PT-2026-62240

Name of the Vulnerable Software and Affected Versions Oracle VM VirtualBox version 7.2.12 Description A flaw in the Core component allows a low-privileged attacker with access to the infrastructure where the software executes to compromise the system. This issue can lead to unauthorized creation,...

PT-2026-62196

Name of the Vulnerable Software and Affected Versions Oracle Java SE version 8u491 Description An issue exists in the JavaFX component of Oracle Java SE. An unauthenticated attacker with network access via multiple protocols can compromise the system, provided there is human interaction from a...

PT-2026-62094

Name of the Vulnerable Software and Affected Versions Kibana affected versions not specified Description Improper Access Control allows a low-privileged authenticated user with read-only Security Solution access to perform write operations on Entity Analytics Watchlist configuration, which should...

PT-2026-63216

Name of the Vulnerable Software and Affected Versions Oracle Production Scheduling versions 12.2.3 through 12.2.15 Description An issue exists in the Internal Operations component of the Oracle Production Scheduling product within Oracle E-Business Suite. A low privileged attacker with network...

CVE-2026-61338: Improper Access Control

Vulnerability in the Oracle Contracts Integration product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Contracts...

PT-2026-63084

Vulnerability in the PeopleSoft Enterprise FIN Expenses product of Oracle PeopleSoft component: Expenses. The supported version that is affected is 9.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise FIN Expenses...

PT-2026-62504

Name of the Vulnerable Software and Affected Versions Oracle Unified Directory versions 12.2.1.4.0 Oracle Unified Directory versions 14.1.2.1.0 Description A flaw in the OUD Core component of Oracle Fusion Middleware allows a low privileged attacker with network access via LDAP to compromise the...

PT-2026-62733

Vulnerability in the Oracle Process Manufacturing Inventory product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

PT-2026-62825

Vulnerability in the Oracle Lease and Finance Management product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

PT-2026-63147

Vulnerability in the Oracle Process Manufacturing Logistics product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

PT-2026-62855

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle Installed Base versions 12.2.4 through 12.2.15 Description An issue exists in the Create Item Instance component of the Oracle Installed Base product. A low privileged attacker with network access via HTTP can...

CVE-2026-60987: Improper Access Control

Vulnerability in the Oracle Project Portfolio Analysis product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

PT-2026-62728

Name of the Vulnerable Software and Affected Versions Oracle Universal Work Queue versions 12.2.3 through 12.2.15 Description An issue in the UWQ Server component allows an unauthenticated attacker with network access via HTTP to compromise the system. Exploitation requires human interaction from...

PT-2026-62800

Vulnerability in the Oracle iStore product of Oracle E-Business Suite component: Shopping Cart. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle iStore. Successful attacks...

PT-2026-62644

Name of the Vulnerable Software and Affected Versions Oracle PeopleSoft Enterprise CC Common Application Objects version 9.2 Description An issue in the Common Application Objects component allows an unauthenticated attacker with network access via HTTP to compromise the system. Successful...

PT-2026-62723

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle Content Manager versions 12.2.3 through 12.2.15 Description A flaw in the Internal Operations component of the Oracle Content Manager allows a low privileged attacker with network access via HTTP to compromise th...

PT-2026-62823

Vulnerability in the Oracle Order Entry product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Order Entry executes t...

PT-2026-62717

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle iSupport versions 12.2.3 through 12.2.15 Description An issue exists in the Internal Operations component of Oracle iSupport. An unauthenticated attacker with network access via HTTP can compromise the system,...

PT-2026-62749

Name of the Vulnerable Software and Affected Versions Oracle Sales Offline versions 12.2.3 through 12.2.15 Description A flaw in the Internal Operations component allows a low privileged attacker with network access via HTTP to compromise the system. Successful exploitation can lead to unauthoriz...

PT-2026-63035

Name of the Vulnerable Software and Affected Versions Oracle Commerce Guided Search / Oracle Commerce Experience Manager version 11.4.0 Description A flaw in the Experience Manager component allows a low privileged attacker with network access via HTTP to compromise the system. Successful...