CVE-2026-60723: Improper Access Control

Vulnerability in the Oracle Data Integrator product of Oracle Fusion Middleware component: Market Place. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Data Integrato...

PT-2026-62703

Name of the Vulnerable Software and Affected Versions Oracle PeopleSoft PeopleSoft Enterprise HCM Human Resources version 9.2 Description A flaw in the Core component allows an unauthenticated attacker with network access via TCP to compromise the system. Successful exploitation can lead to...

PT-2026-62702

Name of the Vulnerable Software and Affected Versions Oracle PeopleSoft PeopleSoft Enterprise HCM Human Resources version 9.2 Description A security issue in the Security component allows a low privileged attacker with network access via Oracle Net to compromise the system. Successful exploitatio...

PT-2026-62984

Name of the Vulnerable Software and Affected Versions MySQL Server versions 8.4.0 through 8.4.10 MySQL Server versions 9.7.0 through 9.7.1 MySQL Cluster versions 8.0.0 through 8.0.47 MySQL Cluster versions 8.4.0 through 8.4.10 MySQL Cluster versions 9.7.0 through 9.7.1 Description An issue exists...

PT-2026-62705

Name of the Vulnerable Software and Affected Versions Oracle PeopleSoft Enterprise HCM Global Payroll Mexico version 9.2 Description A flaw in the Global Payroll for Mexico component allows a low privileged attacker with network access via HTTP to compromise the system. Successful exploitation ca...

PT-2026-63172

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle Contracts Integration versions 12.2.3 through 12.2.15 Description An issue in the Internal Operations component allows an unauthenticated attacker with network access via HTTP to compromise the system. Exploitati...

PT-2026-62917

Vulnerability in the Oracle Time and Labor product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Time and Labo...

PT-2026-62408

Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware component: Authentication Engine. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

PT-2026-62644

Name of the Vulnerable Software and Affected Versions Oracle PeopleSoft Enterprise CC Common Application Objects version 9.2 Description An issue in the Common Application Objects component allows an unauthenticated attacker with network access via HTTP to compromise the system. Successful...

PT-2026-62948

Name of the Vulnerable Software and Affected Versions Oracle PeopleSoft Enterprise SCM Order Management version 9.2 Description A security flaw in the Security component allows an unauthenticated attacker with network access via HTTP to compromise the system. Successful exploitation can lead to...

PT-2026-62506

Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware component: OUD Core. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via LDAP to compromise Oracle Unified...

PT-2026-62825

Vulnerability in the Oracle Lease and Finance Management product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

PT-2026-62750

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle E-Business Intelligence versions 12.2.3 through 12.2.15 Description A flaw in the Definition component allows a low privileged attacker with network access via HTTP to compromise the system. Successful exploitati...

PT-2026-62838

Name of the Vulnerable Software and Affected Versions Oracle Trade Management versions 12.2.3 through 12.2.15 Description A flaw in the Claim LOV component allows a low privileged attacker with network access via HTTP to compromise the system. Successful exploitation can lead to unauthorized...

PT-2026-62834

Name of the Vulnerable Software and Affected Versions Oracle Advanced Pricing versions 12.2.14 through 12.2.15 Description An issue exists in the Pricing Installation component of Oracle Advanced Pricing within Oracle E-Business Suite. A low privileged attacker with network access via HTTP can...

PT-2026-62404

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle Applications Manager versions 12.2.3 through 12.2.15 Description An issue exists in the Oracle Diagnostics Interfaces component of the Oracle Applications Manager. An unauthenticated attacker with network access...

PT-2026-62563

Name of the Vulnerable Software and Affected Versions Oracle Advanced Pricing versions 12.2.3 through 12.2.15 Description An issue exists in the Price List component of the Oracle Advanced Pricing product within Oracle E-Business Suite. An unauthenticated attacker with network access via HTTP can...

PT-2026-63196

Vulnerability in the Oracle Contracts Integration product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Contract...

PT-2026-62349

Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via TLS to compromise Oracle...

CVE-2026-60533: Improper Access Control

Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware component: Generic Unix Connector. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Difficult to exploit vulnerability allows unauthenticated attacker with access to the physical...