CVE-2026-60753: Improper Access Control

Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM component: Installation. Supported versions that are affected are 17.0-26.6. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Siebel CRM Deployment executes to compromise...

PT-2026-77940

Name of the Vulnerable Software and Affected Versions Oracle Siebel CRM versions 17.0 through 26.6 Description A flaw in the Server Infrastructure component of the Siebel CRM Deployment product allows a low privileged attacker with network access via HTTP to compromise the system. Successful...

PT-2026-77734

Name of the Vulnerable Software and Affected Versions Oracle Hyperion Profitability and Cost Management version 11.2.25.0.000 Description A flaw in the Deployment component allows a high privileged attacker with network access via HTTP to compromise the system. Successful exploitation can result ...

PT-2026-77376

Name of the Vulnerable Software and Affected Versions Oracle Siebel CRM Deployment versions 17.0 through 26.6 Description A flaw in the Installation component of the Siebel CRM Deployment product allows a low-privileged attacker with access to the infrastructure where the software executes to...

PT-2026-77392

Name of the Vulnerable Software and Affected Versions Oracle Siebel CRM versions 17.0 through 26.6 Description A flaw in the Migration component of the Siebel CRM Deployment product allows a low privileged attacker with network access via HTTP to compromise the system. This issue can lead to...

PT-2026-77389

Name of the Vulnerable Software and Affected Versions Oracle Siebel CRM versions 17.0 through 26.6 Description An issue exists in the Server Infrastructure component of the Siebel CRM Deployment product. An unauthenticated attacker with network access via HTTP can compromise the system. Successfu...

PT-2026-77388

Name of the Vulnerable Software and Affected Versions Oracle Siebel CRM versions 17.0 through 26.6 Description An issue exists in the Application Interface component of the Siebel CRM Deployment product. An unauthenticated attacker with access to the physical communication segment attached to the...

PT-2026-77722

Name of the Vulnerable Software and Affected Versions Oracle Hyperion Profitability and Cost Management version 11.2.25.0.000 Description A flaw in the Deployment component allows a low privileged attacker with network access via HTTP to compromise the system. This issue can lead to unauthorized...

CVE-2026-44845 JumpServer: Remote Command Execution (RCE) via Jinja Template Injection in Applet Host Deployment

JumpServer is an open source bastion host and an operation and maintenance security audit system. Prior to 4.10.17, an authenticated administrator with Applet Host management and deployment permissions can inject Jinja2 expressions into the IP/Host field or Core Service Address field, causing...

CVE-2026-44845 JumpServer: Remote Command Execution (RCE) via Jinja Template Injection in Applet Host Deployment

JumpServer is an open source bastion host and an operation and maintenance security audit system. Prior to 4.10.17, an authenticated administrator with Applet Host management and deployment permissions can inject Jinja2 expressions into the IP/Host field or Core Service Address field, causing...

CVE-2026-40145

A vulnerability exists in the interaction between a Endpoint Privilege Management Windows Deployment support utility and the agent's tamper protection controls. Under certain conditions, the protections applied to the utility process may not be enforced as intended...

EUVD-2026-60270

A vulnerability exists in the interaction between a Endpoint Privilege Management Windows Deployment support utility and the agent's tamper protection controls. Under certain conditions, the protections applied to the utility process may not be enforced as intended...

CVE-2026-40145

A vulnerability exists in the interaction between a Endpoint Privilege Management Windows Deployment support utility and the agent's tamper protection controls. Under certain conditions, the protections applied to the utility process may not be enforced as intended...

CVE-2026-40145: Insufficient Granularity of Access Control

A vulnerability exists in the interaction between a Endpoint Privilege Management Windows Deployment support utility and the agent's tamper protection controls. Under certain conditions, the protections applied to the utility process may not be enforced as intended...

PT-2026-76713

A vulnerability exists in the interaction between a Endpoint Privilege Management Windows Deployment support utility and the agent's tamper protection controls. Under certain conditions, the protections applied to the utility process may not be enforced as intended...

CVE-2026-74250

In OpenStack Ironic before 38.0.1, the autodetect deploy interface may fail to run cleaning immediately after enrollment with, or changing to, the autodetect deploy interface...

GO-2025-3433 vulnerabilities

Vulnerabilities for packages: argocd-image-updater, argocd-image-updater-fips...

GO-2024-2617 vulnerabilities

Vulnerabilities for packages: k3d...

ReconTitan

A security-hardened platform for external reconnaissance, OSIN...

The vulnerability of the Deployment Library component of the Oracle Enterprise Manager Base Platform allows a perpetrator to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the Deployment Library component of the Oracle Enterprise Manager Base Platform is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of protected information by usin...