CVE-2026-71097: Improper Access Control

Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics component: Platform Security. The supported version that is affected is 26.01.0.0.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle...

PT-2026-77939

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle Purchasing versions 12.2.3 through 12.2.15 Description A flaw in the Oracle Purchasing product allows a low privileged attacker with network access via HTTP to compromise the system. Successful exploitation can...

PT-2026-77369

Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware component: Composer. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via RMI to compromise Oracle WebCenter...

CVE-2026-62575: Improper Access Control

Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion component: Installation and Configuration. The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where...

PT-2026-77607

Name of the Vulnerable Software and Affected Versions Oracle Hyperion Calculation Manager version 11.2.25.0.000 Description A security issue exists in the Security component that allows a low privileged attacker with access to the physical communication segment attached to the hardware where the...

PT-2026-77590

Name of the Vulnerable Software and Affected Versions Oracle Hyperion Infrastructure Technology version 11.2.25.0.000 Description A flaw in the Installation and Configuration component allows a low privileged attacker with access to the infrastructure where the software executes to compromise the...

PT-2026-77564

Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion component: Common Security. The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hyperion...

PT-2026-78095

Name of the Vulnerable Software and Affected Versions Oracle Hyperion Financial Management version 11.2.25.0.000 Description A security flaw in the Security component allows a low privileged attacker with network access via HTTP to compromise the system. Successful exploitation can lead to...

PT-2026-77787

Name of the Vulnerable Software and Affected Versions Oracle Yard Management versions 12.2.3 through 12.2.15 Description A flaw in the Internal Operations component of Oracle Yard Management allows a low privileged attacker with network access via HTTP to compromise the system. Successful...

CVE-2026-61042: Improper Access Control

Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware component: WebCenter Sites. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle WebCent...

PT-2026-77601

Name of the Vulnerable Software and Affected Versions Oracle Hyperion Infrastructure Technology version 11.2.25.0.000 Description An issue exists in the Installation and Configuration component of Oracle Hyperion Infrastructure Technology. A low privileged attacker with access to the infrastructu...

CVE-2026-71082: Improper Access Control

Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply Chain component: CAX Client. The supported version that is affected is 3.6. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Agile PLM MCAD Connector execut...

PT-2026-77573

Name of the Vulnerable Software and Affected Versions Oracle Hyperion Calculation Manager version 11.2.25.0.000 Description A security flaw in the Oracle Hyperion Calculation Manager allows a low privileged attacker with network access via HTTP to compromise the system. The exploitation of this...

PT-2026-77936

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle Payroll versions 12.2.3 through 12.2.15 Description A flaw in the Internal Operations component of Oracle Payroll allows a low privileged attacker with network access via HTTP to compromise the system. This issue...

PT-2026-77505

Name of the Vulnerable Software and Affected Versions Oracle JD Edwards EnterpriseOne Tools versions 9.2.0.0 through 9.2.26.4 Description A flaw in the Installation Security component allows a low privileged attacker with network access via HTTP to compromise the system. Successful exploitation c...

PT-2026-78033

Name of the Vulnerable Software and Affected Versions Oracle Agile PLM version 9.3.6 Description A flaw in the PGC / Excel Plugin component allows a low privileged attacker with network access via HTTP to compromise the system. Successful exploitation can lead to unauthorized creation, deletion, ...

CVE-2026-70866: Improper Access Control

Vulnerability in Oracle Application Testing Suite. The supported version that is affected is 13.3.0.1. Easily exploitable vulnerability allows low privileged attacker having Load Testing for Web Apps privilege with logon to the infrastructure where Oracle Application Testing Suite executes to...

PT-2026-77465

Name of the Vulnerable Software and Affected Versions Oracle WebCenter Sites version 12.2.1.4.0 Oracle WebCenter Sites version 14.1.2.0.0 Description A flaw in the Oracle WebCenter Sites component of Oracle Fusion Middleware allows a low privileged attacker with network access via HTTP to...

PT-2026-78200

Name of the Vulnerable Software and Affected Versions Oracle Fusion Middleware Helidon version 4.5.0 Description A flaw in the Imperative Web Server component allows a low privileged attacker with network access via HTTP to compromise the system. This can lead to unauthorized read access to a...

CVE-2026-71092: Improper Access Control

Vulnerability in the PeopleSoft Enterprise FIN Lease Administration product of Oracle PeopleSoft component: Lease Administration. The supported version that is affected is 9.2. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where PeopleSoft...