PT-2026-119386

Name of the Vulnerable Software and Affected Versions Oracle Agile PLM version 9.3.6 Description A flaw in the Application Server component allows a low privileged attacker with network access via HTTP to compromise the system. Successful exploitation requires human interaction and can lead to...

PT-2026-119388

Name of the Vulnerable Software and Affected Versions Oracle Agile PLM version 9.3.6 Description An issue in the Application Server component allows an unauthenticated attacker with network access via HTTP to compromise the system. Successful exploitation can lead to unauthorized access to critic...

Oracle E-Business Suite: CVE-2026-101828: Critical Patch Update

Vulnerability in the Oracle Mobile Application Server product of Oracle E-Business Suite component: MWA Terminal Server. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Mobil...

PT-2026-119392

Name of the Vulnerable Software and Affected Versions Oracle Agile PLM version 9.3.6 Description An issue in the Application Server component allows an unauthenticated attacker with network access via HTTP to compromise the system. Exploitation is difficult and requires human interaction from a...

PT-2026-119537

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft component: Application Server - JRE. Supported versions that are affected are 8.61-8.63. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where PeopleSoft Enterpris...

PT-2026-119500

Vulnerability in the Oracle Mobile Application Server product of Oracle E-Business Suite component: MWA Terminal Server. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

PT-2026-119541

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft component: Application Server - JRE. Supported versions that are affected are 8.61-8.63. Difficult to exploit vulnerability allows unauthenticated attacker with network access via SSH to compromise PeopleSoft...

Oracle E-Business Suite: CVE-2026-101829: Critical Patch Update

Vulnerability in the Oracle Mobile Application Server product of Oracle E-Business Suite component: MWA Terminal Server. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

Security Bulletin: IBM Match 360 is vulnerable to denial of service from IBM WebSphere Application Server Liberty due to GraphQL Java (CVE-2024-40094)

Summary IBM Match 360 is vulnerable to a denial of service through a vulnerability found in IBM WebSphere Application Server Liberty. This affects IBM WebSphere Application Server Liberty 20.0.0.6- 24.0.0.11 with the specified features. GraphQL Java aka graphql-java is vulnerable to a denial of...

Oracle Agile PLM security vulnerabilities

Oracle Agile PLM 9.3.6 has a security vulnerability. This vulnerability stems from issues with the Application Server component, which may allow unauthenticated attackers to access through the HTTP network and take control of Oracle Agile PLM during user interactions...

Oracle Agile PLM security vulnerability

Oracle Agile PLM version 9.3.6 contains a security vulnerability stemming from issues in its Application Server component. This vulnerability may allow low-privilege attackers to make unauthorized updates, insert or delete certain data, or read partial data via HTTP access when user interaction i...

Oracle Agile PLM security vulnerabilities

Oracle Agile PLM 9.3.6 has a security vulnerability. This vulnerability stems from issues with the Application Server component. It may allow unauthorized attackers to access critical data or all accessible data via the HTTP network. Additionally, unauthorized updates, insertions, or deletions of...

Oracle Agile PLM security vulnerability

Oracle Agile PLM version 9.3.6 contains a security vulnerability stemming from issues in its Application Server component. This vulnerability may allow unauthenticated attackers to access the system over the TLS network, resulting in unauthorized access to critical data or all data, as well as...

Oracle Mobile Application Server security vulnerabilities

Oracle Mobile Application Server versions 12.2.3 to 12.2.15 have a security vulnerability. This vulnerability stems from issues with the MWA Terminal Server component. It may allow low-privilege attackers to access critical data or all accessible data through HTTP network access without proper...

Oracle Mobile Application Server security vulnerabilities

Oracle Mobile Application Server versions 12.2.3 to 12.2.15 have a security vulnerability. This vulnerability stems from issues with the MWA Terminal Server component. It may allow unauthenticated attackers to access key data or all data through the HTTP network, as well as to authorize the...

Oracle PeopleSoft Enterprise PeopleTools security vulnerabilities

Oracle PeopleSoft Enterprise PeopleTools versions 8.61 to 8.63 have security vulnerabilities. These vulnerabilities stem from issues with the Application Server - JRE component. Unauthorized attackers may gain access through an SSH network, allowing them to perform unauthorized updates, insertion...

Oracle PeopleSoft Enterprise PeopleTools security vulnerabilities

A security vulnerability exists in Oracle PeopleSoft Enterprise PeopleTools versions 8.61 through 8.63. This vulnerability stems from issues within the Application Server - JRE component and may allow highly privileged attackers to log in, gain access to infrastructure, and thereby access critica...

Security Bulletin: Multiple Vulnerabilities have been identified in IBM WebSphere Application Server and WebSphere Application Server Liberty shipped with IBM WebSphere Remote Server

Summary IBM WebSphere Application Server and WebSphere Application Server Liberty are shipped with IBM WebSphere Remote Server. Information about security vulnerabilities affecting IBM WebSphere Application Server and WebSphere Application Server Liberty has been published in a security bulletin...

Security Bulletin: IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by an uncontrolled resource consumption due to js-yaml (CVE-2026-84375)

Summary There is a vulnerability in the js-yaml library that affects IBM WebSphere Application Server and WebSphere Application Server Liberty. Vulnerability Details CVEID:CVE-2026-84375 DESCRIPTION: js-yaml is a JavaScript YAML parser and dumper. From 3.0.0 until 3.15.2, 4.3.2, and 5.4.1,...

Security Bulletin: Security vulnerability has been identified in WebSphere Application Server shipped with IBM Guardium Key Lifecycle Manager (SKLM/GKLM)

Summary WebSphere Application Server is shipped as a component of IBM Guardium Key Lifecycle Manager SKLM/GKLM. Information about a security vulnerability affecting WebSphere Application Server has been published in a security bulletin. Vulnerability Details Refer to the security bulletins listed...