1065 matches found
PT-2026-77831
Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion component: Security. The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Hyperion Financial...
PT-2026-78170
Name of the Vulnerable Software and Affected Versions Oracle Fusion Middleware Helidon version 4.5.0 Description A flaw in the Imperative Web Server component allows a low privileged attacker with network access via HTTP to compromise the system. This can lead to unauthorized read access to a...
PT-2026-77432
Name of the Vulnerable Software and Affected Versions Oracle WebCenter Content version 12.2.1.4.0 Oracle WebCenter Content version 14.1.2.0.0 Description A flaw in the Content Server component of Oracle Fusion Middleware allows a low privileged attacker with network access via HTTP to compromise...
PT-2026-78038
Name of the Vulnerable Software and Affected Versions Oracle Product Lifecycle Analytics version 3.6.1 Description An issue in the Installation Issues component allows a low privileged attacker with network access via HTTP to compromise the system. Successful exploitation can lead to unauthorized...
PT-2026-78137
Name of the Vulnerable Software and Affected Versions Oracle VM VirtualBox version 7.2.14 Description A flaw in the Core component allows a low-privileged attacker with access to the infrastructure where the software executes to compromise the system. This issue can lead to unauthorized access to...
PT-2026-77757
Name of the Vulnerable Software and Affected Versions Oracle Risk Management versions 12.2.3 through 12.2.15 Description An issue exists in the Internal Operations component of the Oracle Risk Management product of Oracle E-Business Suite. A low privileged attacker with network access via HTTP ca...
PT-2026-77524
Name of the Vulnerable Software and Affected Versions Oracle Siebel CRM Siebel CRM Cloud Applications versions 22.3 through 26.6 Description A flaw in the Siebel Cloud Manager component allows a low privileged attacker with network access via HTTP to compromise the application. Successful...
PT-2026-77472
Name of the Vulnerable Software and Affected Versions Oracle WebCenter Sites version 12.2.1.4.0 Oracle WebCenter Sites version 14.1.2.0.0 Description A flaw in the Oracle WebCenter Sites component of Oracle Fusion Middleware allows a low privileged attacker with network access via HTTP to...
PT-2026-77840
Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle Loans versions 12.2.3 through 12.2.15 Description A flaw in the Internal Operations component allows a low privileged attacker with network access via HTTP to compromise the system. This can lead to unauthorized...
PT-2026-77786
Name of the Vulnerable Software and Affected Versions Oracle Transportation Execution versions 12.2.3 through 12.2.15 Description A flaw in the Internal Operations component allows a low privileged attacker with network access via HTTP to compromise the system. Successful exploitation requires...
PT-2026-78084
Name of the Vulnerable Software and Affected Versions Oracle Business Intelligence Enterprise Edition version 26.01.0.0.0 Description A flaw in the Platform Security component allows a low privileged attacker with access to the infrastructure where the software executes to compromise the system...
PT-2026-77508
Name of the Vulnerable Software and Affected Versions Oracle Enterprise Manager Base Platform version 13.5 Oracle Enterprise Manager Base Platform version 24.1 Description A flaw in the Application Config Console component allows a low privileged attacker with network access via HTTP to compromis...
PT-2026-77833
Name of the Vulnerable Software and Affected Versions Oracle Hyperion Financial Management version 11.2.25.0.000 Description A security flaw in the Security component allows a low-privileged attacker with access to the infrastructure where the software executes to compromise the system. This can...
CVE-2026-56686
Dell ObjectScale, versions prior to 4.3.0.1, contains an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges...
CVE-2026-56090
Dell ObjectScale, versions prior to 4.3.0.1, contains an Uncontrolled Search Path Element vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges...
CVE-2026-40126
OutSystems Service Center is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. A low-privileged attacker can exploit it by uploading a file whose filename contains malicious JavaScript code . The flaw exists in all locations within Service Center where a file can be attached and p...
CVE-2026-40126 DOM-based Cross-Site Scripting in OutSystems Service Center
OutSystems Service Center is vulnerable to a DOM-based Cross-Site Scripting XSS attack that can be exploited by a low-privileged attacker via the upload of a file with a malicious filename containing JavaScript code. The vulnerability exists in all locations where a file can be attached and...
BIT-JRE-2026-60526
Vulnerability in Oracle Java SE component: Installation. Supported versions that are affected are Oracle Java SE: 8u491 and 8u491-perf. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Java SE executes to compromise Oracle Java SE...
CVE-2026-63700
Dell Wyse Management Suite WMS, versions prior to 2605.0.2, contain an Incorrect Default Permission vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Privilege Escalation...
CVE-2026-63700
Dell Wyse Management Suite (WMS) is affected by CVE-2026-63700 in versions prior to 2605.0.2, due to an Incorrect Default Permission issue. The vulnerability could allow a low-privileged attacker with local access to escalate privileges. The available documents confirm affected product (Dell Wyse...