CVE-2026-83125

Vulnerability in the Oracle Report Manager product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Report Manager...

CVE-2026-83122

Vulnerability in the Oracle Report Manager product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTPS to compromise Oracle Report Manager...

CVE-2026-83123

Vulnerability in the Oracle Report Manager product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTPS to compromise Oracle Report Manager...

CVE-2026-83017

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft component: Report Distribution. Supported versions that are affected are 8.61-8.63. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise...

CVE-2026-87126

Oracle Report Manager (component: Reports Security ) in Oracle E-Business Suite versions 12.2.3 through 12.2.15 contains a network-exploitable vulnerability accessible via HTTP. A low-privileged attacker with network access can compromise the component, resulting in unauthorized access to critica...

EUVD-2026-79781

Vulnerability in the Oracle Report Manager product of Oracle E-Business Suite component: Reports Security. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Report Manager...

EUVD-2026-79453

Vulnerability in the Oracle Report Manager product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Report Manager...

CVE-2026-83125

Oracle Report Manager (component: Internal Operations ) within Oracle E-Business Suite versions 12.2.3 through 12.2.15 is affected by a network-exploitable vulnerability. A low-privileged attacker with network access via HTTP can compromise the component, resulting in a takeover of Oracle Report ...

EUVD-2026-79450

Vulnerability in the Oracle Report Manager product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTPS to compromise Oracle Report Manager...

CVE-2026-83122

Oracle Report Manager , a component of Oracle E-Business Suite (specifically the Internal Operations component), is affected by an easily exploitable vulnerability in supported versions 12.2.3 through 12.2.15 . A low-privileged attacker with network access via HTTPS can exploit this flaw to achie...

CVE-2026-83123

Oracle Report Manager , a component of Oracle E-Business Suite (specifically the Internal Operations module), is affected in supported versions 12.2.3 through 12.2.15 . The vulnerability is easily exploitable by a low-privileged attacker with network access via HTTPS , requiring no user interacti...

EUVD-2026-79451

Vulnerability in the Oracle Report Manager product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTPS to compromise Oracle Report Manager...

EUVD-2026-79345

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft component: Report Distribution. Supported versions that are affected are 8.61-8.63. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise...

CVE-2026-83017

Oracle PeopleSoft Enterprise PeopleTools is affected in the Report Distribution component, versions 8.61 through 8.63 . A low-privileged attacker with network access via HTTP can exploit this vulnerability to achieve a full takeover of the application, with high impact on confidentiality, integri...

CVE-2026-69204

creationtimestamp| type| source ---|---|--- 2026-09-15 20:00:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvlfzmp5aa2j 2026-09-15 20:08:59+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mvlgjjnm5o2j...

CVE-2026-57441

creationtimestamp| type| source ---|---|--- 2026-09-15 19:17:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/j6fmivvfzeosh...

CVE-2024-58385

creationtimestamp| type| source ---|---|--- 2026-09-15 18:08:24+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mvl7rweto62j 2026-09-15 18:30:08+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvlayru7v62j 2026-09-15 21:20:17+00:00| seen|...

CVE-2026-81896 Concrete CMS below version 9.5.3 is vulnerable to Stored XSS in Concrete CMS Form Submissions Report via Unescaped Question Label

Concrete CMS before 9.5.3 does not apply HTML entity encoding to user-defined Form block question labels when rendering them as column headers in the Dashboard Form Submissions report concrete/singlepages/dashboard/reports/forms/legacy.php. a rogue editor could store markup or script in a label...

CVE-2026-81896 Concrete CMS below version 9.5.3 is vulnerable to Stored XSS in Concrete CMS Form Submissions Report via Unescaped Question Label

Concrete CMS before 9.5.3 does not apply HTML entity encoding to user-defined Form block question labels when rendering them as column headers in the Dashboard Form Submissions report concrete/singlepages/dashboard/reports/forms/legacy.php. a rogue editor could store markup or script in a label...

CVE-2026-81896 Concrete CMS below version 9.5.3 is vulnerable to Stored XSS in Concrete CMS Form Submissions Report via Unescaped Question Label

Concrete CMS before 9.5.3 does not apply HTML entity encoding to user-defined Form block question labels when rendering them as column headers in the Dashboard Form Submissions report concrete/singlepages/dashboard/reports/forms/legacy.php. a rogue editor could store markup or script in a label...