PT-2026-77528

Name of the Vulnerable Software and Affected Versions Oracle Siebel CRM Siebel CRM Cloud Applications versions 22.3 through 26.6 Description A flaw in the Siebel Cloud Manager component allows a low privileged attacker with network access via HTTP to compromise the system. This issue can lead to...

PT-2026-77529

Name of the Vulnerable Software and Affected Versions Oracle Siebel CRM Siebel Cloud Manager versions 22.3 through 26.6 Description A flaw in the Siebel Cloud Manager component of Oracle Siebel CRM Cloud Applications allows a low privileged attacker with network access via HTTP to compromise the...

PT-2026-78111

Name of the Vulnerable Software and Affected Versions Oracle Access Manager versions 12.2.1.4.0 Oracle Access Manager versions 14.1.2.1.0 Description A flaw in the Authorization Engine component of Oracle Fusion Middleware allows a low privileged attacker with network access via TCP to compromise...

PT-2026-77450

Name of the Vulnerable Software and Affected Versions Oracle Fusion Middleware Oracle Identity Manager Connector versions 12.2.1.4.0 Oracle Fusion Middleware Oracle Identity Manager Connector versions 14.1.2.1.0 Description An issue exists in the Core component of the Oracle Identity Manager...

PT-2026-77451

Name of the Vulnerable Software and Affected Versions Oracle Fusion Middleware Oracle Identity Manager Connector version 12.2.1.4.0 Oracle Fusion Middleware Oracle Identity Manager Connector version 14.1.2.1.0 Description An issue in the Core component allows an unauthenticated attacker with acce...

PT-2026-77454

Name of the Vulnerable Software and Affected Versions Oracle Fusion Middleware Oracle Identity Manager Connector version 12.2.1.4.0 Oracle Fusion Middleware Oracle Identity Manager Connector version 14.1.2.1.0 Description A flaw in the Connectors and Connector Server component allows a high...

PT-2026-77411

Name of the Vulnerable Software and Affected Versions Oracle PeopleSoft PeopleSoft Enterprise PeopleTools versions 8.61 through 8.63 Description A flaw in the Configuration Manager component allows a low privileged attacker with network access via SQL to compromise the system. Successful...

PT-2026-77358

Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware component: Security. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Identity...

PT-2026-77359

Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware component: OIM Legacy UI. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Identity...

PT-2026-77363

Name of the Vulnerable Software and Affected Versions Oracle Identity Manager versions 12.2.1.4.0 Oracle Identity Manager versions 14.1.2.1.0 Description A flaw in the OIM Legacy UI component of Oracle Fusion Middleware allows a low privileged attacker with network access via T3 and IIOP Internet...

PT-2026-77485

Name of the Vulnerable Software and Affected Versions Oracle Hyperion Calculation Manager version 11.2.25.0.000 Description A security flaw in the Oracle Hyperion Calculation Manager allows a low privileged attacker with network access via HTTP to compromise the system. Successful exploitation ca...

PT-2026-77405

Name of the Vulnerable Software and Affected Versions Oracle Hyperion Calculation Manager version 11.2.25.0.000 Description A security flaw in the Security component allows an unauthenticated attacker with network access via HTTP to compromise the system. Successful exploitation can lead to a...

PT-2026-77089

Customer SQL Injection in License Manager for WooCommerce = 3.0.18 versions...

CVE-2026-50186: Improper Limitation of a Pathname to a Restricted Directory

4gaBoards is a boards system for realtime project management. Prior to 3.3.8, 4gaBoards allows an authenticated project manager to supply traversal sequences in the filename parameter of GET /exports/:id/:filename. In server/api/controllers/boards/download.js, the decoded inputs.filename value is...

CVE-2026-62512: Improper Access Control

Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM component: Siebel Cloud Manager. Supported versions that are affected are 22.3-26.6. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Siebel CRM Cloud...

PT-2026-77684

Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion component: Security. The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle Hyperion Calculation...

PT-2026-77517

Name of the Vulnerable Software and Affected Versions Oracle Enterprise Manager Base Platform version 13.5 Oracle Enterprise Manager Base Platform version 24.1 Description A flaw in the Agent Next Gen component allows a low privileged attacker with access to the infrastructure where the platform...

CVE-2026-61298: Improper Access Control

Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager component: Enterprise Manager Install. Supported versions that are affected are 13.5 and 24.1. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where...

CVE-2026-60993: Improper Access Control

Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Difficult to exploit vulnerability allows unauthenticated attacker with access to the physical communication segment...

PT-2026-77531

Name of the Vulnerable Software and Affected Versions Oracle Siebel CRM Siebel CRM Cloud Applications versions 22.3 through 26.6 Description A flaw in the Siebel Cloud Manager component allows a high privileged attacker with network access via HTTP to compromise the system. This issue can lead to...