PT-2026-62873

Vulnerability in the Oracle Public Sector Financials product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Publ...

PT-2026-63048

Name of the Vulnerable Software and Affected Versions Oracle Commerce Guided Search / Oracle Commerce Experience Manager version 11.4.0 Description A flaw in the Forge component allows an unauthenticated attacker with network access via HTTP to compromise the system. Successful exploitation can...

PT-2026-62591

Name of the Vulnerable Software and Affected Versions Oracle Managed File Transfer versions 12.2.1.4.0 and 14.1.2.0.0 Description A flaw in the MFT Runtime Server component of Oracle Fusion Middleware allows a low privileged attacker with network access via HTTP to compromise the system. Successf...

PT-2026-62589

Vulnerability in the Oracle Managed File Transfer product of Oracle Fusion Middleware component: MFT Runtime Server. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracl...

PT-2026-62973

Vulnerability in the PeopleSoft Enterprise SCM Inventory product of Oracle PeopleSoft component: Security. The supported version that is affected is 9.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise PeopleSoft Enterprise SCM Inventor...

PT-2026-62472

Name of the Vulnerable Software and Affected Versions Oracle Fusion Middleware Service Delivery Platform Messaging Enabler version 12.2.1.4.0 Oracle Fusion Middleware Service Delivery Platform Messaging Enabler version 14.1.2.0.0 Description An unauthenticated attacker with network access via HTT...

PT-2026-63030

Name of the Vulnerable Software and Affected Versions Oracle Commerce Guided Search / Oracle Commerce Experience Manager version 11.4.0 Description A flaw in the Content Acquisition System component allows an unauthenticated attacker with network access via HTTP to compromise the system. Successf...

PT-2026-63081

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle Labor Distribution versions 12.2.3 through 12.2.15 Description A flaw in the Internal Operations component allows a low privileged attacker with network access via HTTP to compromise the system. This can lead to...

PT-2026-62587

Name of the Vulnerable Software and Affected Versions Oracle Managed File Transfer versions 12.2.1.4.0 and 14.1.2.0.0 Description A flaw in the MFT Runtime Server component of Oracle Fusion Middleware allows a low privileged attacker with network access via HTTP to compromise the system. Successf...

PT-2026-62887

Vulnerability in the Oracle Transportation Execution product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

PT-2026-63169

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle Lease and Finance Management versions 12.2.14 through 12.2.15 Description A flaw in the Internal Operations component allows a high privileged attacker with network access via HTTP to compromise the system...

PT-2026-62946

Name of the Vulnerable Software and Affected Versions Oracle PeopleSoft Enterprise FIN Grants version 9.2 Description An issue in the Grants component allows an unauthenticated attacker with network access via HTTP to compromise the system. Successful exploitation can lead to unauthorized read...

PT-2026-62368

Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

SolarWinds Serv-U 15.5.4 < 2026.3 Multiple Vulnerabilities XSS

The version of SolarWinds Serv-U installed on the remote host is prior to 2026.3. It is, therefore, affected by multiple vulnerabilities as referenced in the solarwindsserv-u20263 advisory. - SolarWinds Serv-U was found to be affected by a stored cross-site scripting vulnerability that could lead...

PT-2026-63114

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle Workflow versions 12.2.3 through 12.2.15 Description A flaw in the Workflow Notification Mailer component allows an unauthenticated attacker with network access via SMTP to compromise the system. Successful...

PT-2026-61887

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 153 Firefox ESR versions prior to 140.13 Thunderbird versions prior to 153 Thunderbird versions prior to 140.13 Description A site isolation issue exists within the Networking: HTTP component. Recommendations Update...

PT-2026-61926

Name of the Vulnerable Software and Affected Versions libssh affected versions not specified Description A flaw exists where a remote authenticated client can send SSH FXP READ requests with an arbitrarily large length. This causes a libssh SFTP server to allocate excessive memory, which can lead...

PT-2026-61940

Name of the Vulnerable Software and Affected Versions libssh affected versions not specified Description A flaw exists where a malicious SFTP server can send responses for unknown request IDs. The libssh client queues these responses indefinitely, leading to unbounded memory growth and a...

CVE-2026-60547: Improper Access Control

Vulnerability in the Oracle Managed File Transfer product of Oracle Fusion Middleware component: MFT Runtime Server. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracl...

CVE-2026-60537: Missing Authentication for Critical Function

Vulnerability in the Oracle Managed File Transfer product of Oracle Fusion Middleware component: MFT Runtime Server. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracl...