PT-2026-62825

Vulnerability in the Oracle Lease and Finance Management product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

PT-2026-63068

Name of the Vulnerable Software and Affected Versions Oracle Agile Product Lifecycle Management for Process version 6.2.4 Description An issue exists in the Product Quality Management component of Oracle Agile Product Lifecycle Management for Process. An unauthenticated attacker with network acce...

Plane contains multi-tenant authorization bypass vulnerability

Overview The project management tool Plane, versions 1.3.0 and earlier, contains a multi-tenant authorization bypass vulnerability in its asset-management API that allows unauthorized users to access, delete, or duplicate assets that belong to other workspaces. Description Plane is an open-source...

PT-2026-62110

Name of the Vulnerable Software and Affected Versions FOG versions prior to 1.5.10.1832 FOG versions prior to 1.6.0-beta.2313 Description Unauthenticated attackers can invoke the clearAES and clearPMTasks methods within FOGPage by sending a single HTTP GET request to the public client node...

PT-2026-63064

Name of the Vulnerable Software and Affected Versions Oracle Agile Product Lifecycle Management for Process version 6.2.4 Description A flaw in the Product Quality Management component allows a low privileged attacker with network access via HTTP to compromise the system. Successful exploitation...

PT-2026-63057

Name of the Vulnerable Software and Affected Versions Oracle Agile PLM version 9.3.6 Description An issue in the Security component of the Oracle Agile PLM product allows an unauthenticated attacker with network access via HTTP to compromise the system. Successful exploitation can lead to...

PT-2026-63053

Name of the Vulnerable Software and Affected Versions Oracle Agile PLM version 9.3.6 Description A security flaw in the Oracle Agile PLM product of Oracle Supply Chain allows a low privileged attacker with network access via HTTP to compromise the system. Successful exploitation can result in a...

PT-2026-62141

Vulnerability in the Oracle Utilities Network Management System product of Oracle Utilities Applications component: Security. Supported versions that are affected are 2.4.0.1.0-2.4.0.1.32, 2.5.0.1.0-2.5.0.1.17, 2.5.0.2.0-2.5.0.2.11, 2.6.0.2.0-2.6.0.2.7 and 25.12.0.0.0. Easily exploitable...

PT-2026-62958

Name of the Vulnerable Software and Affected Versions Oracle PeopleSoft PeopleSoft Enterprise FIN Common Objects Argentina version 9.1 Description A flaw in the Cash Management component allows an unauthenticated attacker with network access via HTTP to compromise the system. This can result in a...

PT-2026-63203

Name of the Vulnerable Software and Affected Versions Oracle Yard Management versions 12.2.6 through 12.2.15 Description A flaw in the Internal Operations component of Oracle Yard Management allows a low privileged attacker with network access via HTTP to compromise the system. Successful...

PT-2026-63076

Name of the Vulnerable Software and Affected Versions Oracle Agile Engineering Data Management version 6.2.1 Description A flaw in the Install component allows a low privileged attacker with network access via HTTP to compromise the system. Successful exploitation can lead to a hang or a frequent...

PT-2026-63077

Name of the Vulnerable Software and Affected Versions Oracle Agile Engineering Data Management version 6.2.1 Description A flaw in the Core component of the Oracle Agile Engineering Data Management product allows a low privileged attacker with network access via TCP to compromise the system...

PT-2026-63012

Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications component: Platform. Supported versions that are affected are 15.0.0.0.0-15.0.1.0.0 and 15.1.0.0.0-15.2.0.0.0. Easily exploitable vulnerability allows low privileged attacker with logon to t...

PT-2026-63075

Name of the Vulnerable Software and Affected Versions Oracle Agile Engineering Data Management version 6.2.1 Description A flaw in the Document Management component allows a low-privileged attacker with access to the infrastructure where the software executes to compromise the system. This can le...

PT-2026-62635

Name of the Vulnerable Software and Affected Versions Oracle PeopleSoft Enterprise FIN Cash Management version 9.2 Description An issue in the Cash Management component allows an unauthenticated attacker with network access via HTTP to compromise the system. Although the flaw is located within...

PT-2026-63074

Name of the Vulnerable Software and Affected Versions Oracle Agile Engineering Data Management version 6.2.1 Description A flaw in the Install component allows a low privileged attacker with network access via HTTP to compromise the system. Exploitation is difficult and requires human interaction...

PT-2026-63085

Vulnerability in the PeopleSoft Enterprise FIN Program Management product of Oracle PeopleSoft component: Primavera Integration. The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft...

PT-2026-62793

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle Cost Management versions 12.2.3 through 12.2.15 Description A flaw in the Cost Planning component allows a high privileged attacker with network access via HTTP to compromise the system. Successful exploitation c...

PT-2026-63078

Name of the Vulnerable Software and Affected Versions Oracle Agile Engineering Data Management version 6.2.1 Description A flaw in the Core component of the Oracle Agile Engineering Data Management product allows a low privileged attacker with network access via TCP to compromise the system...

CVE-2025-66390

CVE-2025-66390 affects Microsoft Azure API Management Developer Portal: when Basic Authentication signup is enabled in Tenant A, an attacker can register on Tenant B by altering the Host header, bypassing a UI-level signup disable because the underlying /signup API remains accessible and validate...