PT-2026-62366

Name of the Vulnerable Software and Affected Versions Oracle Coherence versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0 Description An issue in the Core component of Oracle Coherence allows an unauthenticated attacker with network access via HTTP to compromise the system. Successful...

PT-2026-62374

Name of the Vulnerable Software and Affected Versions Oracle WebLogic Server version 12.2.1.4.0 Oracle WebLogic Server version 14.1.1.0.0 Description An issue in the Core component of Oracle Fusion Middleware allows an unauthenticated attacker with network access via HTTP to compromise the server...

PT-2026-62396

Name of the Vulnerable Software and Affected Versions MySQL Router versions 8.4.0 through 8.4.10 MySQL Router versions 9.7.0 through 9.7.1 Description An unauthenticated attacker with network access via HTTP can compromise the system. This issue allows the attacker to cause a hang or a frequently...

PT-2026-62139

Vulnerability in the Oracle Cost Management product of Oracle E-Business Suite component: Cost Maintenance. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Cost Management...

PT-2026-62169

Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager component: Self Update Framework. Supported versions that are affected are 13.5 and 24.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTPS to compromise...

PT-2026-62911

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle Landed Cost Management versions 12.2.3 through 12.2.15 Description A flaw in the Internal Operations component allows a low privileged attacker with network access via HTTP to compromise the system. Successful...

PT-2026-63235

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle HRMS US versions 12.2.3 through 12.2.15 Description A flaw in the Internal Operations component allows a low privileged attacker with network access via HTTP to compromise the system. Successful exploitation can...

PT-2026-63132

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle Document Management and Collaboration versions 12.2.3 through 12.2.15 Description An issue exists in the Attachments component of the Oracle Document Management and Collaboration product. An unauthenticated...

PT-2026-63209

Vulnerability in the Oracle Time and Labor product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Time and Labor...

PT-2026-63229

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle HRMS UK versions 12.2.3 through 12.2.15 Description A flaw in the UK Payroll component of Oracle HRMS UK allows a low privileged attacker with network access via HTTP to compromise the system. This issue can lead...

PT-2026-63226

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle Applications Framework versions 12.2.8 through 12.2.15 Description A flaw in the Web Utilities component of the Oracle Applications Framework allows a high privileged attacker with network access via HTTP to...

PT-2026-63117

Vulnerability in the HRMS Australia product of Oracle E-Business Suite component: Payroll. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise HRMS Australia. Successful attacks of this...

PT-2026-62238

Name of the Vulnerable Software and Affected Versions Oracle APEX version 24.1 Oracle APEX version 24.2 Oracle APEX version 26.1 Description An issue in the General component allows an unauthenticated attacker with network access via HTTP to compromise the system. Successful exploitation can resu...

PT-2026-62801

Vulnerability in the Oracle iStore product of Oracle E-Business Suite component: Shopping Cart. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle iStore. Successful attacks o...

PT-2026-62820

Vulnerability in the Oracle Customer Support product of Oracle E-Business Suite component: Update Service Request. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Customer...

PT-2026-62180

Name of the Vulnerable Software and Affected Versions Oracle PeopleSoft PeopleSoft Enterprise PeopleTools version 8.62 Description A flaw in the PIA Core Technology component allows an unauthenticated attacker with network access via HTTP to compromise the system. Exploitation requires human...

PT-2026-63018

Vulnerability in the Oracle Commerce Platform product of Oracle Commerce component: Dynamo Application Framework. The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Commerce Platform...

PT-2026-57210

Name of the Vulnerable Software and Affected Versions 9Router versions prior to 0.5.2 Description An authenticated attacker with access to the LLM proxy can perform a Server-Side Request Forgery SSRF by exploiting a Time-of-Check to Time-of-Use TOCTOU gap during image URL validation. The software...

Oracle JDeveloper / ADF Multiple Vulnerabilities (June 2026 CSPU)

The version of Oracle JDeveloper Oracle Application Development Framework, ADF installed on the remote host is missing a security patch. It is, therefore, affected by multiple vulnerabilities as referenced in the June 2026 CSPU advisory. - Vulnerability in the Oracle Application Development...

Oracle Application Development Framework Permission Licensing and Access Control Vulnerabilities

The Oracle Application Development Framework is an application development framework developed by Oracle Corporation in the United States. There were vulnerabilities related to permission licensing and access control in the ADF versions 12.2.1.4.0 and 14.1.2.0.0. These vulnerabilities stemmed fro...