CVE-2026-60567: Improper Privilege Management

Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware component: OIM Legacy UI. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Identit...

CVE-2026-60533: Improper Access Control

Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware component: Generic Unix Connector. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Difficult to exploit vulnerability allows unauthenticated attacker with access to the physical...

CVE-2026-60364: Improper Access Control

Vulnerability in the Oracle Weblogic Server Proxy Plug-in product of Oracle Fusion Middleware component: WebLogic Server Proxy Plug-In for Third-Party Web Servers. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker...

CVE-2026-47060: Improper Access Control

Vulnerability in the JDBC component of Oracle Database Server. Supported versions that are affected are 19.3-19.31, 21.3-21.22 and 23.4.0-23.26.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via Oracle Net to compromise JDBC. Successful attacks require hum...

CVE-2026-46943: Improper Access Control

Vulnerability in the Oracle Retail EFTLink product of Oracle Retail Applications component: Core/Plugin. Supported versions that are affected are 21.0.0-25.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle Retail EFTLink...

PT-2026-62916

Vulnerability in the Oracle Time and Labor product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Time and Labor...

PT-2026-63145

Vulnerability in the Oracle Common Applications Calendar product of Oracle E-Business Suite component: Calendar Synchronizations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise...

PT-2026-63092

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite component: Payroll versions 12.2.3 through 12.2.15 Description A flaw in the Oracle Payroll product allows a low privileged attacker with network access via HTTP to compromise the system. This can lead to unauthorized...

PT-2026-62624

Name of the Vulnerable Software and Affected Versions Oracle Enterprise Command Center Framework version V16 Description A flaw in the Core component allows a low privileged attacker with network access via HTTP to compromise the system. Successful exploitation can lead to unauthorized creation,...

PT-2026-62932

Vulnerability in the Oracle Loans product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Loans. Successful attacks...

PT-2026-63009

Vulnerability in the Oracle HRMS UK product of Oracle E-Business Suite component: UK Payroll. Supported versions that are affected are 12.2.9-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle HRMS UK. Successful attacks of...

PT-2026-63186

Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite component: Create Item Instance. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Installed Base...

PT-2026-63208

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle Time and Labor versions 12.2.3 through 12.2.15 Description An issue exists in the Internal Operations component of the Oracle Time and Labor product. An unauthenticated attacker with network access via HTTP can...

PT-2026-62206

Name of the Vulnerable Software and Affected Versions Oracle Database Server versions 23.4.0 through 23.26.2 Description A flaw in the RDBMS component allows an unauthenticated attacker with network access via Oracle Net to compromise the system. This can lead to a complete Denial of Service DOS ...

PT-2026-62167

Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager component: UI Framework. Supported versions that are affected are 13.5 and 24.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle...

PT-2026-62948

Name of the Vulnerable Software and Affected Versions Oracle PeopleSoft Enterprise SCM Order Management version 9.2 Description A security flaw in the Security component allows an unauthenticated attacker with network access via HTTP to compromise the system. Successful exploitation can lead to...

PT-2026-62695

Name of the Vulnerable Software and Affected Versions Oracle WebCenter Content version 12.2.1.4.0 Oracle WebCenter Content version 14.1.2.0.0 Description An issue exists in the Content Server component of Oracle WebCenter Content. A low privileged attacker with network access via HTTP can...

PT-2026-62366

Name of the Vulnerable Software and Affected Versions Oracle Coherence versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0 Description An issue in the Core component of Oracle Coherence allows an unauthenticated attacker with network access via HTTP to compromise the system. Successful...

PT-2026-62991

Name of the Vulnerable Software and Affected Versions Oracle PeopleSoft PeopleSoft Enterprise CS Campus Community version 9.2.38 Description A security flaw exists in the Security component that allows an unauthenticated attacker with access to the physical communication segment attached to the...

PT-2026-62834

Name of the Vulnerable Software and Affected Versions Oracle Advanced Pricing versions 12.2.14 through 12.2.15 Description An issue exists in the Pricing Installation component of Oracle Advanced Pricing within Oracle E-Business Suite. A low privileged attacker with network access via HTTP can...