PT-2026-78081

Name of the Vulnerable Software and Affected Versions Oracle Business Intelligence Enterprise Edition version 12.2.1.4.0 Description An issue exists in the Presentation Services component of Oracle Business Intelligence Enterprise Edition. A low privileged attacker with access to the infrastructu...

CVE-2026-71010: Improper Access Control

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce component: Experience Manager. The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure whe...

PT-2026-77593

Name of the Vulnerable Software and Affected Versions Oracle Hyperion Infrastructure Technology version 11.2.25.0.000 Description An issue exists in the Installation and Configuration component that allows an unauthenticated attacker with local access to the infrastructure to compromise the syste...

CVE-2026-71131: Improper Access Control

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is 7.2.14. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle ...

CVE-2026-70901: Improper Access Control

Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion component: Access and security. The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

CVE-2026-62523: Improper Access Control

Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion component: Common Security. The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hyperio...

CVE-2026-71031: Improper Access Control

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce component: Endeca Application Controller. The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via...

CVE-2026-60414: Exposure of Sensitive Information to an Unauthorized Actor

Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware component: Outside In Core. The supported version that is affected is 8.5.8. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle Outside In Technology...

CVE-2026-62529: Improper Access Control

Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion component: Security. The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hyperion Calculation...

PT-2026-77851

Name of the Vulnerable Software and Affected Versions Oracle Siebel CRM versions 17.0 through 26.6 Description An issue exists in the Migration component of the Siebel CRM Deployment product. An unauthenticated attacker with network access via HTTP can compromise the system, potentially leading t...

PT-2026-77682

Name of the Vulnerable Software and Affected Versions Oracle Hyperion Calculation Manager version 11.2.25.0.000 Description An issue in the Security component allows an unauthenticated attacker with network access via HTTP to compromise the system. Exploitation requires human interaction from a...

PT-2026-77771

Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion component: Server. The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hyperion Financial...

PT-2026-77492

Name of the Vulnerable Software and Affected Versions Oracle WebCenter Portal version 12.2.1.4.0 Oracle WebCenter Portal version 14.1.2.0.0 Description A flaw in the Runtime Tools component of Oracle WebCenter Portal allows a low privileged attacker with network access via HTTP to compromise the...

PT-2026-78018

Name of the Vulnerable Software and Affected Versions Oracle Commerce Guided Search / Oracle Commerce Experience Manager version 11.4.0 Description A flaw in the Endeca Application Controller component allows a low-privileged attacker with network access via HTTP to compromise the system. The...

PT-2026-78076

Name of the Vulnerable Software and Affected Versions Oracle Agile PLM MCAD Connector version 3.6 Description A flaw in the CAX Client component allows a low-privileged attacker with network access via HTTP to compromise the system. Exploitation is difficult and requires human interaction from a...

PT-2026-78001

Name of the Vulnerable Software and Affected Versions Oracle Commerce Guided Search / Oracle Commerce Experience Manager version 11.4.0 Description An issue in the Experience Manager component allows an unauthenticated attacker with access to the infrastructure where the software executes to...

PT-2026-77910

Name of the Vulnerable Software and Affected Versions Oracle Hyperion Financial Management version 11.2.25.0.000 Description A security issue exists in the Security component that allows an unauthenticated attacker with access to the infrastructure where the software executes to compromise the...

PT-2026-77680

Vulnerability in the Oracle Applications DBA product of Oracle E-Business Suite component: JRI and other Java utils. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

CVE-2026-71089: Improper Access Control

Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply Chain component: CAX Client. The supported version that is affected is 3.6. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle Agile PLM MCAD Connector execute...

PT-2026-77510

Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware component: Content Server. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...