PT-2026-77508

Name of the Vulnerable Software and Affected Versions Oracle Enterprise Manager Base Platform version 13.5 Oracle Enterprise Manager Base Platform version 24.1 Description A flaw in the Application Config Console component allows a low privileged attacker with network access via HTTP to compromis...

PT-2026-77571

Name of the Vulnerable Software and Affected Versions Oracle Hyperion Infrastructure Technology version 11.2.25.0.000 Description An issue in the Common Security component allows an unauthenticated attacker with network access via HTTP to compromise the system. Exploitation requires human...

PT-2026-77596

Name of the Vulnerable Software and Affected Versions Oracle Hyperion Infrastructure Technology version 11.2.25.0.000 Description An unauthenticated attacker with network access via HTTP can compromise the Installation and Configuration component of Oracle Hyperion Infrastructure Technology. This...

PT-2026-77592

Name of the Vulnerable Software and Affected Versions Oracle Hyperion Infrastructure Technology version 11.2.25.0.000 Description An issue in the Installation and Configuration component allows a high privileged attacker with network access via SQL to compromise the system. Successful exploitatio...

PT-2026-77591

Name of the Vulnerable Software and Affected Versions Oracle Hyperion Infrastructure Technology version 11.2.25.0.000 Description An issue exists in the Installation and Configuration component of Oracle Hyperion Infrastructure Technology. An unauthenticated attacker with network access via HTTP...

PT-2026-77561

Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion component: Common Events. The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hyperion...

PT-2026-77384

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle General Ledger versions 12.2.3 through 12.2.15 Description An issue exists in the Internal Operations component of the Oracle General Ledger product. A low privileged attacker with network access via HTTP can...

PT-2026-77392

Name of the Vulnerable Software and Affected Versions Oracle Siebel CRM versions 17.0 through 26.6 Description A flaw in the Migration component of the Siebel CRM Deployment product allows a low privileged attacker with network access via HTTP to compromise the system. This issue can lead to...

PT-2026-77371

Name of the Vulnerable Software and Affected Versions Oracle Web Services Manager version 12.2.1.4.0 Oracle Web Services Manager version 14.1.2.0.0 Description An issue exists in the Web Services Security component of the Oracle Web Services Manager. An unauthenticated attacker with network acces...

PT-2026-77374

Name of the Vulnerable Software and Affected Versions Oracle Siebel CRM Siebel Apps - Marketing versions 17.0 through 26.6 Description A flaw in the Marketing component of Oracle Siebel CRM allows a low privileged attacker with network access via HTTP to compromise the system. Successful...

PT-2026-77364

Name of the Vulnerable Software and Affected Versions Oracle Access Manager versions 12.2.1.4.0 Oracle Access Manager versions 14.1.2.1.0 Description A flaw in the Authentication Engine component of Oracle Fusion Middleware allows a low privileged attacker with network access via HTTP to compromi...

PT-2026-77572

Name of the Vulnerable Software and Affected Versions Oracle Hyperion Infrastructure Technology version 11.2.25.0.000 Description A flaw in the Common Security component allows a high privileged attacker with network access via HTTP to compromise the system. Successful exploitation can lead to...

PT-2026-77399

Name of the Vulnerable Software and Affected Versions Oracle PeopleSoft PeopleSoft Enterprise PeopleTools versions 8.61 through 8.63 Description A flaw in the Integration Broker component allows an unauthenticated attacker with network access via HTTP to compromise the system. Successful...

PT-2026-77369

Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware component: Composer. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via RMI to compromise Oracle WebCenter...

PT-2026-77375

Name of the Vulnerable Software and Affected Versions Oracle Siebel CRM Siebel Apps - Marketing versions 17.0 through 26.6 Description A flaw in the Marketing component allows a low privileged attacker with network access via HTTP to compromise the system. This can lead to unauthorized access to...

PT-2026-77379

Name of the Vulnerable Software and Affected Versions Oracle Siebel CRM Siebel Artificial Intelligence versions 25.12 through 26.6 Description A flaw in the AI component allows a low privileged attacker with network access via HTTP to compromise the system. This issue can lead to unauthorized...

CVE-2026-71052: Improper Access Control

Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain component: Web Services Security. The supported version that is affected is 6.2.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Agile...

VMware vCenter Server 8.0 < 8.0 U3k / 9.0.x < 9.0.2.0100 / 9.1.x < 9.1.0.0200 Authentication Bypass (VMSA-2026-0006)

The version of VMware vCenter Server installed on the remote host is 8.0 prior to 8.0 Update 3k, or 9.0.x prior to 9.0.2.0100, or 9.1.x prior to 9.1.0.0200. It is, therefore, affected by a vulnerability as referenced in the VMSA-2026-0006.1 advisory: - VMware vCenter contains an authentication...

Zoom Workplace VDI Client < 6.6.16 / 7.0.11 Vulnerability (ZSB-26017)

The version of Zoom Workplace VDI Client installed on the remote host is prior to 6.6.16 / 7.0.11. It is, therefore, affected by a vulnerability as referenced in the ZSB-26017 advisory. - Use after Free in the annotator function of Zoom Clients may allow a meeting participant to achieve remote co...

PT-2026-77984

Name of the Vulnerable Software and Affected Versions Oracle Commerce Guided Search / Oracle Commerce Experience Manager version 11.4.0 Description A flaw in the Content Acquisition System component allows an unauthenticated attacker with network access via HTTP to compromise the system. This can...