PT-2026-77675

Name of the Vulnerable Software and Affected Versions Oracle Hyperion Calculation Manager version 11.2.25.0.000 Description A security flaw in the Oracle Hyperion Calculation Manager allows an unauthenticated attacker with network access via HTTP to compromise the system. Successful exploitation...

PT-2026-77753

Name of the Vulnerable Software and Affected Versions Oracle Hyperion Financial Reporting version 11.2.25.0.000 Description A flaw in the Server component allows a low-privileged attacker with access to the infrastructure where the software executes to compromise the system. Successful exploitati...

PT-2026-77490

Name of the Vulnerable Software and Affected Versions Oracle WebCenter Portal version 12.2.1.4.0 Oracle WebCenter Portal version 14.1.2.0.0 Description A flaw in the Runtime Tools component allows a low privileged attacker with network access via HTTP to compromise the system. Successful...

PT-2026-77546

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle Work in Process versions 12.2.3 through 12.2.15 Description A flaw in the Internal Operations component allows a low privileged attacker with network access via HTTP to compromise the system. This can lead to a...

PT-2026-78082

Name of the Vulnerable Software and Affected Versions Oracle Business Intelligence Enterprise Edition version 12.2.1.4.0 Description An issue exists in the BI Platform Security component of Oracle Analytics. A low privileged attacker with network access via HTTP can compromise the system...

PT-2026-77852

Name of the Vulnerable Software and Affected Versions Oracle Siebel CRM versions 17.0 through 26.6 Description A flaw in the Open UI component of the Siebel CRM End User product allows a low-privileged attacker with network access via HTTPS to compromise the system. Exploitation is difficult and...

PT-2026-77791

Vulnerability in the Oracle General Ledger product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle General Ledger...

PT-2026-77415

Name of the Vulnerable Software and Affected Versions Oracle Unified Directory versions 12.2.1.4.0 Oracle Unified Directory versions 14.1.2.1.0 Description A flaw in the OUD Core component of Oracle Fusion Middleware allows a low privileged attacker with network access via LDAP to compromise the...

PT-2026-80448

Openshift Migration Advisor agent-API fails to validate JWT source id claim, allowing cross-tenant data manipulation in github.com/kubev2v/migration-planner...

PT-2026-77774

Name of the Vulnerable Software and Affected Versions Oracle iSupplier Portal versions 12.2.3 through 12.2.15 Description An issue exists in the Internal Operations component of the Oracle iSupplier Portal. An unauthenticated attacker with network access via HTTP can compromise the system...

CVE-2026-13202

A vulnerability in OpenText Opentext Directory Services allows Input Data Manipulation. This issue affects Opentext Directory Services: through 22.2...

EUVD-2026-60232

A vulnerability in OpenText Opentext Directory Services allows Input Data Manipulation. This issue affects Opentext Directory Services: through 22.2...

CVE-2026-13202 HTML Injection in OTDS Swagger UI

A vulnerability in OpenText Opentext Directory Services allows Input Data Manipulation. This issue affects Opentext Directory Services: through 22.2...

CVE-2026-13202

A vulnerability in OpenText Opentext Directory Services allows Input Data Manipulation. This issue affects Opentext Directory Services: through 22.2...

CVE-2026-13202 HTML Injection in OTDS Swagger UI

A vulnerability in OpenText Opentext Directory Services allows Input Data Manipulation. This issue affects Opentext Directory Services: through 22.2...

CVE-2026-13202

OpenText OTDS (Directory Services) through v22.2 contains an HTML Injection flaw in the Swagger UI component. The CVSS 4.0 score is 8.6 (HIGH) with network attack vector, no authentication required, and high confidentiality/integrity impact. A proof-of-concept exists; OpenText KB0870915 and PT Se...

CVE-2026-13202: Improper Neutralization of Input During Web Page Generation

A vulnerability in OpenText Opentext Directory Services allows Input Data Manipulation. This issue affects Opentext Directory Services: through 22.2...

PT-2026-76673

Name of the Vulnerable Software and Affected Versions Opentext Directory Services versions prior to 22.2 Description An issue in the OTDS Swagger UI allows for input data manipulation via HTML injection, which occurs when an application fails to properly sanitize user-supplied input before...

GHSA-3GMF-P6R4-Q8M6 vulnerabilities

Vulnerabilities for packages: geoserver...

CVE-2026-49844 vulnerabilities

Vulnerabilities for packages: trino, thingsboard, sonarqube, spdx-tools-java, apache-tika, wavefront-proxy, solr, opensearch, neo4j, infinispan, kafka, apache-activemq-artemis, spark, apache-pulsar, flink, keycloak-config-cli, celeborn, zipkin, druid, strimzi-kafka-operator, kserve-modelmesh, akh...