PT-2026-63154

Name of the Vulnerable Software and Affected Versions Oracle Product Hub versions 12.2.3 through 12.2.15 Description A flaw in the Internal Operations component allows a low privileged attacker with network access via HTTP to compromise the system. Successful exploitation can lead to a full...

PT-2026-62998

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle Applications DBA versions 12.2.3 through 12.2.15 Description A flaw in the ADPatch component allows a low privileged attacker with network access via HTTP to compromise the Oracle Applications DBA product...

PT-2026-62830

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle Order Management versions 12.2.3 through 12.2.15 Description A flaw exists in the Product Diagnostic Tools component of Oracle Order Management. A high privileged attacker with network access via HTTP can exploit...

📄 WordPress CE21 Suite 2.3.1 Unauthenticated SSO API Settings Overwrite

WordPress CE21 Suite plugin version 2.3.1 contains an unauthenticated SSO api settings overwrite vulnerability through missing authorization. A remote attacker can overwrite SSO API configuration without authorization. This proof of concept exploit demonstrates the vulnerable request flow against...

PT-2026-62846

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle Payroll versions 12.2.3 through 12.2.15 Description A flaw in the Internal Operations component of Oracle Payroll allows a low-privileged attacker with access to the execution infrastructure to compromise the...

PT-2026-63118

Vulnerability in the Oracle HRMS Hong Kong product of Oracle E-Business Suite component: Hong Kong Payroll. Supported versions that are affected are 12.2.13-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle HRMS Hong Kong...

PT-2026-62438

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle HRMS France versions 12.2.3 through 12.2.15 Description A flaw in the French HR Payroll component allows a low privileged attacker with network access via HTTP to compromise the system. This can lead to...

PT-2026-63228

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle HRMS US versions 12.2.3 through 12.2.15 Description An issue exists within the Internal Operations component of the Oracle HRMS US product. A high privileged attacker with network access via HTTP can exploit this...

PT-2026-63158

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle Payables versions 12.2.8 through 12.2.15 Description A flaw in the Internal Operations component of Oracle Payables allows a low privileged attacker with network access via HTTP to compromise the system. Successf...

PT-2026-62733

Vulnerability in the Oracle Process Manufacturing Inventory product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

PT-2026-62582

Name of the Vulnerable Software and Affected Versions Oracle SOA Suite versions 12.2.1.4.0 Oracle SOA Suite versions 14.1.2.0.0 Description A flaw in the Integration Business Insight component of Oracle Fusion Middleware allows a low privileged attacker with network access via HTTP to compromise...

PT-2026-62720

Vulnerability in the Oracle Scheduler product of Oracle E-Business Suite component: Rules UI. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Scheduler. Successful attacks of...

PT-2026-62806

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle iSupport versions 12.2.3 through 12.2.15 Description A flaw in the Internal Operations component of the Oracle iSupport product allows a high privileged attacker with network access via HTTP to compromise the...

PT-2026-62613

Name of the Vulnerable Software and Affected Versions Oracle SDP Number Portability versions 12.2.3 through 12.2.15 Description A flaw in the Installation component allows a low privileged attacker with network access via HTTP to compromise the system. This can lead to unauthorized update, insert...

PT-2026-62747

Name of the Vulnerable Software and Affected Versions Oracle iReceivables versions 12.2.3 through 12.2.15 Description An issue exists in the AR Web Utilities component of the Oracle iReceivables product of Oracle E-Business Suite. A low privileged attacker with network access via HTTP can...

PT-2026-63011

Vulnerability in the Oracle Configure to Order product of Oracle E-Business Suite component: Supply to Order Workbench. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

PT-2026-62938

Name of the Vulnerable Software and Affected Versions Oracle Production Scheduling versions 12.2.3 through 12.2.15 Description An issue exists in the Internal Operations component of the Oracle Production Scheduling product of Oracle E-Business Suite. A high privileged attacker with access to the...

PT-2026-63201

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle Time and Labor versions 12.2.3 through 12.2.15 Description A flaw in the Internal Operations component allows a low privileged attacker with network access via HTTP to compromise the system. Successful exploitati...

PT-2026-62766

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle Applications Framework versions 12.2.3 through 12.2.15 Description A flaw in the Graph / Charting component of the Oracle Applications Framework allows a low privileged attacker with network access via HTTP to...

PT-2026-62903

Name of the Vulnerable Software and Affected Versions Oracle Project Portfolio Analysis versions 12.2.3 through 12.2.15 Description A flaw in the Internal Operations component allows a low privileged attacker with network access via HTTP to compromise the system. This can lead to unauthorized...