PT-2026-62842

Name of the Vulnerable Software and Affected Versions Oracle Work in Process versions 12.2.3 through 12.2.15 Description An issue exists in the Internal Operations component of the Oracle Work in Process product within Oracle E-Business Suite. A low privileged attacker with network access via HTT...

PT-2026-63005

Vulnerability in the Oracle HRMS UK product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.8-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle HRMS UK. While the...

PT-2026-62828

Vulnerability in the Oracle Contracts Integration product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Contracts...

PT-2026-62194

Vulnerability in the Oracle Contracts Integration product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Contrac...

PT-2026-62968

Vulnerability in the Oracle Public Sector Human Resources product of Oracle E-Business Suite component: Regression Testing. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

PT-2026-62641

Name of the Vulnerable Software and Affected Versions Oracle PeopleSoft PeopleSoft Enterprise CS Student Records version 9.2.38 Description A flaw in the Australian Features component allows a low privileged attacker with network access via HTTP to compromise the system. Successful exploitation c...

PT-2026-63154

Name of the Vulnerable Software and Affected Versions Oracle Product Hub versions 12.2.3 through 12.2.15 Description A flaw in the Internal Operations component allows a low privileged attacker with network access via HTTP to compromise the system. Successful exploitation can lead to a full...

PT-2026-62771

Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite component: Search Bean Incl. Advanced. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

PT-2026-63238

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle HRMS UK versions 12.2.3 through 12.2.15 Description A flaw in the UK Payroll component of Oracle HRMS UK allows a low privileged attacker with network access via HTTP to compromise the system. This issue can lead...

PT-2026-62879

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle Service Contracts versions 12.2.3 through 12.2.15 Description An issue exists in the Internal Operations component of the Oracle Service Contracts product. A high privileged attacker with network access via HTTP...

PT-2026-63209

Vulnerability in the Oracle Time and Labor product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Time and Labor...

PT-2026-63164

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle Cost Management versions 12.2.3 through 12.2.15 Description An issue exists in the Cost Planning component of the Oracle Cost Management product. A high privileged attacker with network access via HTTP can...

PT-2026-63017

Vulnerability in the Oracle Commerce Platform product of Oracle Commerce component: Dynamo Application Framework. The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Commerce Platform...

PT-2026-63021

Vulnerability in the Oracle Commerce Platform product of Oracle Commerce component: Dynamo Application Framework. The supported version that is affected is 11.4.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Commerce Platfor...

PT-2026-63009

Vulnerability in the Oracle HRMS UK product of Oracle E-Business Suite component: UK Payroll. Supported versions that are affected are 12.2.9-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle HRMS UK. Successful attacks of...

PT-2026-62861

Vulnerability in the Oracle Inventory Management product of Oracle E-Business Suite component: Core Receiving. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Inventory...

PT-2026-62933

Name of the Vulnerable Software and Affected Versions Oracle Advanced Supply Chain Planning versions 12.2.3 through 12.2.15 Description An issue exists in the Core component of the Oracle Advanced Supply Chain Planning product of Oracle E-Business Suite. A high privileged attacker with network...

PT-2026-63138

Vulnerability in the Oracle Sales for Handhelds product of Oracle E-Business Suite component: Outlook Sync Win 32. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Sales for...

PT-2026-57210

Name of the Vulnerable Software and Affected Versions 9Router versions prior to 0.5.2 Description An authenticated attacker with access to the LLM proxy can perform a Server-Side Request Forgery SSRF by exploiting a Time-of-Check to Time-of-Use TOCTOU gap during image URL validation. The software...

Oracle JDeveloper / ADF Multiple Vulnerabilities (June 2026 CSPU)

The version of Oracle JDeveloper Oracle Application Development Framework, ADF installed on the remote host is missing a security patch. It is, therefore, affected by multiple vulnerabilities as referenced in the June 2026 CSPU advisory. - Vulnerability in the Oracle Application Development...