CVE-2026-101715

Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain component: Application Server. The supported version that is affected is 9.3.6. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Agile PLM. Successful attacks o...

CVE-2026-101718

Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain component: Application Server. The supported version that is affected is 9.3.6. Difficult to exploit vulnerability allows unauthenticated attacker with network access via TLS to compromise Oracle Agile PLM. Successful attacks of...

CVE-2026-101719

Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain component: Application Server. The supported version that is affected is 9.3.6. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Agile PLM. Successful attacks...

CVE-2026-101713

Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain component: Application Server. The supported version that is affected is 9.3.6. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Agile PLM. Successful attacks...

CVE-2026-60819

A vulnerability exists in the Application Server - JRE component of Oracle PeopleSoft Enterprise PeopleTools (versions 8.61-8.63). An unauthenticated attacker with network access via SSH could exploit this difficult-to-exploit vulnerability to compromise the product, potentially gaining unauthori...

CVE-2026-60745

Oracle PeopleSoft Enterprise PeopleTools (component: Application Server - JRE ) is affected by a vulnerability in versions 8.61-8.63 . A high-privileged attacker with access to the infrastructure where PeopleSoft Enterprise PeopleTools executes can exploit this flaw to compromise the system. Succ...

CVE-2026-101829

The Oracle Mobile Application Server product of Oracle E-Business Suite (specifically the MWA Terminal Server component) is affected by a vulnerability in versions 12.2.3-12.2.15 . This issue allows an unauthenticated attacker with network access via HTTP to compromise the server. Successful expl...

CVE-2026-101828

A vulnerability exists in the MWA Terminal Server component of the Oracle Mobile Application Server product within Oracle E-Business Suite (affected versions 12.2.3-12.2.15 ). A low-privileged attacker with network access via HTTP can easily exploit this flaw to compromise the server. Successful ...

CVE-2026-101719

The Oracle Agile PLM product (Oracle Supply Chain) is affected by a vulnerability in the Application Server component, specifically in version 9.3.6 . An unauthenticated attacker with network access via HTTP can exploit this difficult-to-exploit vulnerability to compromise the system. Successful ...

CVE-2026-101718

A vulnerability exists in the Application Server component of Oracle Agile PLM (Oracle Supply Chain) version 9.3.6 . This high-complexity vulnerability allows an unauthenticated attacker with network access via TLS to compromise the product. Successful exploitation may lead to unauthorized access...

CVE-2026-101715

The Oracle Agile PLM product (Oracle Supply Chain) contains a vulnerability in the Application Server component affecting version 9.3.6 . A difficult-to-exploit vulnerability allows an unauthenticated attacker with network access via HTTP to compromise the system. Successful exploitation can lead...

CVE-2026-101713

A vulnerability exists in the Oracle Agile PLM product (Application Server component) affecting version 9.3.6 . A low-privileged attacker with network access via HTTP can exploit this issue to compromise the system, though the attack requires human interaction . Successful exploitation may result...

Oracle E-Business Suite: CVE-2026-101829: Critical Patch Update

Vulnerability in the Oracle Mobile Application Server product of Oracle E-Business Suite component: MWA Terminal Server. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

Oracle E-Business Suite: CVE-2026-101828: Critical Patch Update

Vulnerability in the Oracle Mobile Application Server product of Oracle E-Business Suite component: MWA Terminal Server. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Mobil...

PT-2026-119392

Name of the Vulnerable Software and Affected Versions Oracle Agile PLM version 9.3.6 Description An issue in the Application Server component allows an unauthenticated attacker with network access via HTTP to compromise the system. Exploitation is difficult and requires human interaction from a...

PT-2026-119391

Name of the Vulnerable Software and Affected Versions Oracle Agile PLM version 9.3.6 Description An issue exists in the Application Server component of the Oracle Agile PLM product. An unauthenticated attacker with network access via TLS can compromise the system. Successful exploitation may lead...

PT-2026-119388

Name of the Vulnerable Software and Affected Versions Oracle Agile PLM version 9.3.6 Description An issue in the Application Server component allows an unauthenticated attacker with network access via HTTP to compromise the system. Successful exploitation can lead to unauthorized access to critic...

PT-2026-119386

Name of the Vulnerable Software and Affected Versions Oracle Agile PLM version 9.3.6 Description A flaw in the Application Server component allows a low privileged attacker with network access via HTTP to compromise the system. Successful exploitation requires human interaction and can lead to...

Security Bulletin: Multiple Vulnerabilities have been identified in IBM WebSphere Application Server and WebSphere Application Server Liberty shipped with IBM WebSphere Remote Server

Summary IBM WebSphere Application Server and WebSphere Application Server Liberty are shipped with IBM WebSphere Remote Server. Information about security vulnerabilities affecting IBM WebSphere Application Server and WebSphere Application Server Liberty has been published in a security bulletin...

Security Bulletin: IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by an uncontrolled resource consumption due to js-yaml (CVE-2026-84375)

Summary There is a vulnerability in the js-yaml library that affects IBM WebSphere Application Server and WebSphere Application Server Liberty. Vulnerability Details CVEID:CVE-2026-84375 DESCRIPTION: js-yaml is a JavaScript YAML parser and dumper. From 3.0.0 until 3.15.2, 4.3.2, and 5.4.1,...