CVE-2026-70915

Oracle Identity Manager (part of Oracle Fusion Middleware, component Core ) is affected in versions 12.2.1.4.0 and 14.1.2.1.0 . A low-privileged attacker with network access via T3 or IIOP can exploit this vulnerability with low complexity and no user interaction to achieve full takeover of the p...

EUVD-2026-79514

Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via T3, IIOP to compromise Oracle Identity...

CVE-2026-87286

Oracle GraalVM (component: Compiler ), version 25.0.4.1 , is affected by a vulnerability that allows an unauthenticated attacker with network access via HTTP to achieve full takeover of the product. The vulnerability is rated CVSS 8.1 (HIGH) with high impact on confidentiality, integrity, and ava...

PT-2026-92973

Vulnerability in the Oracle Bills of Material product of Oracle E-Business Suite component: Setup Workbench. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Bills of Material...

PT-2026-92533

Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware component: Client Bundle. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise...

PT-2026-92864

Name of the Vulnerable Software and Affected Versions Oracle Utilities Network Management System versions 2.4.0.1.0 through 2.4.0.1.33 Oracle Utilities Network Management System versions 2.5.0.1.0 through 2.5.0.1.19 Oracle Utilities Network Management System versions 2.5.0.2.0 through 2.5.0.2.13...

PT-2026-92796

Name of the Vulnerable Software and Affected Versions Oracle Business Intelligence Enterprise Edition version 26.01.0.0.0 Description A flaw in the Platform Security component allows a high privileged attacker with network access via HTTP to compromise the system. Successful exploitation can lead...

PT-2026-92542

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft component: SQR. Supported versions that are affected are 8.61-8.63. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where PeopleSoft Enterprise PeopleTools executes...

PT-2026-92673

Name of the Vulnerable Software and Affected Versions Oracle Application Testing Suite version 13.3.0.1 Description An unauthenticated attacker with access to the infrastructure where the software executes can compromise the system. This issue requires human interaction from a person other than t...

PT-2026-92526

Name of the Vulnerable Software and Affected Versions Oracle Access Manager versions 12.2.1.4.0 Oracle Access Manager versions 14.1.2.1.0 Description A flaw in the Authentication Engine component allows a low privileged attacker with network access via HTTP to compromise the system. Successful...

PT-2026-93068

Name of the Vulnerable Software and Affected Versions Oracle Hyperion Financial Management version 11.2.26.0.000 Description A security flaw in the Security component allows a low privileged attacker with access to the physical communication segment attached to the hardware where the software...

PT-2026-92548

Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Identity...

PT-2026-92734

Name of the Vulnerable Software and Affected Versions Oracle Siebel CRM versions 17.0 through 26.7 Description A flaw in the Server Infrastructure component of the Siebel CRM Deployment product allows a low privileged attacker with access to the execution infrastructure to compromise the system...

PT-2026-92691

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle Applications Manager versions 12.2.3 through 12.2.15 Description A flaw in the Oracle Diagnostics Interfaces component of the Oracle Applications Manager allows a low privileged attacker with network access via...

PT-2026-92785

Name of the Vulnerable Software and Affected Versions Oracle Product Lifecycle Analytics version 3.6.1 Description A flaw in the Installation Issues component allows a low privileged attacker with network access via HTTP to compromise the system. Successful exploitation can lead to a full takeove...

PT-2026-92524

Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware component: Messaging Enabler. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Service...

PT-2026-92516

Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM component: Installation. Supported versions that are affected are 17.0-26.7. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Siebel CRM Deployment executes to compromise...

PT-2026-92541

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft component: Report Distribution. Supported versions that are affected are 8.61-8.63. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise...

PT-2026-92739

Name of the Vulnerable Software and Affected Versions Oracle Siebel CRM versions 17.0 through 26.7 Description A flaw in the Server Infrastructure component of the Siebel CRM Deployment product allows a low privileged attacker with access to the execution infrastructure to compromise the system...

PT-2026-92733

Name of the Vulnerable Software and Affected Versions Oracle Siebel CRM versions 17.0 through 26.7 Description A flaw in the Server Infrastructure component of the Siebel CRM Deployment product allows a low privileged attacker with network access via SQL to compromise the system. Successful...