CVE-2026-60819

A vulnerability exists in the Application Server - JRE component of Oracle PeopleSoft Enterprise PeopleTools (versions 8.61-8.63). An unauthenticated attacker with network access via SSH could exploit this difficult-to-exploit vulnerability to compromise the product, potentially gaining unauthori...

CVE-2026-101846

A vulnerability exists in the Internal Operations component of the Oracle Purchasing product within Oracle E-Business Suite (versions 12.2.3-12.2.15 ). This easily exploitable flaw allows a low-privileged attacker with network access via HTTP to compromise Oracle Purchasing, provided they can tri...

CVE-2026-101845

A vulnerability exists in the Internal Operations component of the Oracle Purchasing product within Oracle E-Business Suite (versions 12.2.3-12.2.15). This difficult to exploit vulnerability allows a low-privileged attacker with network access via HTTP to compromise Oracle Purchasing. Successful ...

CVE-2026-101740

A vulnerability exists in the Engineering Communication Interface component of the Oracle Agile Engineering Data Management product (version 6.2.1 ). A low-privileged attacker with local infrastructure access can exploit this difficult-to-exploit vulnerability to compromise the product. Successfu...

CVE-2026-101738

The Oracle Agile Engineering Data Management product (component: Engineering Communication Interface ) is affected by a vulnerability in version 6.2.1 . A low-privileged attacker with network access via HTTP can exploit this difficult-to-exploit vulnerability to compromise the system. Successful ...

CVE-2026-101677

A vulnerability exists in the Connector/J component of the Oracle MySQL Connectors product, specifically affecting version 26.7.0 . An unauthenticated attacker with network access via multiple protocols can exploit this vulnerability, although successful execution requires human interaction from ...

CVE-2026-101600

A vulnerability exists in the Oracle TimesTen In-Memory Database (specifically the TimesTen IMDB component) affecting versions 26.1-26.1.1.3.0 . A low-privileged attacker with logon access to the infrastructure where the database executes can exploit this difficulty-to-exploit vulnerability to co...

CVE-2026-101493

A vulnerability exists in the Core component of Oracle REST Data Services affecting versions 24.2.0-26.2.1 . A low-privileged attacker with network access via HTTP can exploit this issue to gain unauthorized read , update , insert , or delete access to some of the accessible data within Oracle RE...

CVE-2026-101386

A vulnerability exists in Oracle REST Data Services (component: Core ) affecting supported versions 24.2.0-26.1.0 . A low-privileged attacker with network access via HTTP can exploit this difficult-to-exploit flaw to compromise the service. Successful exploitation may result in unauthorized read ...

CVE-2026-101381

A vulnerability exists in Oracle REST Data Services (component: ADP ) affecting supported versions 24.2.0-26.1.0 . A low-privileged attacker with network access via HTTP can exploit this flaw to compromise the service, potentially gaining unauthorized read , update , insert , or delete access to ...

CVE-2026-101378

A vulnerability exists in Oracle REST Data Services (component: ADP ) affecting supported versions 24.2.0-26.1.0 . An attacker with low privileges and network access via HTTP can exploit this flaw to compromise the service. Successful exploitation allows for unauthorized update, insert, or delete...

CVE-2026-101373

A vulnerability exists in Oracle REST Data Services (component: Core ) in supported versions 24.2.0-26.1.0 . A high-privileged attacker with network access via HTTP can compromise the service, but the attack requires human interaction from a third party. Successful exploitation can result in unau...

CVE-2026-101371

A vulnerability exists in the Core component of Oracle REST Data Services affecting versions 24.2.0-26.1.0 . A high privileged attacker with network access via HTTP can compromise the service, though the attack is difficult to exploit and requires human interaction from a person other than the at...

CVE-2026-101367

A vulnerability exists in Oracle REST Data Services (component: ADP ) affecting supported versions 24.2.0-26.1.0 . A low privileged attacker with network access via HTTP can easily exploit this flaw to compromise the service. Successful exploitation allows for unauthorized read access to a subset...

CVE-2026-101364

A vulnerability exists in Oracle REST Data Services (component: Database Actions ) affecting versions 24.2.0-26.1.0 . A low-privileged attacker with network access via HTTP can exploit this flaw to compromise the service, though the attack requires human interaction from another person. Due to a ...

CVE-2026-101361

A vulnerability exists in the Oracle REST Data Services (component: Core ) affecting supported versions 24.2.0-26.1.0 . A low-privileged attacker with network access via HTTP can exploit this difficult-to-exploit vulnerability to compromise the service. Successful exploitation may lead to unautho...

CVE-2026-101360

A vulnerability exists in the Oracle REST Data Services (component: Core ) affecting versions 24.2.0-26.1.0 . A low-privileged attacker with network access via HTTP can exploit this flaw to compromise the service, potentially gaining unauthorized read , update , insert , or delete access to some ...

PT-2026-119272

Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain component: Product Quality Management. The supported version that is affected is 6.2.4. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...

PT-2026-119257

Vulnerability in the Helidon product of Oracle Fusion Middleware component: helidon-cors. Supported versions that are affected are 4.0.0-4.5.5. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful attacks require human...

CVE-2026-47351

Backend users were able to insert arbitrary records and files into the TYPO3 clipboard without proper read permission checks, which allowed users to gather information about records and files they were not authorized to view. This issue affects TYPO3 CMS versions 10.4.0-13.4.30 and 14.0.0-14.3.2...