PT-2026-92910

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle Assets versions 12.2.3 through 12.2.15 Description An issue exists in the Internal Operations component of the Oracle Assets product. A low privileged attacker with network access via HTTP can exploit this flaw t...

PT-2026-92915

Vulnerability in the Oracle Bills of Material product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Bills of...

CVE-2026-83194: Improper Privilege Management

Vulnerability in the Oracle Depot Repair product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.10-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Depot Repair...

PT-2026-92931

Vulnerability in the Oracle Mobile Application Server product of Oracle E-Business Suite component: MWA Terminal Server. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via TCP to compromise Oracle...

PT-2026-92701

Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite component: Core. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Application Obje...

PT-2026-92656

Name of the Vulnerable Software and Affected Versions Oracle iStore versions 12.2.3 through 12.2.15 Description A flaw in the Shopping Cart component allows a low privileged attacker with network access via HTTP to compromise the system. Successful exploitation can lead to unauthorized access,...

PT-2026-92699

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle Common Applications versions 12.2.3 through 12.2.15 Description A flaw exists in the CRM User Management Framework component of Oracle Common Applications. A high privileged attacker with network access via HTTP...

PT-2026-92919

Vulnerability in the Oracle Document Management and Collaboration product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

CVE-2026-83118: Improper Privilege Management

Vulnerability in the Applications DBA product of Oracle E-Business Suite component: AD Utilities. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Applications DBA executes to compromise...

CVE-2026-83110: Improper Access Control

Vulnerability in the Oracle Marketing product of Oracle E-Business Suite component: Audience. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Marketing. Successful attacks o...

CVE-2026-83477: Improper Access Control

Vulnerability in the Oracle Work in Process product of Oracle E-Business Suite component: Workbenches. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with access to the physical communication segment attached to the hardwa...

PT-2026-92990

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle Purchasing versions 12.2.11 through 12.2.15 Description A flaw in the G-Invoicing component allows a low privileged attacker with network access via HTTP to compromise the system. This can lead to unauthorized...

PT-2026-92568

Vulnerability in the Oracle XML Gateway product of Oracle E-Business Suite component: Install. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle XML Gateway. Successful attacks...

CVE-2026-83452: Improper Authentication

Vulnerability in the Oracle Document Management and Collaboration product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

PT-2026-92939

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle US Federal Human Resources versions 12.2.3 through 12.2.15 Description An issue exists in the Internal Operations component of the Oracle US Federal Human Resources product. A low privileged attacker with network...

PT-2026-92905

Vulnerability in the Oracle Engineering product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Engineering. Whil...

Astra Linux – Vulnerability found in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: E-Switch – Fixed an error in error handling code. The error handling code dereferenced “vport”. There is nothing we can do if it is an error pointer; the only option is to return the error code...

EUVD-2026-77128

A vulnerability was detected in jaygajera17 E-commerce-project-springBoot up to 5e74a46b4b70623d0e4a0c9c4aee3bd1777185d2. The impacted element is the function UserController.updateUser of the file UserController.java. Performing a manipulation of the argument userid results in authorization bypas...

CVE-2026-90598

A vulnerability was detected in jaygajera17 E-commerce-project-springBoot up to 5e74a46b4b70623d0e4a0c9c4aee3bd1777185d2. The impacted element is the function UserController.updateUser of the file UserController.java. Performing a manipulation of the argument userid results in authorization bypas...

CVE-2026-90598 jaygajera17 E-commerce-project-springBoot UserController.java UserController.updateUser authorization

A vulnerability was detected in jaygajera17 E-commerce-project-springBoot up to 5e74a46b4b70623d0e4a0c9c4aee3bd1777185d2. The impacted element is the function UserController.updateUser of the file UserController.java. Performing a manipulation of the argument userid results in authorization bypas...