PT-2026-78074

Name of the Vulnerable Software and Affected Versions Oracle Hyperion Financial Management version 11.2.25.0.000 Description A security flaw in the Security component allows a high privileged attacker with network access via HTTP to compromise the system. Successful exploitation can lead to...

PT-2026-77672

Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware component: Security and Authentication. The supported version that is affected is 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Report...

PT-2026-77774

Vulnerability in the Oracle iSupplier Portal product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle iSupplier...

PT-2026-78099

Name of the Vulnerable Software and Affected Versions Oracle PeopleSoft PeopleSoft Enterprise FIN Common Objects version 9.2 Description A security flaw in the Security component allows an unauthenticated attacker with network access via HTTP to compromise the system. Successful exploitation can...

PT-2026-78095

Name of the Vulnerable Software and Affected Versions Oracle Hyperion Financial Management version 11.2.25.0.000 Description A security flaw in the Security component allows a low privileged attacker with network access via HTTP to compromise the system. Successful exploitation can lead to...

PT-2026-78057

Name of the Vulnerable Software and Affected Versions Oracle Agile PLM MCAD Connector version 3.6 Description An issue exists in the CAX Client component of the Oracle Agile PLM MCAD Connector. An unauthenticated attacker with network access via HTTP can compromise the system, potentially leading...

PT-2026-77903

Name of the Vulnerable Software and Affected Versions Oracle Siebel CRM versions 17.0 through 26.6 Description An issue exists in the REST component of the Siebel CRM Integration product. An unauthenticated attacker with network access via HTTP can exploit this flaw to compromise the system,...

PT-2026-77728

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Teleservice versions 12.2.3 through 12.2.15 Description A flaw in the Service Request Form component of the Oracle Teleservice product allows a low privileged attacker with network access via HTTP to compromise the...

PT-2026-77549

Name of the Vulnerable Software and Affected Versions Oracle Hyperion Calculation Manager version 11.2.25.0.000 Description A security issue in the Oracle Hyperion Calculation Manager allows an unauthenticated attacker with network access via HTTP to compromise the system. Exploitation is difficu...

PT-2026-77483

Name of the Vulnerable Software and Affected Versions Oracle Learning Management versions 12.2.3 through 12.2.15 Description An issue exists in the Internal Operations component of the Oracle Learning Management product of Oracle E-Business Suite. An unauthenticated attacker with network access v...

PT-2026-78091

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle HRMS Netherlands versions 12.2.3 through 12.2.15 Description An issue exists in the Netherlands Payroll component of Oracle HRMS Netherlands. A high privileged attacker with network access via HTTP can exploit th...

PT-2026-78034

Name of the Vulnerable Software and Affected Versions Oracle Agile PLM version 9.3.6 Description An issue in the Security component of the Oracle Agile PLM product allows an unauthenticated attacker with network access via HTTP to compromise the system. Successful exploitation can lead to...

PT-2026-77763

Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion component: Server. The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hyperion Financial...

PT-2026-77387

Name of the Vulnerable Software and Affected Versions Oracle Payments versions 12.2.3 through 12.2.15 Description An issue exists in the File Transmission component of Oracle Payments within Oracle E-Business Suite. An unauthenticated attacker with network access via HTTP can exploit this flaw to...

PT-2026-78078

Name of the Vulnerable Software and Affected Versions Oracle Hyperion Financial Management version 11.2.25.0.000 Description A security issue in the Security component allows a low privileged attacker with network access via HTTP to compromise the system. Successful exploitation can lead to a...

PT-2026-77471

Name of the Vulnerable Software and Affected Versions Oracle WebCenter Sites version 12.2.1.4.0 Oracle WebCenter Sites version 14.1.2.0.0 Description An issue in the Oracle WebCenter Sites component of Oracle Fusion Middleware allows an unauthenticated attacker with network access via HTTP to...

PT-2026-77952

Name of the Vulnerable Software and Affected Versions Oracle Hyperion Infrastructure Technology version 11.2.25.0.000 Description An unauthenticated attacker with network access via HTTP can compromise the Installation and Configuration component of Oracle Hyperion Infrastructure Technology. This...

GLSA-202608-16 : nginx: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202608-16 nginx: Multiple Vulnerabilities Multiple vulnerabilities have been discovered in nginx. Please review the CVE identifiers referenced below for details. Tenable has extracted the preceding description block directly from...

PT-2026-77846

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion component: Security. The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hyperion Financial...

.NET: .NET Core: .NET Security Feature Bypass Vulnerability

Inconsistent interpretation of http requests 'http request/response smuggling' in .NET allows an unauthorized attacker to bypass a security feature over a network...