PT-2026-92965

Name of the Vulnerable Software and Affected Versions Oracle Hyperion Data Relationship Management version 11.2.26.0.000 Description An issue exists in the Access and security component that allows an unauthenticated attacker with network access via HTTPS to compromise the system. Exploitation...

PT-2026-92994

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion component: Security. The supported version that is affected is 11.2.26.0.000. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle Hyperion Financi...

PT-2026-92571

Name of the Vulnerable Software and Affected Versions Oracle WebCenter Portal version 12.2.1.4.0 Oracle WebCenter Portal version 14.1.2.0.0 Description An issue in the Runtime Tools component of Oracle Fusion Middleware allows an unauthenticated attacker with network access via HTTP to compromise...

PT-2026-92790

Name of the Vulnerable Software and Affected Versions Oracle BI Publisher version 8.2.0.0.0 Oracle BI Publisher version 12.2.1.4.0 Oracle BI Publisher version 26.01.0.0.0 Description A security flaw in the BI Publisher Security component allows a low privileged attacker with network access via HT...

PT-2026-92574

Name of the Vulnerable Software and Affected Versions Oracle WebCenter Portal version 12.2.1.4.0 Oracle WebCenter Portal version 14.1.2.0.0 Description An issue in the Runtime Tools component of Oracle Fusion Middleware allows a low privileged attacker with network access via HTTP to compromise t...

PT-2026-92600

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle HR Intelligence versions 12.2.3 through 12.2.15 Description An issue exists in the Internal Operations component of the Oracle HR Intelligence product. A low privileged attacker with network access via HTTP can...

PT-2026-93080

Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain component: Engineering Communication Interface. The supported version that is affected is 6.2.1. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Orac...

PT-2026-92807

Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics component: BI Search. The supported version that is affected is 12.2.1.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Business...

PT-2026-92656

Name of the Vulnerable Software and Affected Versions Oracle iStore versions 12.2.3 through 12.2.15 Description A flaw in the Shopping Cart component allows a low privileged attacker with network access via HTTP to compromise the system. Successful exploitation can lead to unauthorized access,...

PT-2026-92980

Vulnerability in the Oracle Order Management product of Oracle E-Business Suite component: Product Diagnostic Tools. Supported versions that are affected are 12.2.4-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Order...

PT-2026-92948

Vulnerability in the Oracle Financials for Asia/Pacific product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.8-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

PT-2026-93018

Name of the Vulnerable Software and Affected Versions Oracle Hyperion Financial Management version 11.2.26.0.000 Description A security flaw in the Security component allows an unauthenticated attacker with network access via TLS to compromise the system. Successful exploitation can lead to...

PT-2026-92897

Vulnerability in the Oracle Product Workbench product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Product...

CVE-2026-83186: Improper Access Control

Vulnerability in the Oracle Common Applications Calendar product of Oracle E-Business Suite component: Applications Calendar. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

PT-2026-92724

Name of the Vulnerable Software and Affected Versions Oracle Siebel CRM versions 17.0 through 26.7 Description An issue exists in the Server Infrastructure component of the Siebel CRM Deployment product. An unauthenticated attacker with network access via HTTP can compromise the system, potential...

PT-2026-92668

Vulnerability in the Siebel Apps - Customer Order Management product of Oracle Siebel CRM component: Order Management. Supported versions that are affected are 17.0-26.7. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Siebel Apps -...

PT-2026-92626

Vulnerability in the Oracle Forms product of Oracle Fusion Middleware component: Forms Services, C/S, Charmode. Supported versions that are affected are 12.2.1.19.0 and 14.1.2.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

PT-2026-92621

Name of the Vulnerable Software and Affected Versions Oracle Fusion Middleware Oracle Forms versions 12.2.1.19.0 and 14.1.2.0.0 Description A flaw in the Forms Services, C/S, Charmode component allows a high privileged attacker with network access via HTTP to compromise the system. Successful...

PT-2026-92725

Name of the Vulnerable Software and Affected Versions Oracle Siebel CRM versions 17.0 through 26.7 Description An issue exists in the Server Infrastructure component of the Siebel CRM Deployment product. An unauthenticated attacker with network access via HTTP can compromise the system, potential...

PT-2026-92991

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle Purchasing versions 12.2.10 through 12.2.15 Description A flaw in the G-Invoicing component allows a low privileged attacker with network access via HTTP to compromise the system. This can lead to unauthorized...