PT-2026-63101

Name of the Vulnerable Software and Affected Versions Oracle PeopleSoft PeopleSoft Enterprise FIN Common Objects Brazil version 9.1 Description An issue exists in the Common Objects component that allows an unauthenticated attacker with network access via HTTP to compromise the system. Successful...

PT-2026-62999

Name of the Vulnerable Software and Affected Versions Oracle Application Object Library versions 12.2.3 through 12.2.15 Description A flaw in the Core component of the Oracle Application Object Library allows a low-privileged attacker with access to the execution infrastructure to compromise the...

PT-2026-63056

Name of the Vulnerable Software and Affected Versions Oracle Agile PLM version 9.3.6 Description An issue in the Security component of the Oracle Agile PLM product allows an unauthenticated attacker with network access via HTTP to compromise the system. Successful exploitation can lead to...

PT-2026-62213

Name of the Vulnerable Software and Affected Versions Oracle VM VirtualBox version 7.2.12 Description A flaw in the Core component allows a low-privileged attacker with access to the infrastructure where the software executes to compromise the system. Successful exploitation requires human...

PT-2026-63233

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle HRMS Norway versions 12.2.3 through 12.2.15 Description An issue exists in the Internal Operations component of Oracle HRMS Norway. A low privileged attacker with network access via HTTP can exploit this flaw to...

PT-2026-62499

Name of the Vulnerable Software and Affected Versions Oracle Unified Directory versions 12.2.1.4.0 Oracle Unified Directory versions 14.1.2.1.0 Description A flaw in the OUD Core component of Oracle Fusion Middleware allows a low privileged attacker with network access via LDAP to compromise the...

PT-2026-62658

Name of the Vulnerable Software and Affected Versions Oracle JD Edwards EnterpriseOne Configurator version 9.2 Description A flaw in the Configuration Management component allows a low-privileged attacker with network access via HTTP to compromise the system. Successful exploitation can lead to a...

CVE-2026-60788: Improper Access Control

Vulnerability in the Oracle Sales Offline product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Sales Offline...

CVE-2026-61220: Improper Access Control

Vulnerability in the Oracle Banking Origination product of Oracle Financial Services Applications component: Configuration. The supported version that is affected is 14.5.0.16.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

CVE-2026-60238: Improper Access Control

Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Orac...

PT-2026-62967

Vulnerability in Oracle GoldenGate component: Libraries. Supported versions that are affected are 19.1.0.0.0-19.30.0.0, 21.3-21.21 and 23.4-23.26.2. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle GoldenGate executes to compromise...

PT-2026-62704

Name of the Vulnerable Software and Affected Versions Oracle PeopleSoft Enterprise HCM Human Resources version 9.2 Description An issue exists in the French Public Sector Specific component that allows an unauthenticated attacker with network access via HTTP to compromise the system. Successful...

PT-2026-62878

Name of the Vulnerable Software and Affected Versions Oracle Project Contracts versions 12.2.3 through 12.2.15 Description A flaw in the Internal Operations component allows a low privileged attacker with network access via HTTP to compromise the system. Successful exploitation can result in...

PT-2026-63115

Vulnerability in the Oracle Learning Management product of Oracle E-Business Suite component: Import And Export. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Learning...

PT-2026-63011

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Configure to Order versions 12.2.3 through 12.2.15 Description A flaw in the Supply to Order Workbench component allows a low privileged attacker with network access via HTTP to compromise the system. This issue can lea...

PT-2026-62990

Name of the Vulnerable Software and Affected Versions Oracle Banking Trade Finance versions 14.6.0 through 14.8.0 Description An issue in the Infrastructure component allows a low privileged attacker with network access via HTTP to compromise the system. Successful exploitation can lead to...

CVE-2026-60336: Improper Access Control

Vulnerability in the Oracle Project Manufacturing product of Oracle E-Business Suite component: PJM Command Center. The supported version that is affected is V16. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Project Manufacturing...

CVE-2026-60725: Improper Access Control

Vulnerability in the MySQL Router product of Oracle MySQL component: Router: General. Supported versions that are affected are 8.4.0-8.4.10 and 9.7.0-9.7.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise MySQL Router. Successful attac...

PT-2026-62444

Name of the Vulnerable Software and Affected Versions Oracle JDeveloper versions 12.2.1.4.0 Oracle JDeveloper versions 14.1.2.0.0 Description A flaw in the ADF Faces component of Oracle Fusion Middleware allows a low privileged attacker with access to the infrastructure where the software execute...

CVE-2026-62507: Improper Access Control

Vulnerability in the Oracle Time and Labor product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Time and Labor...