PT-2026-78029

Name of the Vulnerable Software and Affected Versions Oracle Commerce Guided Search / Oracle Commerce Experience Manager version 11.4.0 Description An issue in the Experience Manager component allows an unauthenticated attacker with network access via HTTP to compromise the system. Successful...

PT-2026-78156

Vulnerability in the Helidon product of Oracle Fusion Middleware component: Imperative Web Server. The supported version that is affected is 3.2.18. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful attacks of this...

PT-2026-77971

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce component: Content Acquisition System. The supported version that is affected is 11.4.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HT...

PT-2026-77495

Name of the Vulnerable Software and Affected Versions Oracle WebCenter Portal version 12.2.1.4.0 Oracle WebCenter Portal version 14.1.2.0.0 Description An issue in the Runtime Tools component of Oracle WebCenter Portal allows an unauthenticated attacker with network access via HTTP to compromise...

PT-2026-77026

Name of the Vulnerable Software and Affected Versions Microsoft Copilot affected versions not specified Description Improper neutralization of special elements used in a command allows an unauthorized attacker to disclose information over a network. This issue, referred to as CoSnitch, involves a...

PT-2026-77812

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion component: Security. The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hyperion Financial...

PT-2026-77580

Name of the Vulnerable Software and Affected Versions Oracle Hyperion Infrastructure Technology version 11.2.25.0.000 Description An issue in the Installation and Configuration component allows an unauthenticated attacker with network access via HTTPS to compromise the system. Successful...

PT-2026-77742

Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion component: Server. The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle Hyperion Financial...

PT-2026-77714

Name of the Vulnerable Software and Affected Versions Oracle Autonomous Health Framework component: Trace File Analyzer versions 26-26.1.0, 26.2.0, 26.3.1, 26.5.0 and 26.5.2 Description An issue exists in the Trace File Analyzer component that allows an unauthenticated attacker with access to the...

PT-2026-77571

Name of the Vulnerable Software and Affected Versions Oracle Hyperion Infrastructure Technology version 11.2.25.0.000 Description An issue in the Common Security component allows an unauthenticated attacker with network access via HTTP to compromise the system. Exploitation requires human...

PT-2026-77342

Name of the Vulnerable Software and Affected Versions Oracle Outside In Technology version 8.5.8 Description An issue exists in the Outside In Core component of Oracle Fusion Middleware. An unauthenticated attacker with access to the infrastructure where the software executes can compromise the...

PT-2026-77785

Vulnerability in the Oracle Telecommunications Billing Integrator product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

PT-2026-78199

Vulnerability in the Helidon product of Oracle Fusion Middleware component: Imperative Web Server. The supported version that is affected is 4.5.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful attacks of this...

PT-2026-77903

Name of the Vulnerable Software and Affected Versions Oracle Siebel CRM versions 17.0 through 26.6 Description An issue exists in the REST component of the Siebel CRM Integration product. An unauthenticated attacker with network access via HTTP can exploit this flaw to compromise the system,...

PT-2026-77355

Name of the Vulnerable Software and Affected Versions Oracle WebLogic Server versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0 Description An issue in the Core component of Oracle Fusion Middleware allows an unauthenticated attacker with network access via IIOP Internet Inter-ORB Protoco...

PT-2026-78064

Name of the Vulnerable Software and Affected Versions Oracle Agile PLM MCAD Connector version 3.6 Description An issue exists in the CAX Client component of the Oracle Agile PLM MCAD Connector. An unauthenticated attacker with access to the physical communication segment attached to the hardware...

PT-2026-78110

Name of the Vulnerable Software and Affected Versions Oracle Hyperion Financial Management version 11.2.25.0.000 Description A security flaw in the Security component allows an unauthenticated attacker with network access via HTTP to compromise the system. Exploitation requires human interaction...

PT-2026-77952

Name of the Vulnerable Software and Affected Versions Oracle Hyperion Infrastructure Technology version 11.2.25.0.000 Description An unauthenticated attacker with network access via HTTP can compromise the Installation and Configuration component of Oracle Hyperion Infrastructure Technology. This...

PT-2026-78167

Vulnerability in the Helidon product of Oracle Fusion Middleware component: Imperative Web Server. The supported version that is affected is 3.2.18. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful attacks of this...

PT-2026-78027

Name of the Vulnerable Software and Affected Versions Oracle Commerce Guided Search / Oracle Commerce Experience Manager version 11.4.0 Description An issue in the Experience Manager component allows an unauthenticated attacker with network access via HTTP to compromise the system. Successful...