PT-2026-119486

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle Engineering versions 12.2.3 through 12.2.15 Description An issue exists in the Change Management component of Oracle Engineering. An unauthenticated attacker with network access via HTTP can exploit this flaw to...

PT-2026-119812

Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards component: Enterprise Infrastructure SEC. Supported versions that are affected are 9.2.0.0-9.2.26.5. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise JD...

PT-2026-120085

Vulnerability in the Oracle Middleware Common Libraries and Tools product of Oracle Fusion Middleware component: Remote Diagnostic Agent. Supported versions that are affected are 12.2.1.4.0 and 14.1.1.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via...

Oracle E-Business Suite: CVE-2026-101812: Critical Patch Update

Vulnerability in the Oracle Complex Maintenance, Repair and Overhaul product of Oracle E-Business Suite component: LOV. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

PT-2026-120004

Name of the Vulnerable Software and Affected Versions Oracle PeopleSoft Enterprise SCM Strategic Sourcing version 9.2 Description An issue exists in the Bidder Registration component that allows a low privileged attacker with network access via HTTP to compromise the system. Successful exploitati...

PT-2026-119723

Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite component: Personalization. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Applications...

PT-2026-119383

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle Payroll versions 12.2.3 through 12.2.15 Description An issue exists in the Internal Operations component of the Oracle Payroll product. A low privileged attacker with network access via HTTP can compromise the...

PT-2026-119581

Vulnerability in the Oracle HRMS US product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle HRMS US. Successful...

PT-2026-119760

Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware component: Fabric Layer. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle SOA Suite...

Red Hat: CVE-2026-113866: thunderbird: thunderbird: Information disclosure via unencrypted AutoDiscover lookup

When setting up an account, Thunderbird's Exchange AutoDiscover lookup also queried the domain's AutoDiscover service over plain HTTP. Due to a bug, that unencrypted request included the credentials the user had entered, allowing a network attacker to obtain the user's password. This vulnerabilit...

Azul Zulu: CVE-2026-91453: Vulnerability in Azul Zulu

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Lightweight HTTP Server. Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM fo...

Azul Zulu: CVE-2026-91453: Vulnerability in Azul Zulu

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Lightweight HTTP Server. Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM fo...

PT-2026-119586

Vulnerability in the Oracle HRMS US product of Oracle E-Business Suite component: US Payroll Year End. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle HRMS US. Successful...

PT-2026-119076

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft component: Portal. Supported versions that are affected are 8.61-8.63. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools...

PT-2026-120002

Name of the Vulnerable Software and Affected Versions Oracle PeopleSoft Enterprise SCM Strategic Sourcing version 9.2 Description A flaw in the Strategic Sourcing component allows a low privileged attacker with network access via HTTP to compromise the system. Successful exploitation can lead to...

PT-2026-119563

Vulnerability in the Oracle Shipping Execution product of Oracle E-Business Suite component: Workflow Events. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Shipping...

PT-2026-119367

Name of the Vulnerable Software and Affected Versions Oracle Mobile Field Service versions 12.2.3 through 12.2.15 Description An issue exists in the Admin UI component of the Oracle Mobile Field Service product within Oracle E-Business Suite. A low privileged attacker with network access via HTTP...

PT-2026-119994

Name of the Vulnerable Software and Affected Versions Oracle PeopleSoft PeopleSoft Enterprise CC Common Application Objects version 9.2 Description An issue exists in the BAM Framework component of the PeopleSoft Enterprise CC Common Application Objects product. An unauthenticated attacker with...

PT-2026-119902

Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM component: Siebel Cloud Manager. Supported versions that are affected are 22.3-26.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel CRM Cloud...

PT-2026-120014

Name of the Vulnerable Software and Affected Versions Oracle Fusion Middleware Oracle Identity Manager Connector component: SAP ERP+ version 12.2.1.4.0 Oracle Fusion Middleware Oracle Identity Manager Connector component: SAP ERP+ version 14.1.2.1.0 Description An unauthenticated attacker with...