PT-2026-62751

Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite component: Create Item Instance. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Installed Base...

PT-2026-62157

Name of the Vulnerable Software and Affected Versions Oracle Enterprise Manager Base Platform version 13.5 Oracle Enterprise Manager Base Platform version 24.1 Description A flaw in the Enterprise Config Management component allows a low privileged attacker with network access via HTTPS to...

CVE-2026-46997: Missing Authentication for Critical Function

Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager component: Metadata Plugin. Supported versions that are affected are 13.5 and 24.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTPS to compromise Oracle...

CVE-2026-46999: Missing Authentication for Critical Function

Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager component: Discovery Framework. Supported versions that are affected are 13.5 and 24.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTPS to compromise...

389-ds-base security, bug fix, and enhancement update

3.2.0-8 - Bump version to 3.2.0-8 - Resolves: RHEL-182152 - CVE-2026-11610 389-ds-base: 389-ds-base: Heap buffer overflow in sasliorecv via padded SASL UNBIND rhel-10.2.z - Resolves: RHEL-183105 - CVE-2026-11774 389-ds-base: 389-ds-base: integer overflow in SASL packet length bypasses size limit...

CVE-2026-46985: Improper Access Control

Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager component: Agent Next Gen. Supported versions that are affected are 13.5 and 24.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle...

PT-2026-62151

Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager component: Agent Next Gen. Supported versions that are affected are 13.5 and 24.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle...

PT-2026-62149

Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager component: Agent Next Gen. Supported versions that are affected are 13.5 and 24.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle...

PT-2026-62168

Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager component: UI Framework. Supported versions that are affected are 13.5 and 24.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle...

PT-2026-62152

Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager component: Application Service Level Mgmt. Supported versions that are affected are 13.5 and 24.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTPS to...

PT-2026-62153

Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager component: Connector Framework. Supported versions that are affected are 13.5 and 24.1. Easily exploitable vulnerability allows high privileged attacker with network access via HTTPS to compromise...

PT-2026-62158

Name of the Vulnerable Software and Affected Versions Oracle Enterprise Manager Base Platform version 13.5 Oracle Enterprise Manager Base Platform version 24.1 Description A flaw in the Agent Next Gen component allows a low privileged attacker with network access via HTTPS to compromise the...

PT-2026-62165

Name of the Vulnerable Software and Affected Versions Oracle Enterprise Manager Base Platform version 24.1 Description A flaw in the Security Framework component allows a low privileged attacker with network access via HTTPS to compromise the platform. The attack requires human interaction from a...

CVE-2026-60904: Improper Access Control

Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite component: Create Item Instance. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Installed Base...

PT-2026-63185

Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite component: Create Item Instance. Supported versions that are affected are 12.2.4-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Installed Base...

PT-2026-62169

Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager component: Self Update Framework. Supported versions that are affected are 13.5 and 24.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTPS to compromise...

PT-2026-62854

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle Installed Base versions 12.2.3 through 12.2.15 Description A flaw in the Create Item Instance component allows a low privileged attacker with network access via HTTP to compromise the system. Successful...

PT-2026-62855

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle Installed Base versions 12.2.4 through 12.2.15 Description An issue exists in the Create Item Instance component of the Oracle Installed Base product. A low privileged attacker with network access via HTTP can...

CVE-2026-46996: Improper Access Control

Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager component: Metadata Plugin. Supported versions that are affected are 13.5 and 24.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTPS to compromise Oracle...

CVE-2026-46989: Improper Access Control

Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager component: UI Framework. Supported versions that are affected are 13.5 and 24.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTPS to compromise Oracle...