PT-2026-92581

Name of the Vulnerable Software and Affected Versions Oracle Internet Directory versions 12.2.1.4.0 Oracle Internet Directory versions 14.1.2.1.0 Description A flaw in the OID LDAP Server component of Oracle Fusion Middleware allows a low privileged attacker with network access via LDAP to...

PT-2026-92548

Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Identity...

PT-2026-92593

Name of the Vulnerable Software and Affected Versions Oracle Fusion Middleware Control versions 12.2.1.4.0 and 14.1.2.0.0 Description A flaw in the Framework component allows a low privileged attacker with network access via HTTP to compromise the system. Successful exploitation can lead to a...

PT-2026-92683

Vulnerability in the RDBMS component of Oracle Database Server. Supported versions that are affected are 23.4.0-23.26.3. Easily exploitable vulnerability allows low privileged attacker having Create Table privilege with network access via Oracle Net to compromise RDBMS. Successful attacks of this...

PT-2026-92641

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Applications DBA versions 12.2.3 through 12.2.15 Description A flaw in the AD Utilities component allows a high privileged attacker with network access via HTTP to compromise the Applications DBA product. Successful...

PT-2026-92653

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle Sales versions 12.2.3 through 12.2.15 Description A flaw in the Internal Operations component of Oracle Sales allows a low privileged attacker with network access via HTTP to compromise the system. This issue can...

PT-2026-92671

Name of the Vulnerable Software and Affected Versions Oracle Application Testing Suite version 13.3.0.1 Description A flaw in the software allows a low-privileged attacker with Test Manager for Web Apps privileges and network access via HTTP to compromise the system. A successful exploit can lead...

PT-2026-92702

Vulnerability in the Oracle Common Applications Calendar product of Oracle E-Business Suite component: Applications Calendar. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracl...

PT-2026-92691

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle Applications Manager versions 12.2.3 through 12.2.15 Description A flaw in the Oracle Diagnostics Interfaces component of the Oracle Applications Manager allows a low privileged attacker with network access via...

PT-2026-92731

Name of the Vulnerable Software and Affected Versions Oracle Siebel CRM versions 17.0 through 26.7 Description A flaw in the Migration component of the Siebel CRM Deployment product allows a low privileged attacker with network access via SQL to compromise the system. Successful exploitation can...

PT-2026-92899

Vulnerability in the Oracle Depot Repair product of Oracle E-Business Suite component: Estimate and Actual Charges. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Depot...

PT-2026-92451

Name of the Vulnerable Software and Affected Versions HPE Networking EdgeConnect SD-WAN Gateways affected versions not specified Description Buffer overflow vulnerabilities exist in the API endpoint of the system. A buffer overflow occurs when a program writes more data to a block of memory, or...

PT-2026-92859

Name of the Vulnerable Software and Affected Versions Oracle Middleware Common Libraries and Tools versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0 Description A flaw in the Remote Diagnostic Agent component allows a low privileged attacker with access to the infrastructure where the...

PT-2026-92525

Name of the Vulnerable Software and Affected Versions Oracle Access Manager versions 12.2.1.4.0 Oracle Access Manager versions 14.1.2.1.0 Description A flaw in the Authentication Engine component allows a high privileged attacker with network access via HTTP to compromise the system. Successful...

PT-2026-92752

Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM component: Siebel Management Console. Supported versions that are affected are 17.0-26.7. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Siebel CRM Deployment. Whil...

PT-2026-92483

Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via T3, IIOP to compromise Oracle Identity...

CVE-2026-90971: Incorrect Authorization

Server-Side Request Forgery SSRF in the VMware synchronization feature in Devolutions Server 2026.2.16 and earlier allows a low-privileged authenticated user to obtain other users' credentials and reach internal or cloud-metadata network endpoints via a crafted connection definition submitted for...

CVE-2026-83237: Exposure of Sensitive Information to an Unauthorized Actor

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce component: Forge. The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

CVE-2026-83413: Improper Access Control

Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle...

PT-2026-92857

Name of the Vulnerable Software and Affected Versions Oracle Business Intelligence Enterprise Edition Analytics Server version 8.2.0.0.0 Oracle Business Intelligence Enterprise Edition Analytics Server version 26.01.0.0.0 Description A flaw in the Analytics Server component allows a low privilege...