Oracle E-Business Suite: CVE-2026-91496: Critical Patch Update

Vulnerability in the Workflow product of Oracle E-Business Suite component: Workflow Notification Mailer. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Workflow. Successful...

PT-2026-119101

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft component: Analytic Server. Supported versions that are affected are 8.61-8.63. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise...

Oracle PeopleSoft Enterprise FIN Common Objects Brazil Security Vulnerabilities

Oracle PeopleSoft Enterprise FIN Common Objects Brazil 9.1 version has a security vulnerability. This vulnerability stems from issues with the eProcurement component, which may allow unauthorized attackers to access data via the HTTP network, enabling them to read certain accessible information...

Oracle WebCenter Content security vulnerability

Versions 12.2.1.4.0 and 14.1.2.0.0 of Oracle WebCenter Content contain a security vulnerability stemming from issues in the Content Server component. This vulnerability may allow unauthenticated attackers to gain HTTP access, resulting in unauthorized access to critical data or full access to all...

Oracle E-Business Suite: CVE-2026-101650: Critical Patch Update

Vulnerability in the Oracle Partner Management product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Partner...

Oracle E-Business Suite: CVE-2026-101651: Critical Patch Update

Vulnerability in the Oracle Partner Management product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Partner...

Oracle E-Business Suite: CVE-2026-101557: Critical Patch Update

Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Purchasing. Successf...

PT-2026-119061

Vulnerability in Oracle REST Data Services component: Core. Supported versions that are affected are 24.2.0-26.1.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle REST Data Services. Successful attacks require human interaction...

PT-2026-120018

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Workflow versions 12.2.3 through 12.2.15 Description An issue exists in the Workflow Notification Mailer component of the Workflow product. A low privileged attacker with network access via HTTP can compromise the...

PT-2026-119346

Vulnerability in the Oracle Email Center product of Oracle E-Business Suite component: Message Component. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Email Center...

PT-2026-119432

Name of the Vulnerable Software and Affected Versions Oracle Communications Billing and Revenue Management versions 15.0.0.0.0 through 15.2.0.0.0 Description An issue in the BRM Server component allows an unauthenticated attacker with network access via HTTP to compromise the system. Successful...

PT-2026-119315

Name of the Vulnerable Software and Affected Versions Oracle Mobile Field Service of Oracle E-Business Suite versions 12.2.3 through 12.2.15 Description An issue exists in the Internal Operations component that allows a low privileged attacker with network access via HTTP to compromise the system...

PT-2026-119380

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle Concurrent Processing versions 12.2.3 through 12.2.15 Description An issue in the Oracle Concurrent Processing product allows an unauthenticated attacker with network access via HTTP to compromise the system...

Oracle E-Business Suite: CVE-2026-101844: Critical Patch Update

Vulnerability in the Oracle Concurrent Processing product of Oracle E-Business Suite component: Concurrent Requests. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

PT-2026-119184

Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware component: Connector Framework. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

PT-2026-119485

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle Engineering versions 12.2.3 through 12.2.15 Description An issue exists in the Change Management component of Oracle Engineering. A low privileged attacker with network access via HTTP can exploit this flaw to...

Oracle E-Business Suite: CVE-2026-83392: Critical Patch Update

Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite component: Diagnostics. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Applications...

PT-2026-119870

Vulnerability in the iSupport product of Oracle E-Business Suite component: Service Requests. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise iSupport. Successful attacks of this...

PT-2026-119181

Vulnerability in Oracle REST Data Services component: Core. Supported versions that are affected are 24.2.0-26.2.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle REST Data Services. Successful attacks of this vulnerability can...

PT-2026-119249

Vulnerability in the Helidon product of Oracle Fusion Middleware component: helidon-common-concurrency-limits. Supported versions that are affected are 4.0.0-4.5.5 and 27.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon...