EUVD-2026-47156

Vulnerability in the Oracle Advanced Pricing product of Oracle E-Business Suite component: Pricing Installation. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Advanced...

EUVD-2026-47157

Vulnerability in the Oracle Advanced Pricing product of Oracle E-Business Suite component: Pricing Installation. Supported versions that are affected are 12.2.14-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Advanced...

EUVD-2026-47154

Vulnerability in the Oracle Advanced Pricing product of Oracle E-Business Suite component: Pricing Installation. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Advanced...

EUVD-2026-47158

Vulnerability in the Oracle Advanced Pricing product of Oracle E-Business Suite component: Pricing Installation. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Advanced...

EUVD-2026-46883

Vulnerability in the Oracle Advanced Pricing product of Oracle E-Business Suite component: Price List. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Advanced Pricing...

EUVD-2026-46874

Vulnerability in the JD Edwards EnterpriseOne Advanced Pricing - Procurement product of Oracle JD Edwards component: Advanced Pricing. The supported version that is affected is 9.2. Difficult to exploit vulnerability allows low privileged attacker with network access via JDENET to compromise JD...

EUVD-2026-46496

Vulnerability in the Oracle Communications Pricing Design Center product of Oracle Communications component: On-premise Deployment. Supported versions that are affected are 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0 and 15.2.0.0.0. Easily exploitable vulnerability allows low privileged attacker with logo...

CVE-2026-60863

Vulnerability in the Oracle Advanced Pricing product of Oracle E-Business Suite component: Pricing Installation. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Advanced...

CVE-2026-60870

Vulnerability in the Oracle Advanced Pricing product of Oracle E-Business Suite component: Pricing Installation. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Advanced...

CVE-2026-60867

Vulnerability in the Oracle Advanced Pricing product of Oracle E-Business Suite component: Pricing Installation. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Advanced...

CVE-2026-60868

Vulnerability in the Oracle Advanced Pricing product of Oracle E-Business Suite component: Pricing Installation. Supported versions that are affected are 12.2.14-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Advanced...

CVE-2026-60521

Vulnerability in the Oracle Advanced Pricing product of Oracle E-Business Suite component: Price List. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Advanced Pricing...

CVE-2026-60496

Vulnerability in the JD Edwards EnterpriseOne Advanced Pricing - Procurement product of Oracle JD Edwards component: Advanced Pricing. The supported version that is affected is 9.2. Difficult to exploit vulnerability allows low privileged attacker with network access via JDENET to compromise JD...

CVE-2026-47007

Vulnerability in the Oracle Communications Pricing Design Center product of Oracle Communications component: On-premise Deployment. Supported versions that are affected are 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0 and 15.2.0.0.0. Easily exploitable vulnerability allows low privileged attacker with logo...

PT-2026-62834

Name of the Vulnerable Software and Affected Versions Oracle Advanced Pricing versions 12.2.14 through 12.2.15 Description An issue exists in the Pricing Installation component of Oracle Advanced Pricing within Oracle E-Business Suite. A low privileged attacker with network access via HTTP can...

PT-2026-62833

Name of the Vulnerable Software and Affected Versions Oracle Advanced Pricing versions 12.2.3 through 12.2.15 Description A flaw in the Pricing Installation component allows a low privileged attacker with network access via HTTP to compromise the system. Successful exploitation can lead to...

PT-2026-62831

Name of the Vulnerable Software and Affected Versions Oracle Advanced Pricing versions 12.2.3 through 12.2.15 Description An issue exists in the Pricing Installation component of the Oracle Advanced Pricing product within Oracle E-Business Suite. A low privileged attacker with network access via...

PT-2026-62172

Name of the Vulnerable Software and Affected Versions Oracle Communications Pricing Design Center versions 15.0.0.0.0 through 15.2.0.0.0 Description A flaw in the On-premise Deployment component allows a low-privileged attacker with access to the infrastructure where the software executes to...

PT-2026-62835

Name of the Vulnerable Software and Affected Versions Oracle Advanced Pricing versions 12.2.3 through 12.2.15 Description A flaw in the Pricing Installation component allows a low privileged attacker with network access via HTTP to compromise the system. This can lead to unauthorized access to...

Forg365 PhaaS Targets Microsoft 365 with Device Code and AitM Session Theft

A new phishing-as-a-service PhaaS operation called Forg365 is using a combination of device code phishing, adversary-in-the-middle AitM tactics, antibot evasion, artificial intelligence AI-assisted lure creation, and post-compromise mailbox operations targeting Microsoft 365 accounts. Distributed...