PT-2026-92924

Name of the Vulnerable Software and Affected Versions Oracle Demand Signal Repository versions 12.2.3 through 12.2.15 Description A flaw in the Internal Operations component allows a low privileged attacker with network access via HTTP to compromise the system. Successful exploitation can lead to...

PT-2026-92675

Vulnerability in the Oracle Project Intelligence product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Project...

PT-2026-92909

Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Product Hub...

PT-2026-92919

Vulnerability in the Oracle Document Management and Collaboration product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

PT-2026-92635

Name of the Vulnerable Software and Affected Versions Oracle Partner Management versions 12.2.3 through 12.2.15 Description A flaw in the Internal Operations component allows a low privileged attacker with network access via HTTP to compromise the system. This issue can lead to unauthorized acces...

PT-2026-92684

Vulnerability in the Oracle Project Intelligence product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Project...

PT-2026-92947

Name of the Vulnerable Software and Affected Versions Oracle iRecruitment versions 12.2.3 through 12.2.15 Description An issue exists in the Internal Operations component of the Oracle iRecruitment product of Oracle E-Business Suite. A low privileged attacker with network access via HTTP can...

CVE-2026-79425: Server-Side Request Forgery (SSRF)

An authenticated Server-Side Request Forgery SSRF in the /adminapi/file/onlineupload component of CRMEB v6.0.0 allows attackers to scan internal resources via a crafted POST request...

CVE-2026-83453: Improper Privilege Management

Vulnerability in the Oracle Document Management and Collaboration product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise...

CVE-2026-83129: Improper Access Control

Vulnerability in the Oracle Sales product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Sales. While the...

CVE-2026-55864: Server-Side Request Forgery (SSRF)

GeoNetwork is a catalog application to manage spatially referenced resources. Prior to 4.2.17 and 4.4.12, POST /api/tools/ogc/sld accepted a caller-supplied WMS server URL and performed a server-side HTTP GET without destination validation. An anonymous attacker could make the GeoNetwork server...

CVE-2026-83200: Improper Access Control

Vulnerability in the Oracle Process Manufacturing Intelligence product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via Oracle Net to compromi...

CVE-2026-91750: Server-Side Request Forgery (SSRF)

WeKnora before 0.7.0 fails to re-validate HTTP redirect targets in the POST /api/v1/knowledge-bases/:id/knowledge/url endpoint when downloading documents from user-supplied URLs. Authenticated attackers can bypass initial SSRF validation by supplying a public URL that redirects to internal networ...

CVE-2026-83443: Exposure of Sensitive Information to an Unauthorized Actor

Vulnerability in the Oracle Assets product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Assets. Successful attac...

PT-2026-92939

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle US Federal Human Resources versions 12.2.3 through 12.2.15 Description An issue exists in the Internal Operations component of the Oracle US Federal Human Resources product. A low privileged attacker with network...

PT-2026-92653

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle Sales versions 12.2.3 through 12.2.15 Description A flaw in the Internal Operations component of Oracle Sales allows a low privileged attacker with network access via HTTP to compromise the system. This issue can...

PT-2026-92031

An authenticated Server-Side Request Forgery SSRF in the /adminapi/file/online upload component of CRMEB v6.0.0 allows attackers to scan internal resources via a crafted POST request...

CVE-2026-79425

An authenticated Server-Side Request Forgery SSRF in the /adminapi/file/onlineupload component of CRMEB v6.0.0 allows attackers to scan internal resources via a crafted POST request...

PT-2026-92613

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle Alert versions 12.2.3 through 12.2.15 Description A flaw in the Internal Operations component of Oracle Alert allows a low privileged attacker with network access via HTTP to compromise the system. Successful...

PT-2026-92727

Vulnerability in the Oracle Sourcing product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Sourcing. Successful...