PT-2026-62812

Name of the Vulnerable Software and Affected Versions Oracle Solaris version 11.4 Description A flaw in the Utility component allows a low-privileged attacker with network access via RAD Remote Administration Daemon to compromise the system. Successful exploitation can lead to unauthorized access...

PT-2026-63006

Vulnerability in the Oracle HRMS UK product of Oracle E-Business Suite component: UK Payroll. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle HRMS UK. Successful attacks of...

PT-2026-62432

Name of the Vulnerable Software and Affected Versions Oracle Project Manufacturing version V16 Description A flaw exists in the PJM Command Center component of the Oracle Project Manufacturing product within Oracle E-Business Suite. A high-privileged attacker with access to the infrastructure whe...

PT-2026-62833

Name of the Vulnerable Software and Affected Versions Oracle Advanced Pricing versions 12.2.3 through 12.2.15 Description A flaw in the Pricing Installation component allows a low privileged attacker with network access via HTTP to compromise the system. Successful exploitation can lead to...

PT-2026-62606

Name of the Vulnerable Software and Affected Versions Oracle WebCenter Portal version 12.2.1.4.0 Oracle WebCenter Portal version 14.1.2.0.0 Description An issue exists in the Runtime Tools component of Oracle WebCenter Portal. A low privileged attacker with network access via HTTP can compromise...

PT-2026-63092

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite component: Payroll versions 12.2.3 through 12.2.15 Description A flaw in the Oracle Payroll product allows a low privileged attacker with network access via HTTP to compromise the system. This can lead to unauthorized...

PT-2026-63089

Vulnerability in the PeopleSoft Enterprise SCM Manufacturing product of Oracle PeopleSoft component: Security. The supported version that is affected is 9.2. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTPS to compromise PeopleSoft Enterprise SCM...

PT-2026-62854

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle Installed Base versions 12.2.3 through 12.2.15 Description A flaw in the Create Item Instance component allows a low privileged attacker with network access via HTTP to compromise the system. Successful...

PT-2026-62165

Name of the Vulnerable Software and Affected Versions Oracle Enterprise Manager Base Platform version 24.1 Description A flaw in the Security Framework component allows a low privileged attacker with network access via HTTPS to compromise the platform. The attack requires human interaction from a...

PT-2026-63127

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle Scripting versions 12.2.3 through 12.2.15 Description A flaw in the Scripting Admin component allows a low privileged attacker with network access via HTTP to compromise Oracle Scripting. This can lead to...

PT-2026-62733

Vulnerability in the Oracle Process Manufacturing Inventory product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

PT-2026-62433

Name of the Vulnerable Software and Affected Versions Oracle Project Manufacturing version V16 Description A flaw in the PJM Command Center component allows a low-privileged attacker with access to the infrastructure where the software executes to compromise the system. Successful exploitation ca...

CVE-2026-60606: Improper Access Control

Vulnerability in the PeopleSoft Enterprise CC Common Application Objects product of Oracle PeopleSoft component: Common Application Objects. The supported version that is affected is 9.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

PT-2026-63196

Vulnerability in the Oracle Contracts Integration product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Contract...

PT-2026-62855

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle Installed Base versions 12.2.4 through 12.2.15 Description An issue exists in the Create Item Instance component of the Oracle Installed Base product. A low privileged attacker with network access via HTTP can...

PT-2026-62196

Name of the Vulnerable Software and Affected Versions Oracle Java SE version 8u491 Description An issue exists in the JavaFX component of Oracle Java SE. An unauthenticated attacker with network access via multiple protocols can compromise the system, provided there is human interaction from a...

PT-2026-62728

Name of the Vulnerable Software and Affected Versions Oracle Universal Work Queue versions 12.2.3 through 12.2.15 Description An issue in the UWQ Server component allows an unauthenticated attacker with network access via HTTP to compromise the system. Exploitation requires human interaction from...

PT-2026-62902

Name of the Vulnerable Software and Affected Versions Oracle Project Portfolio Analysis versions 12.2.3 through 12.2.15 Description An issue exists in the Internal Operations component of the Oracle Project Portfolio Analysis product within Oracle E-Business Suite. A low privileged attacker with...

PT-2026-62431

Name of the Vulnerable Software and Affected Versions Oracle Project Manufacturing version V16 Description An issue exists in the PJM Command Center component of the Oracle Project Manufacturing product within Oracle E-Business Suite. A high-privileged attacker with access to the infrastructure...

dotnet: .NET: Local tampering via improper link resolution

A flaw was found in .NET. This vulnerability, stemming from improper link resolution before file access, allows an authorized local attacker to perform tampering. This could lead to unauthorized modification of data or system files...