The vulnerability of the Content Server component of the Oracle WebCenter Content user interaction platform allows a perpetrator to gain full control over the application.

The vulnerability of the Content Server component of the Oracle WebCenter Content user interaction platform relates to the absence of authentication for a critical function. Exploiting this vulnerability could allow an attacker to gain full control over the application using the HTTP network...

The vulnerability of the Client Bundle component of the Oracle WebCenter Enterprise Capture software platform for automatic scanning, recognition, and digitization of documents allows a intruder to gain full control over the system.

The vulnerability of the Client Bundle component of the Oracle WebCenter Enterprise Capture software platform for automatic scanning, recognition, and digitization of documents is related to access control errors. Exploiting this vulnerability could allow a malicious actor to gain full control ov...

The vulnerability of the Client Bundle component of the Oracle WebCenter Enterprise Capture software platform for automatic scanning, recognition, and digitization of documents allows a intruder to gain full control over the system.

The vulnerability of the Client Bundle component of the Oracle WebCenter Enterprise Capture software platform for automatic scanning, recognition, and digitization of documents is related to access control errors. Exploiting this vulnerability could allow a malicious actor to gain full control ov...

The vulnerability of the Client Bundle component of the Oracle WebCenter Enterprise Capture software platform for automatic scanning, recognition, and digitization of documents allows a intruder to gain full control over the system.

The vulnerability of the Client Bundle component of the Oracle WebCenter Enterprise Capture software platform for automatic scanning, recognition, and digitization of documents is related to access control errors. Exploiting this vulnerability could allow an attacker to gain full control over the...

kernel security, bug fix, and enhancement update

5.14.0-687.31.1 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug:...

IBM Java 7.1 < 7.1.5.31 / 8.0 < 8.0.8.70 Multiple Vulnerabilities

The version of IBM Java installed on the remote host is 7.1 prior to 7.1.5.31 / 8.0 prior to 8.0.8.70. It is, therefore, affected by multiple vulnerabilities as referenced in the Oracle July 21 2026 CPU advisory. - Little CMS lcms2 through 2.18 has an integer overflow in CubeSize in cmslut.c...

Oracle Linux 8 : resource-agents (ELSA-2026-47126)

The remote Oracle Linux 8 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-47126 advisory. 4.9.0-54.36 - bundled urllib3: fix CVE-2026-44431 Resolves: RHEL-178598 Tenable has extracted the preceding description block directly from the Oracle Linux...

kernel security, bug fix, and enhancement update

6.12.0-211.40.1 - Add new Oracle Linux Driver Signing key 1 certificate Orabug: 37985782 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list...

firefox security update

140.13.0-1.0.1 - Fix firefox-oracle-default-prefs.js for new nss Orabug: 37079773 - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file 140.13.0 - Add debranding patches Mustafa Gezen - Add OpenELA default preferences Louis Abel 140.13.0-1 - Update to 140.13.0 ESR...

PT-2026-67508

Name of the Vulnerable Software and Affected Versions Sequelize versions prior to 6.37.4 Description SQL injection is possible when the dialect is set to oracle. The escape function in sql-string.js fails to escape single quotes if the input string starts with TO TIMESTAMP or TO DATE, returning t...

kernel security, bug fix, and enhancement update

5.14.0-687.30.1 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug:...

kernel security update

6.12.0-211.39.1 - Add new Oracle Linux Driver Signing key 1 certificate Orabug: 37985782 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list...

PT-2026-65702

A post-authentication SQL injection vulnerability in Koollab LMS allowed an authenticated attacker to use an error-based SQL oracle via the face-to-face runs update endpoint to read the entire application database and obtain valid JWT tokens for account takeover...

Oracle Linux 9 : yelp (ELSA-2026-47178)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-47178 advisory. 2:40.3-3.1 - Fix CVE-2026-13601 RHEL-190224 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that...

The vulnerability of the Client Bundle component of the Oracle WebCenter Enterprise Capture software platform, which is used for automatic scanning, recognition, and digitization of documents, allows a intruder to gain full control over the system.

The vulnerability of the Client Bundle component of the Oracle WebCenter Enterprise Capture software platform for automatic scanning, recognition, and digitization of documents is related to the lack of authentication for a critical function. Exploiting this vulnerability could allow an attacker...

The vulnerability of the Client Bundle component of the Oracle WebCenter Enterprise Capture software platform for automatic scanning, recognition, and digitization of documents allows a intruder to gain full control over the system.

The vulnerability of the Client Bundle component of the Oracle WebCenter Enterprise Capture software platform for automatic scanning, recognition, and digitization of documents is related to access control errors. Exploiting this vulnerability could allow an attacker to gain full control over the...

The vulnerability of the Client Bundle component of the Oracle WebCenter Enterprise Capture software platform for automatic scanning, recognition, and digitization of documents allows a intruder to gain full control over the system.

The vulnerability of the Client Bundle component of the Oracle WebCenter Enterprise Capture software platform for automatic scanning, recognition, and digitization of documents is related to the lack of authentication for a critical function. Exploiting this vulnerability could allow an attacker...

The vulnerability of the Client Bundle component of the Oracle WebCenter Enterprise Capture software platform for automatic scanning, recognition, and digitization of documents allows a intruder to gain full control over the system.

The vulnerability of the Client Bundle component of the Oracle WebCenter Enterprise Capture software platform for automatic scanning, recognition, and digitization of documents is related to access control errors. Exploiting this vulnerability could allow an attacker to gain full control over the...

Oracle Linux 8 : firefox (ELSA-2026-47105)

The remote Oracle Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2026-47105 advisory. 140.13.0-1.0.1 - Fix firefox-oracle-default-prefs.js for new nss Orabug: 37079789 - diable wasisdk to prevent build failure with newer llvm 140.13.0 -...

Oracle Linux 8 : compat-libtiff3 (ELSA-2026-47183)

The remote Oracle Linux 8 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-47183 advisory. 3.9.4-16 - fix CVE-2026-12912: heap-buffer-overflow in PixarLog ABGR decoding RHEL-189375 Tenable has extracted the preceding description block directly from t...