PT-2026-62811

Name of the Vulnerable Software and Affected Versions Oracle Solaris version 11.4 Description A flaw in the Utility component allows a low-privileged attacker with local access to the infrastructure to compromise the system. Successful exploitation can lead to a full takeover of the operating...

PT-2026-62787

Name of the Vulnerable Software and Affected Versions Oracle iSetup versions 12.2.3 through 12.2.15 Description An issue exists in the General Ledger Update Transform, Reports component of Oracle iSetup. A low privileged attacker with network access via HTTP can compromise the system. Successful...

CVE-2026-46991: Improper Access Control

Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager component: Enterprise Config Management. Supported versions that are affected are 13.5 and 24.1. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where...

CVE-2026-60812: Exposure of Sensitive Information to an Unauthorized Actor

Vulnerability in the Oracle Supply Chain Trading Connector product of Oracle E-Business Suite component: Collaboration History. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracl...

PT-2026-62657

Name of the Vulnerable Software and Affected Versions Oracle JD Edwards EnterpriseOne HCM Foundation version 9.2 Description A flaw exists in the Time Accounting and HRM Base component of the Oracle JD Edwards EnterpriseOne HCM Foundation product. A low-privileged attacker with network access via...

PT-2026-62851

Vulnerability in the Oracle HCM Configuration Workbench product of Oracle E-Business Suite component: Rapid Implementation. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle HC...

PT-2026-62233

Name of the Vulnerable Software and Affected Versions Oracle VM VirtualBox version 7.2.12 Description A flaw in the Core component allows a low privileged attacker with access to the infrastructure where the software executes to compromise the system. Successful exploitation can lead to a complet...

CVE-2026-61181: Improper Access Control

Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain component: Product Quality Management. The supported version that is affected is 6.2.4. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...

CVE-2026-62556: Exposure of Sensitive Information to an Unauthorized Actor

Vulnerability in the Oracle HRMS US product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.6-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle HRMS US. Successful...

CVE-2026-60749: Improper Access Control

Vulnerability in the Oracle Assets product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Assets. Successful attac...

PT-2026-62647

Name of the Vulnerable Software and Affected Versions Oracle PeopleSoft Enterprise CS Campus Community version 9.2.38 Description A flaw in the Communication component allows a low privileged attacker with network access via HTTPS to compromise the system. Successful exploitation can lead to...

PT-2026-62441

Name of the Vulnerable Software and Affected Versions Oracle JD Edwards EnterpriseOne Tools version 9.2.26.3 Description A flaw in the Enterprise Infrastructure Security component allows a low-privileged attacker with access to the execution infrastructure to compromise the system. This can lead ...

PT-2026-63094

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Secure Enterprise Search versions 12.2.3 through 12.2.15 Description A flaw in the Search Integration Engine component allows a low privileged attacker with network access via HTTP to compromise the system. Successful...

CVE-2026-60965: Improper Access Control

Vulnerability in the Oracle HRMS France product of Oracle E-Business Suite component: French HR. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle HRMS France. Successful attac...

CVE-2026-47000: Cross-Site Request Forgery (CSRF)

Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager component: Security Framework. The supported version that is affected is 24.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTPS to compromise Oracle...

PT-2026-63117

Vulnerability in the HRMS Australia product of Oracle E-Business Suite component: Payroll. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise HRMS Australia. Successful attacks of this...

PT-2026-63005

Vulnerability in the Oracle HRMS UK product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.8-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle HRMS UK. While the...

CVE-2026-60997: Improper Access Control

Vulnerability in the Oracle Universal Work Queue product of Oracle E-Business Suite component: Non-Media Integration issues. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

PT-2026-63221

Name of the Vulnerable Software and Affected Versions Oracle Learning Management versions 12.2.3 through 12.2.15 Description An issue exists in the Import And Export component of the Oracle Learning Management product within Oracle E-Business Suite. A low privileged attacker with network access v...

CVE-2026-61323: Improper Access Control

Vulnerability in the Oracle Advanced Benefits product of Oracle E-Business Suite component: Internal Operations. The supported version that is affected is 12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Advanced Benefits...