CVE-2026-101519

The Oracle EDI Gateway product within Oracle E-Business Suite (versions 12.2.3-12.2.15 ) is susceptible to a high-severity vulnerability in the All Miscellaneous EDI Issues component. A high-privileged attacker with network access via HTTP can exploit this issue to compromise the gateway, potenti...

CVE-2026-101511

A vulnerability exists in the Metadata Plugin component of the Oracle Enterprise Manager Base Platform (Oracle Enterprise Manager) affecting versions 13.5 and 24.1 . A low-privileged attacker with network access via HTTP can exploit this flaw to compromise the platform, potentially leading to una...

CVE-2026-101510

The Oracle Net Services component of Oracle Database Server is vulnerable in versions 19.3-19.32 , 21.3-21.23 , and 23.4.0-23.26.3 . A high-privileged attacker with local access can exploit this vulnerability to compromise Oracle Net Services, potentially resulting in a hang or a frequently repea...

CVE-2026-101500

A vulnerability exists in the Oracle Global Lifecycle Management OPatchAuto product (component: Database extensions ), specifically affecting supported versions 12.2.0.1.16-12.2.0.1.52 . A high-privileged attacker with access to the infrastructure where OPatchAuto executes can compromise the prod...

CVE-2026-101466

The Oracle EDI Gateway product within Oracle E-Business Suite (component: All Miscellaneous EDI Issues ) is affected by a vulnerability in versions 12.2.3-12.2.15 . A high privileged attacker with network access via HTTP can easily exploit this flaw to compromise the Oracle EDI Gateway, potential...

CVE-2026-101459

The Siebel CRM Deployment product of Oracle Siebel CRM (specifically the Server Infrastructure component) is affected by a vulnerability in versions 17.0-26.9 . A low-privileged attacker with network access via HTTP can exploit this flaw to compromise the deployment. Successful exploitation may r...

CVE-2026-101442

A vulnerability exists in the Siebel Cloud Manager component of Oracle Siebel CRM Cloud Applications (affected versions 22.3-26.9 ). A low-privileged attacker with network access via HTTP can exploit this difficult to exploit vulnerability to achieve unauthorized read access to a subset of access...

CVE-2026-101437

A vulnerability exists in the Siebel Cloud Manager component of Oracle Siebel CRM Cloud Applications (affected versions 22.3-26.9 ). A high-privileged attacker with network access via HTTP can exploit this difficult-to-exploit flaw to compromise the applications, potentially impacting additional ...

CVE-2026-101426

Oracle PeopleSoft PeopleTools (component: SQR ) versions 8.61-8.63 are affected by a difficult-to-exploit vulnerability. A high-privileged attacker with logon access to the infrastructure can compromise the software, provided they can elicit human interaction from another person. This vulnerabili...

CVE-2026-101397

A vulnerability exists in the Marketing component of Oracle Siebel CRM (Siebel Apps - Marketing) affecting supported versions 17.0-26.9 . A high-privileged attacker with network access via HTTP can exploit this difficult-to-exploit vulnerability to compromise the product, potentially resulting in...

CVE-2026-101377

A vulnerability exists in Oracle REST Data Services (component: Database Actions ) affecting supported versions 24.2.0-26.1.0 . A high-privileged attacker with network access via HTTP can exploit this issue to compromise the service. Successful exploitation may lead to a partial denial of service...

CVE-2026-101366

A vulnerability exists in the Oracle REST Data Services (component: ADP ) affecting supported versions 24.2.0-26.1.0 . A low-privileged attacker with network access via HTTP can easily exploit this flaw to compromise the service. Successful exploitation results in unauthorized read access to a su...

Use of Incorrectly-Resolved Name or Reference

Overview Affected versions of this package are vulnerable to Use of Incorrectly-Resolved Name or Reference via the lock-file open logic in unix.py and related backends, where acquiring a lock on a file that does not yet exist creates it with a permissive mode e.g. 0o666 rather than preserving the...

PT-2026-119324

Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Mobile...

PT-2026-120034

Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain component: Product Quality Management. The supported version that is affected is 6.2.4. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...

PT-2026-119184

Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware component: Connector Framework. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

Oracle MySQL Vulnerability CVE-2026-101622

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL component: InnoDB. Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and 26.7.0-26.7.1. Easily exploitable vulnerability...

PT-2026-119196

Vulnerability in the Oracle Net Services component of Oracle Database Server. Supported versions that are affected are 19.3-19.32, 21.3-21.23 and 23.4.0-23.26.3. Easily exploitable vulnerability allows high privileged attacker having None privilege with logon to the infrastructure where Oracle Ne...

Oracle E-Business Suite: CVE-2026-83388: Critical Patch Update

Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite component: Diagnostics. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Applications...

PT-2026-119085

Name of the Vulnerable Software and Affected Versions Oracle Siebel CRM Siebel Apps - Marketing versions 17.0 through 26.9 Description A flaw in the Marketing component allows a high privileged attacker with network access via HTTP to compromise the system. Successful exploitation can lead to...