PT-2026-62883

Vulnerability in the Oracle Learning Management product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Learning...

PT-2026-63070

Name of the Vulnerable Software and Affected Versions Oracle Agile Engineering Data Management version 6.2.1 Description An issue in the Install component allows an unauthenticated attacker with network access via HTTP to compromise the system. Successful exploitation can lead to unauthorized rea...

PT-2026-62387

Name of the Vulnerable Software and Affected Versions Oracle Coherence version 12.2.1.4.0 Oracle Coherence version 14.1.1.0.0 Oracle Coherence version 14.1.2.0.0 Oracle Coherence version 15.1.1.0.0 Description A flaw in the Core component of Oracle Coherence allows a low privileged attacker with...

PT-2026-62621

Name of the Vulnerable Software and Affected Versions Oracle Enterprise Command Center Framework version V16 Description An issue exists in the Core component of the Oracle Enterprise Command Center Framework. An unauthenticated attacker with access to the physical communication segment attached ...

CVE-2026-61135: Improper Access Control

Vulnerability in the Oracle Commerce Platform product of Oracle Commerce component: Dynamo Application Framework. The supported version that is affected is 11.4.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Commerce Platfor...

PT-2026-63059

Vulnerability in the Oracle Product Lifecycle Analytics product of Oracle Supply Chain component: Installation Issues. The supported version that is affected is 3.6.1. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle Product Lifecycle...

PT-2026-62664

Name of the Vulnerable Software and Affected Versions Oracle JD Edwards EnterpriseOne Tools version 9.2.26.3 Description An issue exists within the Installation Security component. A high-privileged attacker with access to the infrastructure where the software executes can compromise the system...

PT-2026-62732

Name of the Vulnerable Software and Affected Versions Oracle Siebel CRM Siebel CRM Cloud Applications versions 22.3 through 26.5 Description A flaw in the Siebel Cloud Manager component allows an unauthenticated attacker with network access via HTTP to compromise the system. Successful exploitati...

PT-2026-62680

Name of the Vulnerable Software and Affected Versions Oracle WebCenter Content version 12.2.1.4.0 Oracle WebCenter Content version 14.1.2.0.0 Description An issue exists in the Content Server component of Oracle WebCenter Content. An unauthenticated attacker with network access via HTTP can...

PT-2026-62798

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle Supply Chain Trading Connector versions 12.2.3 through 12.2.15 Description An issue exists in the Collaboration History component of the Oracle Supply Chain Trading Connector. A low privileged attacker with netwo...

CVE-2026-61095: Improper Access Control

Vulnerability in the Oracle Communications Unified Inventory Management product of Oracle Communications component: Security. Supported versions that are affected are 7.5.0, 7.5.1, 7.6.0, 7.7.0, 7.8.0 and 8.0.1. Easily exploitable vulnerability allows low privileged attacker with network access v...

CVE-2026-61244: Improper Access Control

Vulnerability in the PeopleSoft Enterprise FIN Manufacturing Argentina product of Oracle PeopleSoft component: Manufacturing. The supported version that is affected is 9.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft...

CVE-2026-60963: Improper Access Control

Vulnerability in the Oracle Treasury product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Treasury. Successful...

PT-2026-62719

Vulnerability in the Oracle U.S. Federal Financials product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle U.S...

PT-2026-62820

Vulnerability in the Oracle Customer Support product of Oracle E-Business Suite component: Update Service Request. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Customer...

CVE-2026-61089: Improper Access Control

Vulnerability in the PeopleSoft Enterprise SCM Inventory product of Oracle PeopleSoft component: Security. The supported version that is affected is 9.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise SCM Inventory...

CVE-2026-61174: Improper Access Control

Vulnerability in the Oracle Product Lifecycle Analytics product of Oracle Supply Chain component: Installation Issues. The supported version that is affected is 3.6.1. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle Product Lifecycle...

PT-2026-62247

Name of the Vulnerable Software and Affected Versions Oracle Cost Management version V16 Description A flaw in the Enterprise Command Center component allows a high privileged attacker with network access via HTTP to compromise the system. This can lead to unauthorized access, creation, deletion,...

CVE-2026-15804: Improper Neutralization of Special Elements used in an SQL Command

The HCM developed by MetaGuru has a SQL Injection vulnerability. Authenticated remote attackers can inject SQL commands via specific parameters, thereby compromising the confidentiality, integrity, and availability of database data...

The vulnerability in the cacti_unserialize() function of the Cacti monitoring software’s managers.php file allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the cactiunserialize function in the managers.php file of the Cacti monitoring software relates to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of...