CVE-2026-101686

A vulnerability exists in the SOA Provider component of Oracle E-Business Suite Integrated SOA Gateway (affected versions 12.2.3-12.2.15 ). A low-privileged attacker with network access via HTTP can exploit this flaw to compromise the gateway, potentially resulting in a complete takeover of the p...

CVE-2026-101684

The Oracle E-Business Suite Integrated SOA Gateway (component: Internal Operations ) is affected by a high-severity vulnerability in versions 12.2.3-12.2.15 . A low-privileged attacker with network access via HTTP can easily exploit this flaw to compromise the gateway. Successful exploitation may...

CVE-2026-101685

The Oracle E-Business Suite Integrated SOA Gateway product is affected by a vulnerability in the SOA Provider component. This issue impacts supported versions 12.2.3-12.2.15 . A low-privileged attacker with network access via HTTP can easily exploit this vulnerability to compromise the gateway, p...

Linux Distros Unpatched Vulnerability : CVE-2026-112274

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libtins through 4.6 contains an out-of-bounds read vulnerability in DNS::soarecord::init that allows remote attackers to read past buffer bounds by supplying SO...

PT-2026-119748

Name of the Vulnerable Software and Affected Versions Oracle SOA Suite versions 12.2.1.4.0 and 14.1.2.0.0 Description An unauthenticated attacker with network access via T3 and IIOP can compromise the Fabric Layer component of the Oracle SOA Suite. Successful exploitation allows for a full takeov...

PT-2026-119746

Name of the Vulnerable Software and Affected Versions Oracle SOA Suite versions 12.2.1.4.0 Oracle SOA Suite versions 14.1.2.0.0 Description A flaw in the Fabric Layer component of Oracle Fusion Middleware allows an unauthenticated attacker with network access via HTTP to compromise the system...

PT-2026-119763

Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware component: Adapters. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle SOA Suite. While th...

PT-2026-119767

Name of the Vulnerable Software and Affected Versions Oracle SOA Suite versions 12.2.1.4.0 Oracle SOA Suite versions 14.1.2.0.0 Description A flaw in the Fabric Layer component of the Oracle SOA Suite allows an unauthenticated attacker with network access via HTTP to compromise the system...

PT-2026-119768

Name of the Vulnerable Software and Affected Versions Oracle SOA Suite versions 12.2.1.4.0 Oracle SOA Suite versions 14.1.2.0.0 Description An issue exists in the Fabric Layer component of the Oracle SOA Suite within Oracle Fusion Middleware. An unauthenticated attacker with network access via HT...

PT-2026-119765

Name of the Vulnerable Software and Affected Versions Oracle SOA Suite versions 12.2.1.4.0 Oracle SOA Suite versions 14.1.2.0.0 Description An issue exists in the Enterprise Scheduling System component of Oracle Fusion Middleware. An unauthenticated attacker with network access via SOAP can...

Oracle E-Business Suite: CVE-2026-101690: Critical Patch Update

Vulnerability in the Oracle E-Business Suite Integrated SOA Gateway product of Oracle E-Business Suite component: SOA Provider. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Orac...

Oracle E-Business Suite: CVE-2026-101685: Critical Patch Update

Vulnerability in the Oracle E-Business Suite Integrated SOA Gateway product of Oracle E-Business Suite component: SOA Provider. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracl...

Oracle E-Business Suite: CVE-2026-101684: Critical Patch Update

Vulnerability in the Oracle E-Business Suite Integrated SOA Gateway product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromis...

Oracle E-Business Suite: CVE-2026-101688: Critical Patch Update

Vulnerability in the Oracle E-Business Suite Integrated SOA Gateway product of Oracle E-Business Suite component: SOA Provider. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Orac...

Oracle E-Business Suite: CVE-2026-101689: Critical Patch Update

Vulnerability in the Oracle E-Business Suite Integrated SOA Gateway product of Oracle E-Business Suite component: SOA Provider. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracl...

Oracle E-Business Suite: CVE-2026-101686: Critical Patch Update

Vulnerability in the Oracle E-Business Suite Integrated SOA Gateway product of Oracle E-Business Suite component: SOA Provider. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracl...

Oracle E-Business Suite: CVE-2026-101687: Critical Patch Update

Vulnerability in the Oracle E-Business Suite Integrated SOA Gateway product of Oracle E-Business Suite component: SOA Provider. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise...

PT-2026-119753

Name of the Vulnerable Software and Affected Versions Oracle SOA Suite versions 12.2.1.4.0 and 14.1.2.0.0 Description An unauthenticated attacker with network access via T3 and IIOP protocols can compromise the Fabric Layer component of the Oracle SOA Suite. Successful exploitation allows for a...

CVE-2026-112274

A flaw was found in libtins. An out-of-bounds read vulnerability in DNS::soarecord::init allows remote attackers to read past buffer bounds by supplying SOA data lacking NUL terminators. Attackers can feed raw SOA RDATA without a zero byte to applications using the buffer constructor, causing...

CVE-2026-112274

libtins through 4.6 contains an out-of-bounds read vulnerability in DNS::soarecord::init that allows remote attackers to read past buffer bounds by supplying SOA data lacking NUL terminators. Attackers can feed raw SOA RDATA without a zero byte to applications using the buffer constructor, causin...