CVE-2026-62554: Improper Access Control

Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion component: Installation and Configuration. The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

CVE-2026-62628: Improper Access Control

Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware component: Security and Authentication. The supported version that is affected is 12.2.1.19.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via TCP to compromise Oracle Report...

CVE-2026-70735: Improper Access Control

Vulnerability in the Oracle Hyperion Profitability and Cost Management product of Oracle Hyperion component: Deployment. The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle...

CVE-2026-71110: Improper Privilege Management

Vulnerability in the Helidon product of Oracle Fusion Middleware component: Imperative Web Server. Supported versions that are affected are 1.0.0-1.4.18, 3.0.0-3.2.17 and 4.0.0-4.4.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTPS to compromise...

CVE-2026-71060: Improper Access Control

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion component: Security. The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Hyperion Financia...

PT-2026-78040

Name of the Vulnerable Software and Affected Versions Oracle Product Lifecycle Analytics version 3.6.1 Description An issue in the Installation Issues component allows a high privileged attacker with network access via Oracle Net to compromise the system. This flaw can lead to unauthorized access...

PT-2026-77720

Name of the Vulnerable Software and Affected Versions Oracle Hyperion Profitability and Cost Management version 11.2.25.0.000 Description A flaw in the Deployment component allows an unauthenticated attacker with network access via HTTP to compromise the system. Successful exploitation can lead t...

PT-2026-77476

Name of the Vulnerable Software and Affected Versions Oracle WebCenter Sites version 12.2.1.4.0 Oracle WebCenter Sites version 14.1.2.0.0 Description A flaw in the Oracle WebCenter Sites component of Oracle Fusion Middleware allows a low privileged attacker with network access via HTTP to...

PT-2026-77794

Name of the Vulnerable Software and Affected Versions Oracle SDP Number Portability versions 12.2.3 through 12.2.15 Description An issue exists in the Internal Operations component of the Oracle SDP Number Portability product within Oracle E-Business Suite. An unauthenticated attacker with networ...

PT-2026-77869

Name of the Vulnerable Software and Affected Versions Oracle Hyperion Data Relationship Management version 11.2.25.0.000 Description A flaw in the Access and security component allows a high privileged attacker with network access via HTTPS to compromise the system. Successful exploitation can le...

PT-2026-77875

Name of the Vulnerable Software and Affected Versions Oracle Hyperion Data Relationship Management version 11.2.25.0.000 Description A flaw in the Access and security component allows a low privileged attacker with network access via HTTP to compromise the system. Successful exploitation requires...

PT-2026-77948

Name of the Vulnerable Software and Affected Versions Oracle Hyperion Infrastructure Technology version 11.2.25.0.000 Description A flaw in the Installation and Configuration component allows a low privileged attacker with network access via HTTP to compromise the system. Successful exploitation...

PT-2026-77371

Name of the Vulnerable Software and Affected Versions Oracle Web Services Manager version 12.2.1.4.0 Oracle Web Services Manager version 14.1.2.0.0 Description An issue exists in the Web Services Security component of the Oracle Web Services Manager. An unauthenticated attacker with network acces...

PT-2026-77822

Name of the Vulnerable Software and Affected Versions Oracle MES for Process Manufacturing versions 12.2.3 through 12.2.15 Description A flaw in the Internal Operations component allows a low privileged attacker with network access via HTTP to compromise the system. This issue can lead to...

PT-2026-77546

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle Work in Process versions 12.2.3 through 12.2.15 Description A flaw in the Internal Operations component allows a low privileged attacker with network access via HTTP to compromise the system. This can lead to a...

PT-2026-77538

Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion component: Security. The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hyperion Calculation...

PT-2026-77816

Name of the Vulnerable Software and Affected Versions Oracle Hyperion Financial Management version 11.2.25.0.000 Description A security flaw in the Security component allows a low privileged attacker with network access via SQL to compromise the system. Successful exploitation can lead to a...

PT-2026-77712

Name of the Vulnerable Software and Affected Versions Oracle iSetup versions 12.2.3 through 12.2.15 Description An issue exists in the General Ledger Update Transform, Reports component of Oracle iSetup. A low privileged attacker with network access via HTTP can compromise the system, potentially...

PT-2026-78003

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce component: Experience Manager. The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...

PT-2026-77139

Name of the Vulnerable Software and Affected Versions RAGFlow versions prior to 0.26.3 Description A server-side request forgery SSRF issue exists in the agent workflow "Invoke" component located in agent/component/invoke.py. The component constructs outbound request URLs using canvas configurati...