CVE-2026-70736: Improper Access Control

Vulnerability in the Oracle Hyperion Profitability and Cost Management product of Oracle Hyperion component: Deployment. The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

PT-2026-77693

Vulnerability in the Oracle Payments product of Oracle E-Business Suite component: File Transmission. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Payments. While the...

PT-2026-77837

Name of the Vulnerable Software and Affected Versions Oracle Hyperion Financial Management version 11.2.25.0.000 Description A security flaw in the Security component allows a low-privileged attacker with access to the infrastructure where the software executes to compromise the system. This issu...

PT-2026-77990

Name of the Vulnerable Software and Affected Versions Oracle Commerce Guided Search / Oracle Commerce Experience Manager version 11.4.0 Description A flaw in the Experience Manager component allows a low privileged attacker with network access via HTTP to compromise the system. Successful...

PT-2026-77840

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle Loans versions 12.2.3 through 12.2.15 Description A flaw in the Internal Operations component allows a low privileged attacker with network access via HTTP to compromise the system. This can lead to unauthorized...

PT-2026-77778

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle Service Contracts versions 12.2.3 through 12.2.15 Description An issue exists in the Internal Operations component of the Oracle Service Contracts product. An unauthenticated attacker with network access via HTTP...

PT-2026-78221

Vulnerability in the Helidon product of Oracle Fusion Middleware component: Imperative Web Server. The supported version that is affected is 4.5.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful attacks of this...

CVE-2026-62600: Improper Access Control

Vulnerability in the Oracle Sales product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Sales. Successful attacks...

CVE-2026-60954: Improper Access Control

Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware component: Content Server. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

PT-2026-78083

Name of the Vulnerable Software and Affected Versions Oracle Business Intelligence Enterprise Edition version 8.2.0.0.0 Oracle Business Intelligence Enterprise Edition version 12.2.1.4.0 Oracle Business Intelligence Enterprise Edition version 26.01.0.0.0 Description A flaw in the BI Platform...

PT-2026-77912

Name of the Vulnerable Software and Affected Versions Oracle Hyperion Financial Management version 11.2.25.0.000 Description A security flaw in the Security component allows an unauthenticated attacker with network access via TLS to compromise the system. Successful exploitation can lead to...

PT-2026-77832

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle Financials for Asia/Pacific versions 12.2.3 through 12.2.15 Description A flaw in the Internal Operations component allows a low privileged attacker with network access via HTTP to compromise the system. This can...

PT-2026-77972

Name of the Vulnerable Software and Affected Versions Oracle Commerce Guided Search / Oracle Commerce Experience Manager version 11.4.0 Description A flaw in the Content Acquisition System component allows an unauthenticated attacker with network access via HTTP to compromise the system. Successf...

PT-2026-78155

Name of the Vulnerable Software and Affected Versions Oracle Fusion Middleware Helidon versions 4.0.0 through 4.5.0 Description A flaw in the Imperative Web Server component allows an unauthenticated attacker with network access via HTTP to compromise the system. Successful exploitation can lead ...

CVE-2026-70979: Missing Authentication for Critical Function

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce component: Content Acquisition System. The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP...

PT-2026-77991

Name of the Vulnerable Software and Affected Versions Oracle Commerce Guided Search / Oracle Commerce Experience Manager version 11.4.0 Description A flaw in the Experience Manager component allows a low-privileged attacker with network access via HTTP to compromise the system. Successful...

CVE-2026-70714: Improper Access Control

Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion component: Security. The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Hyperion Calculation...

PT-2026-77825

Name of the Vulnerable Software and Affected Versions Oracle Process Manufacturing Systems versions 12.2.3 through 12.2.15 Description A flaw in the Internal Operations component allows a low privileged attacker with network access via HTTP to compromise the system. Successful exploitation can le...

PT-2026-77385

Name of the Vulnerable Software and Affected Versions Oracle Siebel CRM Siebel Apps - Marketing versions 17.0 through 26.6 Description A flaw in the Marketing component allows a low privileged attacker with network access via HTTP to compromise the system. This can lead to unauthorized creation,...

PT-2026-77810

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle Internet Procurement Connector versions 12.2.3 through 12.2.15 Description A flaw in the Internal Operations component of the Oracle Internet Procurement Connector allows a low privileged attacker with network...