EUVD-2026-46977

Vulnerability in the JD Edwards EnterpriseOne HCM Foundation product of Oracle JD Edwards component: Time Accounting and HRM Base. The supported version that is affected is 9.2. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise JD Edwards...

EUVD-2026-46949

Vulnerability in the Oracle Project Foundation product of Oracle E-Business Suite component: Project Definition. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Project...

EUVD-2026-46872

Vulnerability in the JD Edwards EnterpriseOne General Ledger product of Oracle JD Edwards component: E1 Foundation. The supported version that is affected is 9.2. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise JD Edwards EnterpriseOne...

EUVD-2026-46875

Vulnerability in the JD Edwards EnterpriseOne CRM Foundation product of Oracle JD Edwards component: CRM Foundation. The supported version that is affected is 9.2. Difficult to exploit vulnerability allows low privileged attacker with network access via JDENET to compromise JD Edwards EnterpriseO...

EUVD-2026-46870

Vulnerability in the JD Edwards EnterpriseOne HCM Foundation product of Oracle JD Edwards component: OW HR PR Foundation. The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise JD Edwards...

EUVD-2026-46867

Vulnerability in the JD Edwards EnterpriseOne CRM Foundation product of Oracle JD Edwards component: CRM Foundation. The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise JD Edwards EnterpriseOne C...

EUVD-2026-46868

Vulnerability in the JD Edwards EnterpriseOne CRM Foundation product of Oracle JD Edwards component: CRM Foundation. The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise JD Edwards EnterpriseOne C...

CVE-2026-61090

Vulnerability in the Oracle Project Foundation product of Oracle E-Business Suite component: Miscellaneous. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Project Foundation...

CVE-2026-60587

Vulnerability in the Oracle Project Foundation product of Oracle E-Business Suite component: Project Definition. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Project...

CVE-2026-60492

Vulnerability in the JD Edwards EnterpriseOne HCM Foundation product of Oracle JD Edwards component: OW HR PR Foundation. The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise JD Edwards...

CVE-2026-60497

Vulnerability in the JD Edwards EnterpriseOne CRM Foundation product of Oracle JD Edwards component: CRM Foundation. The supported version that is affected is 9.2. Difficult to exploit vulnerability allows low privileged attacker with network access via JDENET to compromise JD Edwards EnterpriseO...

CVE-2026-60490

Vulnerability in the JD Edwards EnterpriseOne CRM Foundation product of Oracle JD Edwards component: CRM Foundation. The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise JD Edwards EnterpriseOne C...

CVE-2026-60489

Vulnerability in the JD Edwards EnterpriseOne CRM Foundation product of Oracle JD Edwards component: CRM Foundation. The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise JD Edwards EnterpriseOne C...

GHSA-2969-4Q4W-W5H3 Microsoft Security Advisory CVE-2026-50650 – .NET Elevation of Privilege Vulnerability

Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in Windows Presentation Foundation WPF. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability. An elevation of privilege...

PT-2026-62555

Name of the Vulnerable Software and Affected Versions Oracle JD Edwards EnterpriseOne CRM Foundation version 9.2 Description A flaw in the CRM Foundation component allows a low-privileged attacker with network access via JDENET to compromise the system. Successful exploitation can lead to a full...

PT-2026-62629

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle Project Foundation versions 12.2.3 through 12.2.15 Description A flaw in the Project Definition component allows a low privileged attacker with network access via HTTP to compromise the system. This can lead to...

PT-2026-62548

Name of the Vulnerable Software and Affected Versions Oracle JD Edwards EnterpriseOne CRM Foundation version 9.2 Description A flaw in the CRM Foundation component allows a low-privileged attacker with network access via HTTP to compromise the system. Successful exploitation can lead to a complet...

Important: Red Hat Security Advisory: Red Hat OpenShift Data Foundation 4.19.20 security, enhancement & bug fix update

Red Hat OpenShift Data Foundation 4.19.20 security, enhancement & bug fix update Red Hat OpenShift Data Foundation 4.19.20 security, enhancement & bug fix update FIXED BUGS: ========== DFBUGS-7342: RHODF 4.19.20 release DFBUGS-7332: Backport for 4.19 - GSSODFMCG noobaa-db-pg-cluster won't...

CVE-2026-14979 IBM Engineering Lifecycle Management - Jazz Foundation is vulnerable to XML Entity Expansion attack

IBM Engineering Lifecycle Management 7.0.3 Interim Fix 001 through Interim Fix 021, 7.1.0 Interim Fix 001 through Interim Fix 009, and 7.2.0 and 7.2.0 Interim Fix 001 DOORS could allow a remote attacker to cause a denial of service due to improper handling of XML entity expansion...

CVE-2026-14979 IBM Engineering Lifecycle Management - Jazz Foundation is vulnerable to XML Entity Expansion attack

IBM Engineering Lifecycle Management 7.0.3 Interim Fix 001 through Interim Fix 021, 7.1.0 Interim Fix 001 through Interim Fix 009, and 7.2.0 and 7.2.0 Interim Fix 001 DOORS could allow a remote attacker to cause a denial of service due to improper handling of XML entity expansion...