PT-2026-62500

Name of the Vulnerable Software and Affected Versions Oracle Unified Directory version 14.1.2.1.0 Description A flaw in the OUD Core component of Oracle Fusion Middleware allows a low-privileged attacker with network access via LDAP to compromise the system. This issue can lead to unauthorized...

CVE-2026-61266: Improper Neutralization of Special Elements used in an SQL Command

Vulnerability in the Oracle Supply Chain Globalization product of Oracle E-Business Suite component: Copy Inventory Organization. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise...

PT-2026-62679

Name of the Vulnerable Software and Affected Versions Oracle WebCenter Content version 12.2.1.4.0 Oracle WebCenter Content version 14.1.2.0.0 Description An issue exists in the Content Server component of Oracle WebCenter Content. An unauthenticated attacker with network access via HTTP can...

PT-2026-62680

Name of the Vulnerable Software and Affected Versions Oracle WebCenter Content version 12.2.1.4.0 Oracle WebCenter Content version 14.1.2.0.0 Description An issue exists in the Content Server component of Oracle WebCenter Content. An unauthenticated attacker with network access via HTTP can...

PT-2026-63210

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle Time and Labor versions 12.2.3 through 12.2.15 Description An issue exists in the Internal Operations component of the Oracle Time and Labor product. A low privileged attacker with network access via HTTP can...

PT-2026-63172

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle Contracts Integration versions 12.2.3 through 12.2.15 Description An issue in the Internal Operations component allows an unauthenticated attacker with network access via HTTP to compromise the system. Exploitati...

CVE-2026-61271: Improper Access Control

Vulnerability in the Oracle Document Management and Collaboration product of Oracle E-Business Suite component: Attachments. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

PT-2026-63133

Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite component: Item Catalog. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Product Hub. Successful...

PT-2026-62613

Name of the Vulnerable Software and Affected Versions Oracle SDP Number Portability versions 12.2.3 through 12.2.15 Description A flaw in the Installation component allows a low privileged attacker with network access via HTTP to compromise the system. This can lead to unauthorized update, insert...

CVE-2026-60176: Exposure of Sensitive Information to an Unauthorized Actor

Vulnerability in the Oracle Payments product of Oracle E-Business Suite component: File Transmission. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Payments. Successful...

CVE-2026-60410: Uncontrolled Resource Consumption

Vulnerability in the TimesTen In-Memory Database product of Oracle TimesTen In-Memory Database component: Kubernetes Operator. The supported version that is affected is 26.1.1.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTPS to compromise TimesTen...

CVE-2026-60409: Improper Access Control

Vulnerability in the TimesTen In-Memory Database product of Oracle TimesTen In-Memory Database component: Kubernetes Operator. The supported version that is affected is 26.1.1.1.0. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where TimesTen...

CVE-2026-60573: Improper Access Control

Vulnerability in the Oracle Partner Management product of Oracle E-Business Suite component: Partner Dashboard. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTPS to compromise Oracle Partner...

CVE-2026-60572: Improper Access Control

Vulnerability in the Oracle E-Business Suite Integrated SOA Gateway product of Oracle E-Business Suite component: Web Service Provider. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromi...

CVE-2026-60377: Improper Access Control

Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware component: Messaging Enabler. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via T3, IIOP to compromise Servi...

PT-2026-62440

Name of the Vulnerable Software and Affected Versions Oracle JD Edwards EnterpriseOne Tools version 9.2.26.3 Description An issue exists in the Interoperability Security component of the product. An unauthenticated attacker with network access via JDENET can compromise the system, potentially...

PT-2026-62240

Name of the Vulnerable Software and Affected Versions Oracle VM VirtualBox version 7.2.12 Description A flaw in the Core component allows a low-privileged attacker with access to the infrastructure where the software executes to compromise the system. This issue can lead to unauthorized creation,...

CVE-2026-62525: Exposure of Sensitive Information to an Unauthorized Actor

Vulnerability in the Oracle Quality product of Oracle E-Business Suite component: Quality Workbench HTML system. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Quality...

PT-2026-63145

Vulnerability in the Oracle Common Applications Calendar product of Oracle E-Business Suite component: Calendar Synchronizations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise...

PT-2026-63130

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle HCM Configuration Workbench versions 12.2.3 through 12.2.15 Description An issue exists in the Spreadsheet Loading component of the Oracle HCM Configuration Workbench. An unauthenticated attacker with network...