PT-2026-77987

Name of the Vulnerable Software and Affected Versions Oracle Commerce Guided Search / Oracle Commerce Experience Manager version 11.4.0 Description A flaw in the Endeca Application Controller component allows an unauthenticated attacker with network access via HTTP to compromise the system...

PT-2026-78036

Name of the Vulnerable Software and Affected Versions Oracle Agile PLM version 9.3.6 Description An issue in the Security component of the Oracle Agile PLM product allows an unauthenticated attacker with network access via HTTP to compromise the system. Exploitation requires human interaction fro...

PT-2026-78045

Name of the Vulnerable Software and Affected Versions Oracle Business Intelligence Enterprise Edition version 8.2.0.0.0 Oracle Business Intelligence Enterprise Edition version 12.2.1.4.0 Oracle Business Intelligence Enterprise Edition version 26.01.0.0.0 Description A flaw in the BI Search...

PT-2026-78000

Name of the Vulnerable Software and Affected Versions Oracle Commerce Guided Search / Oracle Commerce Experience Manager version 11.4.0 Description An issue in the Experience Manager component allows an unauthenticated attacker with network access via HTTP to compromise the system. Successful...

PT-2026-78042

Name of the Vulnerable Software and Affected Versions Oracle Agile Engineering Data Management version 6.2.1 Description A flaw exists in the Web Services Security component of the Oracle Agile Engineering Data Management product. A low privileged attacker with network access via HTTP can exploit...

PT-2026-78059

Name of the Vulnerable Software and Affected Versions Oracle Agile PLM MCAD Connector version 3.6 Description A flaw in the CAX Client component allows a low privileged attacker with network access via HTTP to compromise the system. Successful exploitation can lead to unauthorized access to...

PT-2026-78079

Name of the Vulnerable Software and Affected Versions Oracle Hyperion Financial Management version 11.2.25.0.000 Description A security flaw in the Security component allows a high privileged attacker with network access via SQL to compromise the system. Successful exploitation can lead to...

PT-2026-78083

Name of the Vulnerable Software and Affected Versions Oracle Business Intelligence Enterprise Edition version 8.2.0.0.0 Oracle Business Intelligence Enterprise Edition version 12.2.1.4.0 Oracle Business Intelligence Enterprise Edition version 26.01.0.0.0 Description A flaw in the BI Platform...

PT-2026-78076

Name of the Vulnerable Software and Affected Versions Oracle Agile PLM MCAD Connector version 3.6 Description A flaw in the CAX Client component allows a low-privileged attacker with network access via HTTP to compromise the system. Exploitation is difficult and requires human interaction from a...

PT-2026-78147

Name of the Vulnerable Software and Affected Versions Oracle Fusion Middleware Helidon versions 3.0.0 through 3.2.18 Description A flaw in the Imperative Web Server component allows an unauthenticated attacker with network access via HTTP to compromise the system. This can result in a partial...

PT-2026-78141

Name of the Vulnerable Software and Affected Versions Oracle Fusion Middleware Helidon version 3.2.18 Description A flaw in the Imperative Web Server component allows a low privileged attacker with network access via HTTP to compromise the system. This issue can lead to unauthorized access to...

PT-2026-78129

Name of the Vulnerable Software and Affected Versions Oracle Communications Unified Inventory Management versions 7.5.0 through 8.0.1 Description An unauthenticated attacker with network access via HTTP can compromise the system. This issue allows for unauthorized access, creation, deletion, or...

PT-2026-78191

Name of the Vulnerable Software and Affected Versions Oracle Fusion Middleware Helidon versions 3.0.0 through 3.2.19 Description A flaw in the Imperative Web Server component allows an unauthenticated attacker with network access via HTTP to compromise the system. This can lead to a hang or a...

PT-2026-78159

Name of the Vulnerable Software and Affected Versions Oracle Fusion Middleware Helidon version 4.5.0 Description A flaw in the Imperative Web Server component allows an unauthenticated attacker with network access via HTTP to compromise the system. Exploitation requires human interaction and can...

PT-2026-77735

Name of the Vulnerable Software and Affected Versions Oracle Hyperion Profitability and Cost Management version 11.2.25.0.000 Description A flaw in the Deployment component allows a low privileged attacker with network access via HTTP to compromise the system. Successful exploitation can lead to...

PT-2026-77745

Name of the Vulnerable Software and Affected Versions Oracle Hyperion Financial Reporting version 11.2.25.0.000 Description An unauthenticated attacker with network access via HTTP can compromise the Oracle Hyperion Financial Reporting Server. This issue requires human interaction from a person...

PT-2026-77796

Name of the Vulnerable Software and Affected Versions Oracle Flow Manufacturing versions 12.2.3 through 12.2.15 Description An issue exists in the Internal Operations component of the Oracle Flow Manufacturing product of Oracle E-Business Suite. A low privileged attacker with network access via...

PT-2026-77766

Name of the Vulnerable Software and Affected Versions Oracle Warehouse Management versions 12.2.3 through 12.2.15 Description A flaw in the Internal Operations component allows a low privileged attacker with network access via HTTPS to compromise the system. This issue can lead to unauthorized...

PT-2026-77843

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion component: Security. The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hyperion Financia...

PT-2026-77841

Name of the Vulnerable Software and Affected Versions Oracle Demand Planning versions 12.1 and 12.2 Description An issue exists in the Internal Operations component of the Oracle Demand Planning product of Oracle Supply Chain. A low privileged attacker with network access via HTTP can compromise...