PT-2026-77991

Name of the Vulnerable Software and Affected Versions Oracle Commerce Guided Search / Oracle Commerce Experience Manager version 11.4.0 Description A flaw in the Experience Manager component allows a low-privileged attacker with network access via HTTP to compromise the system. Successful...

CVE-2026-70714: Improper Access Control

Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion component: Security. The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Hyperion Calculation...

PT-2026-77825

Name of the Vulnerable Software and Affected Versions Oracle Process Manufacturing Systems versions 12.2.3 through 12.2.15 Description A flaw in the Internal Operations component allows a low privileged attacker with network access via HTTP to compromise the system. Successful exploitation can le...

PT-2026-78126

Name of the Vulnerable Software and Affected Versions Oracle VM VirtualBox version 7.2.14 Description A flaw in the Core component allows a high privileged attacker with access to the infrastructure where the software executes to compromise the system. This can lead to unauthorized read access to...

CVE-2026-70806: Missing Authentication for Critical Function

Vulnerability in the Oracle E-Business Tax product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle E-Business Tax...

PT-2026-77385

Name of the Vulnerable Software and Affected Versions Oracle Siebel CRM Siebel Apps - Marketing versions 17.0 through 26.6 Description A flaw in the Marketing component allows a low privileged attacker with network access via HTTP to compromise the system. This can lead to unauthorized creation,...

PT-2026-77810

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle Internet Procurement Connector versions 12.2.3 through 12.2.15 Description A flaw in the Internal Operations component of the Oracle Internet Procurement Connector allows a low privileged attacker with network...

PT-2026-77804

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle Scripting versions 12.2.3 through 12.2.15 Description A flaw in the Internal Operations component of the Oracle Scripting product allows a low privileged attacker with network access via HTTP to compromise the...

PT-2026-77785

Vulnerability in the Oracle Telecommunications Billing Integrator product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

PT-2026-77874

Name of the Vulnerable Software and Affected Versions Oracle Hyperion Data Relationship Management version 11.2.25.0.000 Description An issue exists in the Access and security component that allows a low privileged attacker with network access via HTTP to compromise the system. Successful...

PT-2026-77622

Name of the Vulnerable Software and Affected Versions Oracle Siebel CRM Integration versions 25.12 through 26.6 Description An issue exists in the Open Integration component of the Oracle Siebel CRM Integration product. An unauthenticated attacker with access to the physical communication segment...

PT-2026-77777

Name of the Vulnerable Software and Affected Versions Oracle Labor Distribution versions 12.2.3 through 12.2.15 Description A flaw in the Internal Operations component allows a low privileged attacker with network access via HTTP to compromise the system. Successful exploitation can lead to...

PT-2026-77737

Name of the Vulnerable Software and Affected Versions Oracle Hyperion Profitability and Cost Management version 11.2.25.0.000 Description A flaw in the Deployment component allows a low privileged attacker with network access via HTTP to compromise the system. Successful exploitation can lead to...

CVE-2026-62536: Improper Access Control

Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion component: Installation and Configuration. The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Orac...

PT-2026-77806

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle Purchasing versions 12.2.5 through 12.2.15 Description A flaw in the Internal Operations component allows a low privileged attacker with network access via HTTP to compromise the system. Successful exploitation c...

PT-2026-77798

Vulnerability in the Oracle General Ledger product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle General Ledger...

CVE-2026-61016: Improper Access Control

Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware component: WebCenter Sites. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

PT-2026-77437

Name of the Vulnerable Software and Affected Versions Oracle WebCenter Content version 12.2.1.4.0 Oracle WebCenter Content version 14.1.2.0.0 Description An issue exists in the Content Server component of Oracle WebCenter Content. An unauthenticated attacker with access to the physical...

PT-2026-78205

Name of the Vulnerable Software and Affected Versions Oracle Fusion Middleware Helidon version 3.2.18 Description A flaw in the Imperative Web Server component allows an unauthenticated attacker with network access via HTTP to compromise the system. Successful exploitation can lead to unauthorize...

PT-2026-77456

Name of the Vulnerable Software and Affected Versions Oracle Web Services Manager version 12.2.1.4.0 Oracle Web Services Manager version 14.1.2.0.0 Description A flaw in the Web Services Security component of Oracle Fusion Middleware allows a low privileged attacker with network access via HTTP t...