CVE-2026-101715

Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain component: Application Server. The supported version that is affected is 9.3.6. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Agile PLM. Successful attacks o...

CVE-2026-101718

Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain component: Application Server. The supported version that is affected is 9.3.6. Difficult to exploit vulnerability allows unauthenticated attacker with network access via TLS to compromise Oracle Agile PLM. Successful attacks of...

CVE-2026-101719

Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain component: Application Server. The supported version that is affected is 9.3.6. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Agile PLM. Successful attacks...

CVE-2026-101713

Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain component: Application Server. The supported version that is affected is 9.3.6. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Agile PLM. Successful attacks...

CVE-2026-60819

A vulnerability exists in the Application Server - JRE component of Oracle PeopleSoft Enterprise PeopleTools (versions 8.61-8.63). An unauthenticated attacker with network access via SSH could exploit this difficult-to-exploit vulnerability to compromise the product, potentially gaining unauthori...

CVE-2026-60745

Oracle PeopleSoft Enterprise PeopleTools (component: Application Server - JRE ) is affected by a vulnerability in versions 8.61-8.63 . A high-privileged attacker with access to the infrastructure where PeopleSoft Enterprise PeopleTools executes can exploit this flaw to compromise the system. Succ...

CVE-2026-101829

The Oracle Mobile Application Server product of Oracle E-Business Suite (specifically the MWA Terminal Server component) is affected by a vulnerability in versions 12.2.3-12.2.15 . This issue allows an unauthenticated attacker with network access via HTTP to compromise the server. Successful expl...

CVE-2026-101828

A vulnerability exists in the MWA Terminal Server component of the Oracle Mobile Application Server product within Oracle E-Business Suite (affected versions 12.2.3-12.2.15 ). A low-privileged attacker with network access via HTTP can easily exploit this flaw to compromise the server. Successful ...

CVE-2026-101719

The Oracle Agile PLM product (Oracle Supply Chain) is affected by a vulnerability in the Application Server component, specifically in version 9.3.6 . An unauthenticated attacker with network access via HTTP can exploit this difficult-to-exploit vulnerability to compromise the system. Successful ...

CVE-2026-101718

A vulnerability exists in the Application Server component of Oracle Agile PLM (Oracle Supply Chain) version 9.3.6 . This high-complexity vulnerability allows an unauthenticated attacker with network access via TLS to compromise the product. Successful exploitation may lead to unauthorized access...

CVE-2026-101715

The Oracle Agile PLM product (Oracle Supply Chain) contains a vulnerability in the Application Server component affecting version 9.3.6 . A difficult-to-exploit vulnerability allows an unauthenticated attacker with network access via HTTP to compromise the system. Successful exploitation can lead...

CVE-2026-101713

A vulnerability exists in the Oracle Agile PLM product (Application Server component) affecting version 9.3.6 . A low-privileged attacker with network access via HTTP can exploit this issue to compromise the system, though the attack requires human interaction . Successful exploitation may result...

Oracle E-Business Suite: CVE-2026-101829: Critical Patch Update

Vulnerability in the Oracle Mobile Application Server product of Oracle E-Business Suite component: MWA Terminal Server. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

Oracle E-Business Suite: CVE-2026-101828: Critical Patch Update

Vulnerability in the Oracle Mobile Application Server product of Oracle E-Business Suite component: MWA Terminal Server. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Mobil...

Security Bulletin: Multiple Vulnerabilities have been identified in IBM WebSphere Application Server and WebSphere Application Server Liberty shipped with IBM WebSphere Remote Server

Summary IBM WebSphere Application Server and WebSphere Application Server Liberty are shipped with IBM WebSphere Remote Server. Information about security vulnerabilities affecting IBM WebSphere Application Server and WebSphere Application Server Liberty has been published in a security bulletin...

Security Bulletin: IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by an uncontrolled resource consumption due to js-yaml (CVE-2026-84375)

Summary There is a vulnerability in the js-yaml library that affects IBM WebSphere Application Server and WebSphere Application Server Liberty. Vulnerability Details CVEID:CVE-2026-84375 DESCRIPTION: js-yaml is a JavaScript YAML parser and dumper. From 3.0.0 until 3.15.2, 4.3.2, and 5.4.1,...

Security Bulletin: IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by a missing cryptographic step (CVE-2026-101294)

Summary IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by a missing cryptographic step vulnerability. Vulnerability Details CVEID:CVE-2026-101294 DESCRIPTION: IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.10 and IBM WebSphere Applicatio...

Security Bulletin: IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by a deserialization of untrusted data (CVE-2026-105442)

Summary IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by a deserialization of untrusted data vulnerability. Vulnerability Details CVEID:CVE-2026-105442 DESCRIPTION: IBM WebSphere Application Server 8.5, and 9.0 and IBM WebSphere Application Server - Libert...

Security Bulletin: Multiple vulnerabilities have been identified in WebSphere Application Server shipped with WebSphere Service Registry and Repository

Summary WebSphere Application Server is shipped as a component of WebSphere Service Registry and Repository. Information about multiple vulnerabilities affecting WebSphere Application Server have been published in security bulletins. Vulnerability Details Refer to the security bulletins listed in...

Security Bulletin: IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by multiple vulnerabilities due to Apache MyFace (CVE-2026-68536, CVE-2026-76646)

Summary There are vulnerabilities in the Apache MyFace library that affects IBM WebSphere Application Server and WebSphere Application Server Liberty when jsf-2.0, jsf-2.2, jsf-2.3, faces-3.0, faces-4.0 or faces-4.1 is enabled. Vulnerability Details CVEID:CVE-2026-76646 DESCRIPTION: A remote...