CVE-2026-62468: Improper Access Control

Vulnerability in the Oracle Human Resources product of Oracle E-Business Suite component: Enterprise Command Center. Supported versions that are affected are 12.2.14-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Human...

PT-2026-62736

Vulnerability in the Oracle EDI Gateway product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle EDI Gateway...

PT-2026-63152

Name of the Vulnerable Software and Affected Versions Oracle Product Hub versions 12.2.3 through 12.2.15 Description An issue in the Internal Operations component allows a low privileged attacker with network access via HTTP to compromise the system. Successful exploitation can lead to unauthoriz...

PT-2026-63074

Name of the Vulnerable Software and Affected Versions Oracle Agile Engineering Data Management version 6.2.1 Description A flaw in the Install component allows a low privileged attacker with network access via HTTP to compromise the system. Exploitation is difficult and requires human interaction...

PT-2026-62728

Name of the Vulnerable Software and Affected Versions Oracle Universal Work Queue versions 12.2.3 through 12.2.15 Description An issue in the UWQ Server component allows an unauthenticated attacker with network access via HTTP to compromise the system. Exploitation requires human interaction from...

CVE-2026-60593: Improper Access Control

Vulnerability in the PeopleSoft Enterprise FIN Staffing Front Office product of Oracle PeopleSoft component: Staffing Front Office. The supported version that is affected is 9.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft...

PT-2026-62510

Name of the Vulnerable Software and Affected Versions Oracle Transportation Management version 6.5.3 Description A flaw in the Integration component of the Oracle Transportation Management product allows a high privileged attacker with network access via HTTP to compromise the system. Successful...

PT-2026-62196

Name of the Vulnerable Software and Affected Versions Oracle Java SE version 8u491 Description An issue exists in the JavaFX component of Oracle Java SE. An unauthenticated attacker with network access via multiple protocols can compromise the system, provided there is human interaction from a...

PT-2026-62908

Vulnerability in the Oracle Universal Work Queue product of Oracle E-Business Suite component: Non-Media Integration issues. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

PT-2026-62433

Name of the Vulnerable Software and Affected Versions Oracle Project Manufacturing version V16 Description A flaw in the PJM Command Center component allows a low-privileged attacker with access to the infrastructure where the software executes to compromise the system. Successful exploitation ca...

PT-2026-62094

Name of the Vulnerable Software and Affected Versions Kibana affected versions not specified Description Improper Access Control allows a low-privileged authenticated user with read-only Security Solution access to perform write operations on Entity Analytics Watchlist configuration, which should...

PT-2026-62653

Name of the Vulnerable Software and Affected Versions Oracle PeopleSoft PeopleSoft Enterprise CS Campus Community version 9.2.38 Description A security flaw in the Security component allows an unauthenticated attacker with network access via HTTP to compromise the system. Successful exploitation...

PT-2026-62800

Vulnerability in the Oracle iStore product of Oracle E-Business Suite component: Shopping Cart. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle iStore. Successful attacks...

PT-2026-62947

Name of the Vulnerable Software and Affected Versions Oracle PeopleSoft Enterprise FIN eSettlements version 9.2 Description An issue in the eSettlements component allows an unauthenticated attacker with network access via HTTP to compromise the system. Successful exploitation can lead to...

PT-2026-62752

Name of the Vulnerable Software and Affected Versions Oracle Field Service versions 12.2.3 through 12.2.15 Description A flaw in the Internal Operations component allows a low privileged attacker with network access via HTTP to compromise the system. This can lead to unauthorized access to critic...

PT-2026-62735

Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM component: Siebel Cloud Manager. Supported versions that are affected are 22.3-26.5. Difficult to exploit vulnerability allows unauthenticated attacker with access to the physical communication segment attached to the...

PT-2026-62655

Name of the Vulnerable Software and Affected Versions Oracle PeopleSoft PeopleSoft Enterprise CS Campus Community version 9.2.38 Description A security flaw in the Security component allows an unauthenticated attacker with network access via HTTP to compromise the system. Successful exploitation...

PT-2026-63147

Vulnerability in the Oracle Process Manufacturing Logistics product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

PT-2026-62971

Vulnerability in the Oracle Performance Management product of Oracle E-Business Suite component: Appraisals. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Performance...

PT-2026-62828

Vulnerability in the Oracle Contracts Integration product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Contracts...