Optimizer) version 9.0.0 \u00e0 9.6.0",
"product": {
"name": "MySQL",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "MySQL Cluster version 9.0.0 \u00e0 9.5.0",
"product": {
"name": "MySQL",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "MySQL Server (Server: Partition) version 9.0.0 \u00e0 9.6.0",
"product": {
"name": "MySQL",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "MySQL Server (Server: Information Schema) version 8.0.0 \u00e0 8.0.45",
"product": {
"name": "MySQL",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "MySQL Server (Server: Group Replication Plugin) version 8.0.0 \u00e0 8.0.45",
"product": {
"name": "MySQL",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "MySQL Server (Server: GIS) version 9.0.0 \u00e0 9.6.0",
"product": {
"name": "MySQL",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "MySQL Cluster version 8.0.0 \u00e0 8.0.44",
"product": {
"name": "MySQL",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "MySQL Cluster version 8.4.0 \u00e0 8.4.7",
"product": {
"name": "MySQL",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "MySQL Server (Server: JSON) version 9.0.0 \u00e0 9.6.0",
"product": {
"name": "MySQL",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "MySQL Server (InnoDB) version 8.4.0 \u00e0 8.4.8",
"product": {
"name": "MySQL",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "MySQL Server (InnoDB) version 8.0.0 \u00e0 8.0.45",
"product": {
"name": "MySQL",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "MySQL Server (Server: Optimizer) version 8.4.0 \u00e0 8.4.8",
"product": {
"name": "MySQL",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "MySQL Server (Server: Group Replication Plugin) version 9.0.0 \u00e0 9.6.0",
"product": {
"name": "MySQL",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "MySQL Server (InnoDB) version 9.0.0 \u00e0 9.6.0",
"product": {
"name": "MySQL",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "MySQL Server (Server: Information Schema) version 8.4.0 \u00e0 8.4.8",
"product": {
"name": "MySQL",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "MySQL Server (Server: Information Schema) version 9.0.0 \u00e0 9.6.0",
"product": {
"name": "MySQL",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "MySQL Server (Server: DML) version 8.4.0 \u00e0 8.4.8",
"product": {
"name": "MySQL",
"vendor": {
"name": "Oracle",
"scada": false
}
}
}
],
"affected_systems_content": "",
"content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
"cves": [
{
"name": "CVE-2025-66199",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-66199"
},
{
"name": "CVE-2026-35238",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-35238"
},
{
"name": "CVE-2026-34267",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-34267"
},
{
"name": "CVE-2025-15469",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-15469"
},
{
"name": "CVE-2026-35239",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-35239"
},
{
"name": "CVE-2026-34271",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-34271"
},
{
"name": "CVE-2025-69419",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-69419"
},
{
"name": "CVE-2026-34270",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-34270"
},
{
"name": "CVE-2025-5449",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-5449"
},
{
"name": "CVE-2025-5987",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-5987"
},
{
"name": "CVE-2026-34303",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-34303"
},
{
"name": "CVE-2026-22009",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-22009"
},
{
"name": "CVE-2026-21998",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-21998"
},
{
"name": "CVE-2025-15467",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-15467"
},
{
"name": "CVE-2026-35236",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-35236"
},
{
"name": "CVE-2025-5372",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-5372"
},
{
"name": "CVE-2026-35237",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-35237"
},
{
"name": "CVE-2025-4877",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-4877"
},
{
"name": "CVE-2026-22017",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-22017"
},
{
"name": "CVE-2026-22795",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-22795"
},
{
"name": "CVE-2026-34304",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-34304"
},
{
"name": "CVE-2025-69421",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-69421"
},
{
"name": "CVE-2025-5318",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-5318"
},
{
"name": "CVE-2026-22002",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-22002"
},
{
"name": "CVE-2026-22796",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-22796"
},
{
"name": "CVE-2026-34308",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-34308"
},
{
"name": "CVE-2026-35234",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-35234"
},
{
"name": "CVE-2026-34272",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-34272"
},
{
"name": "CVE-2025-14017",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-14017"
},
{
"name": "CVE-2025-5351",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-5351"
},
{
"name": "CVE-2026-35240",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-35240"
},
{
"name": "CVE-2026-22004",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-22004"
},
{
"name": "CVE-2026-22001",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-22001"
},
{
"name": "CVE-2025-4878",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-4878"
},
{
"name": "CVE-2026-34318",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-34318"
},
{
"name": "CVE-2026-35235",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-35235"
},
{
"name": "CVE-2025-68160",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-68160"
},
{
"name": "CVE-2026-34317",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-34317"
},
{
"name": "CVE-2025-13034",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-13034"
},
{
"name": "CVE-2026-22015",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-22015"
},
{
"name": "CVE-2025-14524",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-14524"
},
{
"name": "CVE-2026-22005",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-22005"
},
{
"name": "CVE-2025-69418",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-69418"
},
{
"name": "CVE-2025-15468",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-15468"
},
{
"name": "CVE-2026-34278",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-34278"
},
{
"name": "CVE-2025-11187",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-11187"
},
{
"name": "CVE-2025-15079",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-15079"
},
{
"name": "CVE-2025-14819",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-14819"
},
{
"name": "CVE-2026-34319",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-34319"
},
{
"name": "CVE-2026-34276",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-34276"
},
{
"name": "CVE-2025-69420",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-69420"
},
{
"name": "CVE-2025-15224",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-15224"
},
{
"name": "CVE-2026-34293",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-34293"
}
],
"initial_release_date": "2026-04-22T00:00:00",
"last_revision_date": "2026-04-22T00:00:00",
"links": [],
"reference": "CERTFR-2026-AVI-0469",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2026-04-22T00:00:00.000000"
}
],
"risks": [
{
"description": "D\u00e9ni de service \u00e0 distance"
},
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
},
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans Oracle MySQL. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire \u00e0 distance, un d\u00e9ni de service \u00e0 distance et une atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es.",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans Oracle MySQL",
"vendor_advisories": [
{
"published_at": "2026-04-21",
"title": "Bulletin de s\u00e9curit\u00e9 Oracle MySQL cpuapr2026",
"url": "https://www.oracle.com/security-alerts/cpuapr2026.html"
}
]
}
CERTFR-2026-AVI-0467
Vulnerability from certfr_avis - Published: 2026-04-22 - Updated: 2026-04-22
De multiples vulnérabilités ont été découvertes dans Oracle Database Server. Certaines d'entre elles permettent à un attaquant de provoquer un déni de service à distance, une atteinte à la confidentialité des données et un contournement de la politique de sécurité.
Solutions
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
Impacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| Oracle | Database Server | Oracle Database Server (RDBMS) version 19.3 à 19.30 | ||
| Oracle | Database Server | Oracle Database Server (Data Mining) version 23.4.0 à 23.26.1 | ||
| Oracle | Database Server | Oracle Database Server (RDBMS) version 23.4.0 à 23.26.1 | ||
| Oracle | Database Server | Oracle Database Server (XML Database) version 23.4.0 à 23.26.1 | ||
| Oracle | Database Server | Oracle Database Server (Java VM) version 21.3 à 21.21 | ||
| Oracle | Database Server | Oracle Database Server (Data Mining) version 19.3 à 19.30 | ||
| Oracle | Database Server | Oracle Database Server (Java VM) version 19.3 à 19.30 | ||
| Oracle | Database Server | Oracle Database Server (Data Mining) version 21.3 à 21.21 | ||
| Oracle | Database Server | Oracle Database Server (RDBMS) version 21.3 à 21.21 | ||
| Oracle | Database Server | Oracle Database Server (Clusterware) version 23.4.0 à 23.26.1 | ||
| Oracle | Database Server | Oracle Database Server (Clusterware) version 19.3 à 19.30 |
References
| Title | Publication Time | Tags | |||
|---|---|---|---|---|---|
|
|||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Oracle Database Server (RDBMS) version 19.3 \u00e0 19.30",
"product": {
"name": "Database Server",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "Oracle Database Server (Data Mining) version 23.4.0 \u00e0 23.26.1",
"product": {
"name": "Database Server",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "Oracle Database Server (RDBMS) version 23.4.0 \u00e0 23.26.1",
"product": {
"name": "Database Server",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "Oracle Database Server (XML Database) version 23.4.0 \u00e0 23.26.1",
"product": {
"name": "Database Server",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "Oracle Database Server (Java VM) version 21.3 \u00e0 21.21",
"product": {
"name": "Database Server",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "Oracle Database Server (Data Mining) version 19.3 \u00e0 19.30",
"product": {
"name": "Database Server",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "Oracle Database Server (Java VM) version 19.3 \u00e0 19.30",
"product": {
"name": "Database Server",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "Oracle Database Server (Data Mining) version 21.3 \u00e0 21.21",
"product": {
"name": "Database Server",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "Oracle Database Server (RDBMS) version 21.3 \u00e0 21.21",
"product": {
"name": "Database Server",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "Oracle Database Server (Clusterware) version 23.4.0 \u00e0 23.26.1",
"product": {
"name": "Database Server",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "Oracle Database Server (Clusterware) version 19.3 \u00e0 19.30",
"product": {
"name": "Database Server",
"vendor": {
"name": "Oracle",
"scada": false
}
}
}
],
"affected_systems_content": "",
"content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
"cves": [
{
"name": "CVE-2026-26007",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-26007"
},
{
"name": "CVE-2026-34312",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-34312"
},
{
"name": "CVE-2025-31948",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-31948"
},
{
"name": "CVE-2026-35229",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-35229"
},
{
"name": "CVE-2025-15467",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-15467"
},
{
"name": "CVE-2026-33870",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33870"
},
{
"name": "CVE-2026-21999",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-21999"
},
{
"name": "CVE-2026-33013",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33013"
},
{
"name": "CVE-2025-48924",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-48924"
},
{
"name": "CVE-2026-31790",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-31790"
}
],
"initial_release_date": "2026-04-22T00:00:00",
"last_revision_date": "2026-04-22T00:00:00",
"links": [],
"reference": "CERTFR-2026-AVI-0467",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2026-04-22T00:00:00.000000"
}
],
"risks": [
{
"description": "D\u00e9ni de service \u00e0 distance"
},
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans Oracle Database Server. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer un d\u00e9ni de service \u00e0 distance, une atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es et un contournement de la politique de s\u00e9curit\u00e9.",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans Oracle Database Server",
"vendor_advisories": [
{
"published_at": "2026-04-21",
"title": "Bulletin de s\u00e9curit\u00e9 Oracle Database Server cpuapr2026",
"url": "https://www.oracle.com/security-alerts/cpuapr2026.html"
}
]
}