CVE-2026-83157: Improper Access Control

Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite component: Command Line - RapidClone. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle...

ROS-20260915-73-0003

The vulnerability of the Password Manager component in Google Chrome and Microsoft Edge browsers is related to insufficient validation of entered data. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...

PT-2026-92680

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle Applications Manager versions 12.2.3 through 12.2.15 Description A flaw exists in the Command Line - RapidClone component of the Oracle Applications Manager. A high privileged attacker with network access via HTT...

CVE-2026-73947: Improper Authentication

Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware component: Authentication Engine. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

PT-2026-92566

Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware component: OIM Legacy UI. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Identit...

PT-2026-92510

Name of the Vulnerable Software and Affected Versions Oracle Access Manager versions 12.2.1.4.0 Oracle Access Manager versions 14.1.2.1.0 Description A flaw in the Authentication Engine component allows a low privileged attacker with network access via HTTPS to compromise the system. This issue c...

CVE-2026-83002: Improper Access Control

Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware component: Authentication Engine. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

CVE-2026-83122: Improper Access Control

Vulnerability in the Oracle Report Manager product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTPS to compromise Oracle Report Manager...

CVE-2026-71133: Improper Authentication

Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware component: Authentication Engine. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

ROS-20260915-73-0037

The vulnerability of the Password Manager component in Google Chrome and Microsoft Edge browsers is related to insufficient validation of entered data. Exploiting this vulnerability can allow an attacker to compromise data integrity remotely...

CVE-2026-83236: Improper Access Control

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce component: Experience Manager. The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...

PT-2026-92949

Vulnerability in the Oracle Report Manager product of Oracle E-Business Suite component: Reports Security. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Report Manager...

PT-2026-92788

Name of the Vulnerable Software and Affected Versions Oracle Web Services Manager version 12.2.1.4.0 Oracle Web Services Manager version 14.1.2.0.0 Description An issue exists in the Web Services Agent component of the Oracle Web Services Manager product of Oracle Fusion Middleware. An...

CVE-2026-83079: Improper Access Control

Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM component: Siebel Cloud Manager. Supported versions that are affected are 22.3-26.7. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Siebel CRM Cloud Application...

PT-2026-92603

Name of the Vulnerable Software and Affected Versions Oracle Siebel CRM Siebel CRM Cloud Applications versions 22.3 through 26.7 Description A flaw in the Siebel Cloud Manager component allows a high-privileged attacker with access to the infrastructure where the application executes to compromis...

CVE-2026-71163: Improper Access Control

Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware component: Authentication Engine. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

CVE-2026-83341: Improper Access Control

Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite component: Command Line - RapidClone. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

CVE-2026-73944: Improper Authentication

Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware component: Authentication Engine. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

PT-2026-92691

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle Applications Manager versions 12.2.3 through 12.2.15 Description A flaw in the Oracle Diagnostics Interfaces component of the Oracle Applications Manager allows a low privileged attacker with network access via...

CVE-2026-68531: Asymmetric Resource Consumption (Amplification)

Concrete CMS 9 before 9.5.3 did not escape SQL LIKE wildcard characters in the keyword search filters used by the file manager, file folders, and page list, allowing an authenticated user with editor-level or higher privileges to submit a crafted search containing many single-character wildcards...