EUVD-2026-79332

Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware component: Client Bundle. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracl...

CVE-2026-83004

Oracle WebCenter Enterprise Capture (Oracle Fusion Middleware), component Client Bundle , is affected in versions 12.2.1.4.0 and 14.1.2.0.0 . This difficult-to-exploit vulnerability allows a low-privileged attacker with local logon to compromise the product, with high complexity and required user...

CVE-2026-82993

Oracle PeopleSoft Enterprise PeopleTools (component: Business Interlink ) is affected by an easily exploitable network vulnerability in supported versions 8.61–8.63 . A low-privileged attacker with network access via HTTP can exploit it without user interaction. Due to a scope change , the attack...

EUVD-2026-79321

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft component: Business Interlink. Supported versions that are affected are 8.61-8.63. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise...

EUVD-2026-79318

Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM component: Cloud Gateway. Supported versions that are affected are 17.0-26.7. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Siebel CRM Deployment. Successful...

CVE-2026-73965

CVE-2026-73965 affects the Cloud Gateway component of Oracle Siebel CRM (versions 17.0–26.7 ). A low-privileged attacker with network access via HTTP can exploit this vulnerability, though it is rated difficult to exploit (high attack complexity). Successful exploitation allows unauthorized creat...

CVE-2026-73962

Oracle Access Manager (Oracle Fusion Middleware, component: Authentication Engine ) is affected in versions 12.2.1.4.0 and 14.1.2.1.0 . A low-privileged attacker with network access via HTTPS can exploit this vulnerability to compromise the authentication engine. Due to scope change , successful ...

EUVD-2026-79522

Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware component: OIM Legacy UI. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Identit...

EUVD-2026-79518

Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware component: Authentication Engine. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle...

CVE-2026-71163

Oracle Access Manager (component: Authentication Engine ) in Oracle Fusion Middleware versions 12.2.1.4.0 and 14.1.2.1.0 is affected by a Critical vulnerability (CVSS 3.1 score 9.9 ). A low-privileged attacker with network access via HTTP can exploit it to gain unauthorized creation, deletion, mo...

EUVD-2026-79517

Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware component: Authentication Engine. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

CVE-2026-70755

CVE-2026-70755 affects the File download component of Oracle Web Applications Desktop Integrator (part of Oracle E-Business Suite), versions 12.2.3 through 12.2.15 . A low-privileged attacker with network access via HTTP can exploit this vulnerability to gain unauthorized access to critical data ...

WordPress Online Scheduling and Appointment Booking System plugin <= 28.1 - Insecure Direct Object Reference to Unauthenticated Sensitive Data Access and Message Injection via 'conversation_id' Parameter vulnerability

Insecure Direct Object Reference to Unauthenticated Sensitive Data Access and Message Injection via 'conversationid' Parameter vulnerability discovered by jtb75 - NG20 LLC in WordPress Plugin Bookly versions = 28.1...

Security Bulletin: Multiple vulnerabilities may affect IBM® SDK, Java™ Technology Edition for IBM Content Collector for SAP Applications

Summary Multiple Vulnerabilities were disclosed as part of the Oracle's August 2026 CSPU Advisory Critical Security Patch Update. Vulnerability Details CVEID:CVE-2026-61308 DESCRIPTION: Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

Security Bulletin: Multiple Vulnerabilities in IBM® Java SDK affect IBM WebSphere Application Server and WebSphere Application Server Liberty due to August 2026 CPU

Summary There are multiple vulnerabilities in the IBM® SDK, Java™ Technology Edition that is shipped with IBM WebSphere Application Server and IBM WebSphere Application Server Liberty. The CVEs listed in this document might affect some configurations of IBM WebSphere Application Server traditiona...

PT-2026-92690

Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite component: Core. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Application Object...

CVE-2026-87152: Improper Access Control

Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite component: Create Item Instance. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Installed Base...

PT-2026-92536

Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware component: Client Bundle. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise...

PT-2026-92809

Name of the Vulnerable Software and Affected Versions Oracle Business Intelligence Enterprise Edition version 8.2.0.0.0 Oracle Business Intelligence Enterprise Edition version 12.2.1.4.0 Oracle Business Intelligence Enterprise Edition version 26.01.0.0.0 Description A flaw in the Presentation...

PT-2026-92602

Name of the Vulnerable Software and Affected Versions Oracle Siebel CRM Siebel CRM Cloud Applications versions 22.3 through 26.7 Description An issue exists in the Siebel Cloud Manager component that allows an unauthenticated attacker with network access via HTTP to compromise the application...