CVE-2026-95773

A denial-of-service vulnerability has been identified in HPE Networking Fabric Composer. Successful exploitation of this vulnerability could allow a low-privileged local attacker to cause a partial denial-of-service condition affecting other workloads on the same host...

EUVD-2026-116190

A denial-of-service vulnerability has been identified in HPE Networking Fabric Composer. Successful exploitation of this vulnerability could allow a low-privileged local attacker to cause a partial denial-of-service condition affecting other workloads on the same host...

Security Bulletin: IBM MQ is affected by multiple Java vulnerabilities (CVE-2026-61308,CVE-2026-70907,CVE-2026-60589)

Summary Multiple issues were identified with the IBM Runtime Environment, Java Technology Edition which is shipped with IBM MQ Vulnerability Details CVEID:CVE-2026-61308 DESCRIPTION: Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Java...

Oracle Trusted Answer Search security vulnerability

Oracle Trusted Answer Search version 26.1 contains a security vulnerability stemming from issues with the PLSQL package component. Exploited by attackers with low privileges, this vulnerability allows them to log in and execute infrastructure tasks requiring user interaction. It may lead to...

Oracle PeopleSoft Enterprise HCM Global Payroll Switzerland security vulnerability

Oracle PeopleSoft Enterprise HCM Global Payroll Switzerland version 9.2 contains a security vulnerability stemming from issues within the Global Payroll for Switzerland component. This vulnerability may allow privileged attackers to log in and execute infrastructure tasks, perform unauthorized...

Oracle JD Edwards EnterpriseOne Tools security vulnerabilities

Oracle JD Edwards EnterpriseOne Tools versions 9.2.0.0 to 9.2.26.5 have security vulnerabilities. These vulnerabilities stem from issues with the Business Logic Infra SEC component. They may allow low-privilege attackers to access JDENET via the network, enabling unauthorized access to certain...

Oracle Siebel CRM Deployment Security Vulnerabilities

The Oracle Siebel CRM deployment from version 17.0 to 26.9 has security vulnerabilities. These vulnerabilities stem from issues with the Server Infrastructure component. They may allow low-privilege attackers to access critical data and all accessible data through the HTTP network. Unauthorized...

Oracle Agile Engineering Data Management security vulnerabilities

Oracle Agile Engineering Data Management version 6.2.1 has a security vulnerability. This vulnerability stems from issues with the Engineering Communication Interface component. It may allow low-privilege attackers to access data via the HTTP network. These attackers are not authorized to create,...

Vulnerability related to permission and access control issues in Oracle Partner Management

Versions 12.2.3 through 12.2.15 of Oracle Partner Management contain a vulnerability related to permission and access control issues. This vulnerability stems from an issue within the Internal Operations component. It may allow attackers with limited privileges to access via HTTPS, thereby...

Oracle Helidon security vulnerabilities

Oracle Helidon versions 4.0.0 to 4.5.5 have security vulnerabilities. These vulnerabilities stem from issues with the LRA component, which may allow unauthenticated attackers to access through the HTTP network. Unauthorized updates, insertions, or deletions of certain data are possible, as well a...

Oracle Helidon security vulnerabilities

Oracle Helidon versions 4.0.0 to 4.5.5 and 27.0.0 have security vulnerabilities. These vulnerabilities stem from issues with the helidon-webclient-dns-resolver-round-robin component. They may allow unauthorized attackers to access the DNS network, enabling them to update, insert, or delete certai...

Oracle Product Lifecycle Analytics security vulnerabilities

Oracle Product Lifecycle Analytics 3.6.1 has a security vulnerability. This vulnerability stems from issues with the Installation Issues component. It may allow low-privilege attackers to log in and access critical data or all data, without proper authorization, and may cause partial...

Oracle JD Edwards EnterpriseOne Tools security vulnerabilities

A security vulnerability exists in Oracle JD Edwards EnterpriseOne Tools versions 9.2.0.0 through 9.2.26.5. This vulnerability stems from issues within the Business Logic Infra SEC component and may allow low-privilege attackers to access via the JDENET network, potentially leading to partial...

Oracle Siebel Apps – Marketing security vulnerabilities

Oracle Siebel Apps – Versions 17.0 to 26.9 have security vulnerabilities. These vulnerabilities stem from issues with the Marketing component. They could allow attackers with high privileges to log in and execute infrastructure-related tasks. Unauthorized updates, insertions, or deletions of...

Oracle JD Edwards EnterpriseOne Tools security vulnerabilities

Oracle JD Edwards EnterpriseOne Tools versions 9.2.0.0 to 9.2.26.5 have security vulnerabilities. These vulnerabilities stem from issues with the Enterprise Infrastructure SEC component. They may allow unauthorized attackers to access through the SMTP network, to perform unauthorized updates,...

Oracle Capacity security vulnerabilities

Oracle Capacity versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Internal Operations component. They may allow low-privilege attackers to access critical data via the HTTP network, unauthorized access to all data, unauthorized updates,...

Astra Linux – vulnerability in openjdk-11

A vulnerability exists in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Lightweight HTTP Server. Affected versions include Oracle Java SE: 8u341, 8u345-perf, 11.0.16.1, 17.0.4.1, and 19; Oracle GraalVM Enterprise Edition: 20.3.7, 21.3.3, and 22.2.0. Th...

Astra Linux – vulnerability in openjdk-11

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Concurrency. Affected versions include Oracle Java SE: 8u401, 8u401-perf, 11.0.22; Oracle GraalVM Enterprise Edition: 20.3.13 and 21.3.9. Exploitation is difficult, allowing unauthenticated...

Astra Linux – vulnerability in openjdk-11

Vulnerability in Oracle Java SE, Oracle GraalVM Enterprise Edition, and Oracle GraalVM for JDK products developed by Oracle Java SE component: Utility. Affected versions include Oracle Java SE: 11.0.19, 17.0.7, 20.0.1; Oracle GraalVM Enterprise Edition: 20.3.10, 21.3.6, 22.3.2; and Oracle GraalVM...

Astra Linux – vulnerability in openjdk-11

Vulnerability in Oracle Java SE, Oracle GraalVM for JDK, and Oracle GraalVM Enterprise Edition products under Oracle Java SE component: Hotspot. Affected versions include Oracle Java SE: 8u411, 8u411-perf, 11.0.23, 17.0.11, 21.0.3, 22.0.1; Oracle GraalVM for JDK: 17.0.11, 21.0.3, 22.0.1; Oracle...