PT-2026-77618

Name of the Vulnerable Software and Affected Versions Oracle Siebel CRM Integration versions 25.12 through 26.6 Description An issue exists in the Open Integration component of Oracle Siebel CRM. An unauthenticated attacker with network access via HTTP can compromise the system, provided there is...

PT-2026-77226

Name of the Vulnerable Software and Affected Versions Submariner operator affected versions not specified Description A flaw in the Submariner operator allows a long-lived broker service account SA bearer token to be exposed within the Submariner Custom Resource CR specification. An attacker with...

PT-2026-78040

Name of the Vulnerable Software and Affected Versions Oracle Product Lifecycle Analytics version 3.6.1 Description An issue in the Installation Issues component allows a high privileged attacker with network access via Oracle Net to compromise the system. This flaw can lead to unauthorized access...

PT-2026-77404

Name of the Vulnerable Software and Affected Versions Oracle PeopleSoft PeopleSoft Enterprise PeopleTools versions 8.61 through 8.63 Description A flaw in the Install and Packaging component allows an unauthenticated attacker with network access via HTTP to compromise the system. Successful...

PT-2026-77586

Name of the Vulnerable Software and Affected Versions Oracle Hyperion Infrastructure Technology version 11.2.25.0.000 Description An issue exists in the Installation and Configuration component that allows an unauthenticated attacker with access to the physical communication segment attached to t...

PT-2026-78237

Name of the Vulnerable Software and Affected Versions Streambert versions prior to 2.6.0 Description The perform-scheduled-backup IPC handler in src/ipc/storage.js fails to verify if the settings.path provided by a renderer-supplied object is within an authorized backup location. This allows a...

PT-2026-78145

Name of the Vulnerable Software and Affected Versions Oracle Helidon version 3.2.18 Description An issue in the Imperative Web Server component of Oracle Fusion Middleware allows an unauthenticated attacker with network access via HTTP to compromise the system. This can lead to unauthorized acces...

PT-2026-77396

Name of the Vulnerable Software and Affected Versions Oracle PeopleSoft PeopleSoft Enterprise PeopleTools versions 8.61 through 8.63 Description A flaw in the Business Interlink component allows an unauthenticated attacker with network access via HTTP to compromise the system. Successful...

PT-2026-77585

Name of the Vulnerable Software and Affected Versions Oracle Hyperion Infrastructure Technology version 11.2.25.0.000 Description An issue exists in the Installation and Configuration component of Oracle Hyperion Infrastructure Technology. An unauthenticated attacker with network access via HTTP...

PT-2026-78239

Name of the Vulnerable Software and Affected Versions Streambert versions prior to 2.6.0 Description Streambert is a cross-platform Electron Desktop App used for streaming and downloading video content. The open-external IPC handler in src/ipc/downloads.js passes a renderer-supplied url directly ...

PT-2026-77640

Name of the Vulnerable Software and Affected Versions Oracle Reports Developer version 12.2.1.19.0 Description An issue exists in the Security and Authentication component of Oracle Reports Developer. An unauthenticated attacker with network access via HTTP can exploit this flaw to compromise the...

PT-2026-77525

Name of the Vulnerable Software and Affected Versions Oracle Siebel CRM Siebel CRM Cloud Applications versions 22.3 through 26.6 Description An issue exists in the Siebel Cloud Manager component of Oracle Siebel CRM Cloud Applications. An unauthenticated attacker with network access via HTTP can...

PT-2026-77857

Name of the Vulnerable Software and Affected Versions Oracle Application Testing Suite version 13.3.0.1 Description A flaw exists that allows a low-privileged attacker with Load Testing for Web Apps privileges and network access via HTTPS to compromise the system. Successful exploitation can lead...

PT-2026-77436

Name of the Vulnerable Software and Affected Versions Oracle WebCenter Enterprise Capture version 12.2.1.4.0 Oracle WebCenter Enterprise Capture version 14.1.2.0.0 Description An issue exists in the Client Bundle component of Oracle WebCenter Enterprise Capture. An unauthenticated attacker with...

PT-2026-77812

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion component: Security. The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hyperion Financial...

PT-2026-77787

Vulnerability in the Oracle Yard Management product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Yard Management...

PT-2026-77394

Name of the Vulnerable Software and Affected Versions Oracle Siebel CRM Siebel Apps - Marketing versions 17.0 through 26.6 Description A flaw exists in the Email Marketing component of the Siebel Apps - Marketing product. A low-privileged attacker with access to the infrastructure where the...

PT-2026-77472

Name of the Vulnerable Software and Affected Versions Oracle WebCenter Sites version 12.2.1.4.0 Oracle WebCenter Sites version 14.1.2.0.0 Description A flaw in the Oracle WebCenter Sites component of Oracle Fusion Middleware allows a low privileged attacker with network access via HTTP to...

PT-2026-78235

Name of the Vulnerable Software and Affected Versions Streambert versions prior to 2.5.0 Description Streambert is a cross-platform Electron Desktop App used for streaming and downloading video content. The downloadSubtitleFile function in src/ipc/downloads.js, accessed via the run-download IPC...

PT-2026-77635

Name of the Vulnerable Software and Affected Versions Oracle Reports Developer version 12.2.1.19.0 Description An issue exists in the Security and Authentication component of Oracle Reports Developer. An unauthenticated attacker with network access via TCP can exploit this flaw to compromise the...