PT-2026-119481

Name of the Vulnerable Software and Affected Versions Oracle Product Workbench versions 12.2.3 through 12.2.15 Description An issue in the WebUI component of the Oracle Product Workbench allows an unauthenticated attacker with network access via HTTP to compromise the system. This can lead to...

PT-2026-119885

Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware component: Outside In Clean Content SDK. The supported version that is affected is 8.5.8. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Outside...

PT-2026-119626

Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards component: Interoperability SEC. Supported versions that are affected are 9.2.0.0-9.2.26.5. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise JD Edwards...

PT-2026-119334

Name of the Vulnerable Software and Affected Versions Oracle Mobile Field Service of Oracle E-Business Suite versions 12.2.3 through 12.2.15 Description An issue exists in the Internal Operations component that allows a low privileged attacker with network access via HTTP to compromise the system...

PT-2026-119218

Vulnerability in the Oracle Sales Foundation product of Oracle E-Business Suite component: Security API. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Sales Foundation...

PT-2026-119212

Vulnerability in the Oracle Enterprise Manager for Oracle Database product of Oracle Enterprise Manager component: Data Guard Management. Supported versions that are affected are 13.5 and 24.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...

PT-2026-119546

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft component: Process Scheduler. Supported versions that are affected are 8.61 and 8.62. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft...

PT-2026-119889

Vulnerability in the Oracle Business Process Management Suite product of Oracle Fusion Middleware component: Case management Service 11g+. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via...

PT-2026-120054

Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain component: Product Quality Management. The supported version that is affected is 6.2.4. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...

PT-2026-119661

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft component: Portal. Supported versions that are affected are 8.61-8.63. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTool...

Oracle E-Business Suite: CVE-2026-101552: Critical Patch Update

Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite component: Flexfields. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Application...

Oracle E-Business Suite: CVE-2026-101554: Critical Patch Update

Vulnerability in the Oracle Payroll product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Payroll. Successful...

PT-2026-119130

Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM component: Siebel Cloud Manager. Supported versions that are affected are 22.3-26.9. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Siebel CRM Cloud...

PT-2026-119374

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle Application Object Library versions 12.2.3 through 12.2.15 Description An issue exists in the Core component of the Oracle Application Object Library. An unauthenticated attacker with network access via HTTP can...

PT-2026-119347

Vulnerability in the Oracle Email Center product of Oracle E-Business Suite component: Message Component. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Email Center...

PT-2026-125048

Pingora versions prior to 0.9.0 accepted HTTP/2 requests whose Host header differed from the :authority pseudo-header. Request filters, cache keys, and logs that read the request URI session.req header.uri saw the :authority value, but the upstream received the client-supplied Host value. Pingora...

Oracle E-Business Suite: CVE-2026-91338: Critical Patch Update

Vulnerability in the iSupport product of Oracle E-Business Suite component: Internal operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise iSupport. Successful attacks of this...

PT-2026-120115

Name of the Vulnerable Software and Affected Versions Oracle Essbase version 21.8.3.0.0 Description A flaw in the Essbase Web Platform allows a low privileged attacker with network access via HTTP to compromise Oracle Essbase. Successful exploitation can lead to a full takeover of the system and...

PT-2026-118643

A stack-based buffer overflow vulnerability exists in the Mcli functionality of X2000R versions: TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327. A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated HTTP request to trigger this vulnerability...

PT-2026-119766

Name of the Vulnerable Software and Affected Versions Oracle SOA Suite versions 12.2.1.4.0 Oracle SOA Suite versions 14.1.2.0.0 Description A flaw in the Fabric Layer component of Oracle Fusion Middleware allows an unauthenticated attacker with network access via HTTP to compromise the system...