PT-2026-77851

Name of the Vulnerable Software and Affected Versions Oracle Siebel CRM versions 17.0 through 26.6 Description An issue exists in the Migration component of the Siebel CRM Deployment product. An unauthenticated attacker with network access via HTTP can compromise the system, potentially leading t...

PT-2026-78118

Name of the Vulnerable Software and Affected Versions Oracle VM VirtualBox version 7.2.14 Description A flaw in the Core component allows an unauthenticated attacker with access to the infrastructure where the software executes to compromise the system. Successful exploitation requires human...

PT-2026-77453

Name of the Vulnerable Software and Affected Versions Oracle Fusion Middleware Oracle Identity Manager Connector version 12.2.1.4.0 Oracle Fusion Middleware Oracle Identity Manager Connector version 14.1.2.1.0 Description A flaw in the Core component of the Oracle Identity Manager Connector allow...

PT-2026-77412

Name of the Vulnerable Software and Affected Versions Oracle PeopleSoft PeopleSoft Enterprise PeopleTools versions 8.61 through 8.63 Description A flaw in the PeopleCode component allows a high privileged attacker with network access via HTTP to compromise the system. Successful exploitation can...

PT-2026-77464

Name of the Vulnerable Software and Affected Versions Oracle WebCenter Sites version 12.2.1.4.0 Oracle WebCenter Sites version 14.1.2.0.0 Description An unauthenticated attacker with network access via HTTP can compromise Oracle WebCenter Sites. Successful exploitation of this issue can result in...

PT-2026-77568

Name of the Vulnerable Software and Affected Versions Oracle Siebel CRM Siebel CRM Cloud Applications versions 22.3 through 26.6 Description A flaw in the Siebel Cloud Manager component allows a low privileged attacker with network access via HTTP to compromise the application. Successful...

PT-2026-78201

Vulnerability in the Helidon product of Oracle Fusion Middleware component: Imperative Web Server. The supported version that is affected is 4.5.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful attacks of this...

PT-2026-77310

Name of the Vulnerable Software and Affected Versions Keycloak affected versions not specified Description A flaw exists in the legacy client-initiated account-linking endpoint of Keycloak. The protection mechanism for the account-linking process uses a predictable hash, which a malicious OpenID...

PT-2026-78001

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce component: Experience Manager. The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure whe...

PT-2026-78194

Vulnerability in the Helidon product of Oracle Fusion Middleware component: Imperative Web Server. The supported version that is affected is 4.5.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful attacks of this...

PT-2026-77942

Name of the Vulnerable Software and Affected Versions Oracle Siebel CRM versions 17.0 through 26.6 Description An issue exists in the Document Management component of the Siebel CRM End User product. A low privileged attacker with network access via HTTP can exploit this flaw to compromise the...

PT-2026-77692

Name of the Vulnerable Software and Affected Versions Oracle Agile Engineering Data Management version 6.2.1 Description An issue exists in the Engineering Communication Interface component of the Oracle Agile Engineering Data Management product. A high privileged attacker with access to the...

PT-2026-77637

Name of the Vulnerable Software and Affected Versions Oracle Reports Developer version 12.2.1.19.0 Description An issue exists in the Security and Authentication component of Oracle Reports Developer. An unauthenticated attacker with network access via IIOP Internet Inter-ORB Protocol, a protocol...

PT-2026-77457

Name of the Vulnerable Software and Affected Versions Oracle SOA Suite versions 12.2.1.4.0 Oracle SOA Suite versions 14.1.2.0.0 Description A flaw in the B2B Engine component of Oracle Fusion Middleware allows a low privileged attacker with network access via HTTP to compromise the system...

PT-2026-77216

Name of the Vulnerable Software and Affected Versions Keycloak versions prior to 26.7.2 Red Hat Build of Keycloak versions 26.4.x prior to 26.4.15 Red Hat Build of Keycloak versions 26.6.x prior to 26.6.6 Description A flaw exists in the reset-credentials flow of the keycloak-services component d...

PT-2026-77898

Name of the Vulnerable Software and Affected Versions Oracle Access Manager versions 12.2.1.4.0 Oracle Access Manager versions 14.1.2.1.0 Description An issue exists in the Agent infrastructure component of Oracle Access Manager. An unauthenticated attacker with network access via SAML Security...

PT-2026-77862

Name of the Vulnerable Software and Affected Versions Oracle Application Testing Suite version 13.3.0.1 Description An unauthenticated attacker with network access via HTTP can compromise the Oracle Application Testing Suite. Successful exploitation of this issue can result in a complete takeover...

PT-2026-77949

Name of the Vulnerable Software and Affected Versions Oracle Hyperion Infrastructure Technology version 11.2.25.0.000 Description An issue exists in the Installation and Configuration component that allows an unauthenticated attacker with network access via HTTP to compromise the system. Successf...

PT-2026-77792

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle Purchasing versions 12.2.3 through 12.2.15 Description An issue exists in the Internal Operations component of the Oracle Purchasing product. A high privileged attacker with network access via HTTP can exploit th...

PT-2026-77928

Name of the Vulnerable Software and Affected Versions Oracle Hyperion Financial Management version 11.2.25.0.000 Description A security flaw in the Security component allows a low privileged attacker with network access via HTTP to compromise the system. Successful exploitation can lead to a full...