PT-2026-119361

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Integrated SOA Gateway versions 12.2.3 through 12.2.15 Description A flaw in the SOA Provider component allows a low privileged attacker with network access via HTTP to compromise the system. Successful exploitation can...

PT-2026-120019

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft component: Updates Environment Mgmt. Supported versions that are affected are 8.61-8.63. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft...

PT-2026-118652

An os command injection vulnerability exists in the boa formWsc peerRptPin functionality of Totolink X2000R TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327. A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated HTTP request to trigger this...

PT-2026-119714

Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware component: Outside In Core. The supported version that is affected is 8.5.8. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Outside In...

Oracle E-Business Suite: CVE-2026-87357: Critical Patch Update

Vulnerability in the Order Capture product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Order Capture. Successful...

PT-2026-119134

Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM component: Siebel Cloud Manager. Supported versions that are affected are 17.0-26.9. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Siebel CRM Cloud...

PT-2026-119619

Vulnerability in the Oracle Weblogic Server Proxy Plug-in product of Oracle Fusion Middleware component: WebLogic Server Proxy Plug-In for Third-Party Web Servers. Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0 and 14.1.2.0.0. Difficult to exploit vulnerability allows...

Oracle Quality security vulnerability

A security vulnerability exists in Oracle Quality versions 12.2.3 through 12.2.15. This vulnerability stems from issues within the Internal Operations component and may allow low-privilege attackers to create, delete, or modify critical data via HTTP access, as well as gain unauthorized access to...

PT-2026-132911

Security vulnerability affects the loki package. When a server is configured to support unencrypted HTTP/2, it reads a few bytes from each new connection to see if they contain the HTTP/2 client preface...

Oracle Siebel CRM Deployment Security Vulnerabilities

The Oracle Siebel CRM deployment from version 17.0 to 26.9 has security vulnerabilities. These vulnerabilities stem from issues with the Server Infrastructure component. Unauthorized attackers may gain access through the HTTP network, resulting in unauthorized access to critical data or all...

Oracle SOA Suite security vulnerabilities

Oracle SOA Suite versions 12.2.1.4.0 and 14.1.2.0.0 have security vulnerabilities. These vulnerabilities stem from issues with the Adapters component. Unauthorized attackers may exploit these vulnerabilities to gain control of the Oracle SOA Suite through HTTP network access. This could...

Oracle Siebel CRM Deployment security vulnerability

A security vulnerability exists in Oracle Siebel CRM versions 17.0 through 26.9. This vulnerability stems from issues within the Siebel Management Console component, potentially allowing unauthenticated attackers to access certain accessible data via HTTP without authorization...

Oracle Common Applications security vulnerabilities

Oracle Common Applications versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Role Summary component. They are difficult to exploit. Attackers with high privileges can exploit these vulnerabilities through HTTP network access. This could lead...

Oracle E-Business Suite: CVE-2026-83393: Critical Patch Update

Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Product Hub. Whil...

curl information leakage vulnerability

The curl version 8.22.0 and earlier have a vulnerability related to information leakage. This vulnerability arises from the HTTP proxy’s use of the 401 WWW-Authenticate response to CONNECT tunnel requests, instead of the expected 407 Proxy-Authenticate response. This allows licurl to send the...

Oracle PeopleSoft Enterprise PeopleTools security vulnerabilities

Oracle PeopleSoft Enterprise PeopleTools versions 8.61 to 8.63 have security vulnerabilities. These vulnerabilities stem from issues with the Meta Data component. They may allow attackers with high privileges to access critical data or all accessible data via the HTTP network. This can result in...

Oracle SOA Suite security vulnerabilities

Oracle SOA Suite versions 12.2.1.4.0 and 14.1.2.0.0 have security vulnerabilities. These vulnerabilities stem from issues with the Fabric Layer component. Unauthenticated attackers can access critical data through the HTTP network, resulting in unauthorized access to key data or full access to al...

PT-2026-119487

Vulnerability in the Assets product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Assets. Successful attacks of this...

PT-2026-119273

Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain component: Product Quality Management. The supported version that is affected is 6.2.4. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...

Oracle REST Data Services security vulnerabilities

Oracle REST Data Services versions 24.2.0 to 26.1.0 have security vulnerabilities. These vulnerabilities stem from issues with the Core component, which may allow low-privilege attackers to access through the HTTP network. This could lead to unauthorized updates, insertions, or deletions of certa...